java -ea -Xmx8000000000 -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc ../../../trunk/examples/toolchains/AutomizerCInline_WitnessPrinter.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf -i ../../../trunk/examples/svcomp/ssh/s3_clnt.blast.01_false-unreach-call.i.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.1.23-61f4311 [2018-11-23 12:45:19,468 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 12:45:19,470 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 12:45:19,485 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 12:45:19,486 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 12:45:19,487 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 12:45:19,488 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 12:45:19,491 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 12:45:19,493 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 12:45:19,493 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 12:45:19,497 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 12:45:19,498 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 12:45:19,499 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 12:45:19,499 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 12:45:19,502 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 12:45:19,502 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 12:45:19,504 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 12:45:19,508 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 12:45:19,513 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 12:45:19,514 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 12:45:19,516 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 12:45:19,517 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 12:45:19,522 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 12:45:19,522 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 12:45:19,522 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 12:45:19,523 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 12:45:19,526 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 12:45:19,527 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 12:45:19,529 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 12:45:19,530 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 12:45:19,530 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 12:45:19,532 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 12:45:19,532 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 12:45:19,533 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 12:45:19,533 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 12:45:19,534 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 12:45:19,534 INFO L98 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf [2018-11-23 12:45:19,549 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 12:45:19,549 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 12:45:19,550 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 12:45:19,550 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 12:45:19,551 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 12:45:19,551 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 12:45:19,551 INFO L133 SettingsManager]: * Use SBE=true [2018-11-23 12:45:19,551 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 12:45:19,551 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-23 12:45:19,552 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 12:45:19,552 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-23 12:45:19,552 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 12:45:19,552 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 12:45:19,552 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 12:45:19,553 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 12:45:19,553 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-23 12:45:19,553 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 12:45:19,553 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 12:45:19,553 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 12:45:19,554 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 12:45:19,554 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 12:45:19,554 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 12:45:19,554 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 12:45:19,554 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 12:45:19,554 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 12:45:19,555 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 12:45:19,555 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 12:45:19,555 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-23 12:45:19,555 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 12:45:19,555 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 12:45:19,556 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 12:45:19,599 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 12:45:19,611 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 12:45:19,615 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 12:45:19,616 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 12:45:19,617 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 12:45:19,617 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ssh/s3_clnt.blast.01_false-unreach-call.i.cil.c [2018-11-23 12:45:19,674 INFO L221 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4e0ca6479/9cf060ed160e4a06a976f8722846f71b/FLAG3e5e1a902 [2018-11-23 12:45:20,236 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 12:45:20,237 INFO L161 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ssh/s3_clnt.blast.01_false-unreach-call.i.cil.c [2018-11-23 12:45:20,258 INFO L355 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4e0ca6479/9cf060ed160e4a06a976f8722846f71b/FLAG3e5e1a902 [2018-11-23 12:45:20,456 INFO L363 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4e0ca6479/9cf060ed160e4a06a976f8722846f71b [2018-11-23 12:45:20,467 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 12:45:20,468 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 12:45:20,469 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 12:45:20,469 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 12:45:20,473 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 12:45:20,474 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:45:20" (1/1) ... [2018-11-23 12:45:20,477 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5b884574 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:45:20, skipping insertion in model container [2018-11-23 12:45:20,477 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:45:20" (1/1) ... [2018-11-23 12:45:20,487 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 12:45:20,572 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 12:45:21,163 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 12:45:21,179 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 12:45:21,460 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 12:45:21,486 INFO L195 MainTranslator]: Completed translation [2018-11-23 12:45:21,487 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:45:21 WrapperNode [2018-11-23 12:45:21,487 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 12:45:21,488 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 12:45:21,488 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 12:45:21,488 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 12:45:21,499 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:45:21" (1/1) ... [2018-11-23 12:45:21,525 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:45:21" (1/1) ... [2018-11-23 12:45:21,536 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 12:45:21,536 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 12:45:21,536 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 12:45:21,536 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 12:45:21,547 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:45:21" (1/1) ... [2018-11-23 12:45:21,547 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:45:21" (1/1) ... [2018-11-23 12:45:21,561 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:45:21" (1/1) ... [2018-11-23 12:45:21,561 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:45:21" (1/1) ... [2018-11-23 12:45:21,670 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:45:21" (1/1) ... [2018-11-23 12:45:21,687 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:45:21" (1/1) ... [2018-11-23 12:45:21,696 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:45:21" (1/1) ... [2018-11-23 12:45:21,704 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 12:45:21,705 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 12:45:21,705 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 12:45:21,705 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 12:45:21,706 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:45:21" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 12:45:21,782 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 12:45:21,783 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 12:45:21,783 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 12:45:21,783 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 12:45:21,783 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-23 12:45:21,783 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 12:45:21,784 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-23 12:45:21,784 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 12:45:21,784 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-23 12:45:21,784 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 12:45:21,786 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 12:45:21,786 INFO L130 BoogieDeclarations]: Found specification of procedure ssl3_connect [2018-11-23 12:45:21,786 INFO L138 BoogieDeclarations]: Found implementation of procedure ssl3_connect [2018-11-23 12:45:21,786 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 12:45:21,787 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 12:45:22,182 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 12:45:22,182 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 12:45:24,531 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 12:45:24,532 INFO L280 CfgBuilder]: Removed 1 assue(true) statements. [2018-11-23 12:45:24,532 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:45:24 BoogieIcfgContainer [2018-11-23 12:45:24,533 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 12:45:24,534 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 12:45:24,534 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 12:45:24,537 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 12:45:24,538 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 12:45:20" (1/3) ... [2018-11-23 12:45:24,539 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4ec455f3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:45:24, skipping insertion in model container [2018-11-23 12:45:24,539 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:45:21" (2/3) ... [2018-11-23 12:45:24,539 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4ec455f3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:45:24, skipping insertion in model container [2018-11-23 12:45:24,540 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:45:24" (3/3) ... [2018-11-23 12:45:24,541 INFO L112 eAbstractionObserver]: Analyzing ICFG s3_clnt.blast.01_false-unreach-call.i.cil.c [2018-11-23 12:45:24,552 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 12:45:24,560 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 12:45:24,579 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 12:45:24,613 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 12:45:24,614 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 12:45:24,614 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 12:45:24,614 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 12:45:24,614 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 12:45:24,615 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 12:45:24,615 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 12:45:24,615 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 12:45:24,615 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 12:45:24,638 INFO L276 IsEmpty]: Start isEmpty. Operand 140 states. [2018-11-23 12:45:24,647 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2018-11-23 12:45:24,647 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:45:24,648 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:45:24,653 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:45:24,660 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:45:24,660 INFO L82 PathProgramCache]: Analyzing trace with hash -1513562951, now seen corresponding path program 1 times [2018-11-23 12:45:24,662 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:45:24,662 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:45:24,714 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:24,714 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:45:24,714 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:24,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:45:25,168 INFO L256 TraceCheckUtils]: 0: Hoare triple {143#true} call ULTIMATE.init(); {143#true} is VALID [2018-11-23 12:45:25,173 INFO L273 TraceCheckUtils]: 1: Hoare triple {143#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {143#true} is VALID [2018-11-23 12:45:25,174 INFO L273 TraceCheckUtils]: 2: Hoare triple {143#true} assume true; {143#true} is VALID [2018-11-23 12:45:25,174 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {143#true} {143#true} #542#return; {143#true} is VALID [2018-11-23 12:45:25,175 INFO L256 TraceCheckUtils]: 4: Hoare triple {143#true} call #t~ret139 := main(); {143#true} is VALID [2018-11-23 12:45:25,175 INFO L273 TraceCheckUtils]: 5: Hoare triple {143#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {143#true} is VALID [2018-11-23 12:45:25,176 INFO L256 TraceCheckUtils]: 6: Hoare triple {143#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {143#true} is VALID [2018-11-23 12:45:25,190 INFO L273 TraceCheckUtils]: 7: Hoare triple {143#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:25,203 INFO L273 TraceCheckUtils]: 8: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:25,214 INFO L273 TraceCheckUtils]: 9: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:25,230 INFO L273 TraceCheckUtils]: 10: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:25,244 INFO L273 TraceCheckUtils]: 11: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !false; {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:25,254 INFO L273 TraceCheckUtils]: 12: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:25,263 INFO L273 TraceCheckUtils]: 13: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:25,278 INFO L273 TraceCheckUtils]: 14: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:25,293 INFO L273 TraceCheckUtils]: 15: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:25,303 INFO L273 TraceCheckUtils]: 16: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:25,307 INFO L273 TraceCheckUtils]: 17: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:25,308 INFO L273 TraceCheckUtils]: 18: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:25,327 INFO L273 TraceCheckUtils]: 19: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:25,336 INFO L273 TraceCheckUtils]: 20: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:25,336 INFO L273 TraceCheckUtils]: 21: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:25,337 INFO L273 TraceCheckUtils]: 22: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:25,338 INFO L273 TraceCheckUtils]: 23: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:25,355 INFO L273 TraceCheckUtils]: 24: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:25,371 INFO L273 TraceCheckUtils]: 25: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:25,373 INFO L273 TraceCheckUtils]: 26: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume 4432 == #t~mem36;havoc #t~mem36; {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:25,373 INFO L273 TraceCheckUtils]: 27: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:25,376 INFO L273 TraceCheckUtils]: 28: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume 5 == ~blastFlag~0; {144#false} is VALID [2018-11-23 12:45:25,376 INFO L273 TraceCheckUtils]: 29: Hoare triple {144#false} assume !false; {144#false} is VALID [2018-11-23 12:45:25,384 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:45:25,387 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:45:25,387 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:45:25,392 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 30 [2018-11-23 12:45:25,395 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:45:25,398 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 12:45:25,623 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 30 edges. 30 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:45:25,623 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:45:25,633 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:45:25,634 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:45:25,637 INFO L87 Difference]: Start difference. First operand 140 states. Second operand 3 states. [2018-11-23 12:45:26,734 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:26,734 INFO L93 Difference]: Finished difference Result 385 states and 637 transitions. [2018-11-23 12:45:26,734 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:45:26,735 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 30 [2018-11-23 12:45:26,735 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:45:26,736 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:45:26,760 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 637 transitions. [2018-11-23 12:45:26,760 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:45:26,774 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 637 transitions. [2018-11-23 12:45:26,774 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 637 transitions. [2018-11-23 12:45:27,887 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 637 edges. 637 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:45:27,914 INFO L225 Difference]: With dead ends: 385 [2018-11-23 12:45:27,915 INFO L226 Difference]: Without dead ends: 223 [2018-11-23 12:45:27,920 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:45:27,941 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2018-11-23 12:45:28,076 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 223. [2018-11-23 12:45:28,076 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:45:28,077 INFO L82 GeneralOperation]: Start isEquivalent. First operand 223 states. Second operand 223 states. [2018-11-23 12:45:28,077 INFO L74 IsIncluded]: Start isIncluded. First operand 223 states. Second operand 223 states. [2018-11-23 12:45:28,077 INFO L87 Difference]: Start difference. First operand 223 states. Second operand 223 states. [2018-11-23 12:45:28,094 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:28,095 INFO L93 Difference]: Finished difference Result 223 states and 327 transitions. [2018-11-23 12:45:28,095 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 327 transitions. [2018-11-23 12:45:28,098 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:45:28,098 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:45:28,098 INFO L74 IsIncluded]: Start isIncluded. First operand 223 states. Second operand 223 states. [2018-11-23 12:45:28,099 INFO L87 Difference]: Start difference. First operand 223 states. Second operand 223 states. [2018-11-23 12:45:28,114 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:28,114 INFO L93 Difference]: Finished difference Result 223 states and 327 transitions. [2018-11-23 12:45:28,115 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 327 transitions. [2018-11-23 12:45:28,117 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:45:28,117 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:45:28,117 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:45:28,118 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:45:28,118 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 223 states. [2018-11-23 12:45:28,131 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 223 states to 223 states and 327 transitions. [2018-11-23 12:45:28,133 INFO L78 Accepts]: Start accepts. Automaton has 223 states and 327 transitions. Word has length 30 [2018-11-23 12:45:28,133 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:45:28,134 INFO L480 AbstractCegarLoop]: Abstraction has 223 states and 327 transitions. [2018-11-23 12:45:28,134 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:45:28,134 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 327 transitions. [2018-11-23 12:45:28,136 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-11-23 12:45:28,136 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:45:28,136 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:45:28,137 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:45:28,137 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:45:28,137 INFO L82 PathProgramCache]: Analyzing trace with hash -959560751, now seen corresponding path program 1 times [2018-11-23 12:45:28,137 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:45:28,138 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:45:28,140 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:28,140 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:45:28,140 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:28,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:45:28,348 INFO L256 TraceCheckUtils]: 0: Hoare triple {1306#true} call ULTIMATE.init(); {1306#true} is VALID [2018-11-23 12:45:28,348 INFO L273 TraceCheckUtils]: 1: Hoare triple {1306#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {1306#true} is VALID [2018-11-23 12:45:28,349 INFO L273 TraceCheckUtils]: 2: Hoare triple {1306#true} assume true; {1306#true} is VALID [2018-11-23 12:45:28,349 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1306#true} {1306#true} #542#return; {1306#true} is VALID [2018-11-23 12:45:28,349 INFO L256 TraceCheckUtils]: 4: Hoare triple {1306#true} call #t~ret139 := main(); {1306#true} is VALID [2018-11-23 12:45:28,349 INFO L273 TraceCheckUtils]: 5: Hoare triple {1306#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {1306#true} is VALID [2018-11-23 12:45:28,350 INFO L256 TraceCheckUtils]: 6: Hoare triple {1306#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {1306#true} is VALID [2018-11-23 12:45:28,350 INFO L273 TraceCheckUtils]: 7: Hoare triple {1306#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {1306#true} is VALID [2018-11-23 12:45:28,350 INFO L273 TraceCheckUtils]: 8: Hoare triple {1306#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {1306#true} is VALID [2018-11-23 12:45:28,351 INFO L273 TraceCheckUtils]: 9: Hoare triple {1306#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {1306#true} is VALID [2018-11-23 12:45:28,351 INFO L273 TraceCheckUtils]: 10: Hoare triple {1306#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {1306#true} is VALID [2018-11-23 12:45:28,351 INFO L273 TraceCheckUtils]: 11: Hoare triple {1306#true} assume !false; {1306#true} is VALID [2018-11-23 12:45:28,351 INFO L273 TraceCheckUtils]: 12: Hoare triple {1306#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {1306#true} is VALID [2018-11-23 12:45:28,352 INFO L273 TraceCheckUtils]: 13: Hoare triple {1306#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1306#true} is VALID [2018-11-23 12:45:28,352 INFO L273 TraceCheckUtils]: 14: Hoare triple {1306#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {1306#true} is VALID [2018-11-23 12:45:28,352 INFO L273 TraceCheckUtils]: 15: Hoare triple {1306#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {1306#true} is VALID [2018-11-23 12:45:28,352 INFO L273 TraceCheckUtils]: 16: Hoare triple {1306#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {1306#true} is VALID [2018-11-23 12:45:28,353 INFO L273 TraceCheckUtils]: 17: Hoare triple {1306#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {1306#true} is VALID [2018-11-23 12:45:28,353 INFO L273 TraceCheckUtils]: 18: Hoare triple {1306#true} assume 4368 == #t~mem28;havoc #t~mem28; {1306#true} is VALID [2018-11-23 12:45:28,353 INFO L273 TraceCheckUtils]: 19: Hoare triple {1306#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {1306#true} is VALID [2018-11-23 12:45:28,355 INFO L273 TraceCheckUtils]: 20: Hoare triple {1306#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:28,356 INFO L273 TraceCheckUtils]: 21: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:28,357 INFO L273 TraceCheckUtils]: 22: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:28,358 INFO L273 TraceCheckUtils]: 23: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:28,359 INFO L273 TraceCheckUtils]: 24: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:28,359 INFO L273 TraceCheckUtils]: 25: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} ~skip~0 := 0; {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:28,361 INFO L273 TraceCheckUtils]: 26: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !false; {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:28,361 INFO L273 TraceCheckUtils]: 27: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:28,364 INFO L273 TraceCheckUtils]: 28: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:28,364 INFO L273 TraceCheckUtils]: 29: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:28,367 INFO L273 TraceCheckUtils]: 30: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:28,387 INFO L273 TraceCheckUtils]: 31: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:28,399 INFO L273 TraceCheckUtils]: 32: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:28,400 INFO L273 TraceCheckUtils]: 33: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:28,400 INFO L273 TraceCheckUtils]: 34: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:28,401 INFO L273 TraceCheckUtils]: 35: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:28,401 INFO L273 TraceCheckUtils]: 36: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:28,402 INFO L273 TraceCheckUtils]: 37: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:28,402 INFO L273 TraceCheckUtils]: 38: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:28,403 INFO L273 TraceCheckUtils]: 39: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:28,403 INFO L273 TraceCheckUtils]: 40: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:28,404 INFO L273 TraceCheckUtils]: 41: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume 4432 == #t~mem36;havoc #t~mem36; {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:28,405 INFO L273 TraceCheckUtils]: 42: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 12:45:28,406 INFO L273 TraceCheckUtils]: 43: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume 5 == ~blastFlag~0; {1307#false} is VALID [2018-11-23 12:45:28,406 INFO L273 TraceCheckUtils]: 44: Hoare triple {1307#false} assume !false; {1307#false} is VALID [2018-11-23 12:45:28,411 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:45:28,411 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:45:28,411 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:45:28,413 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 45 [2018-11-23 12:45:28,413 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:45:28,414 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 12:45:28,501 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:45:28,501 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:45:28,501 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:45:28,501 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:45:28,501 INFO L87 Difference]: Start difference. First operand 223 states and 327 transitions. Second operand 3 states. [2018-11-23 12:45:29,730 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:29,730 INFO L93 Difference]: Finished difference Result 432 states and 642 transitions. [2018-11-23 12:45:29,730 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:45:29,730 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 45 [2018-11-23 12:45:29,731 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:45:29,731 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:45:29,738 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 492 transitions. [2018-11-23 12:45:29,738 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:45:29,744 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 492 transitions. [2018-11-23 12:45:29,745 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 492 transitions. [2018-11-23 12:45:30,591 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 492 edges. 492 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:45:30,604 INFO L225 Difference]: With dead ends: 432 [2018-11-23 12:45:30,604 INFO L226 Difference]: Without dead ends: 325 [2018-11-23 12:45:30,606 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:45:30,607 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2018-11-23 12:45:30,791 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 325. [2018-11-23 12:45:30,792 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:45:30,792 INFO L82 GeneralOperation]: Start isEquivalent. First operand 325 states. Second operand 325 states. [2018-11-23 12:45:30,792 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand 325 states. [2018-11-23 12:45:30,792 INFO L87 Difference]: Start difference. First operand 325 states. Second operand 325 states. [2018-11-23 12:45:30,806 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:30,806 INFO L93 Difference]: Finished difference Result 325 states and 476 transitions. [2018-11-23 12:45:30,806 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 476 transitions. [2018-11-23 12:45:30,807 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:45:30,808 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:45:30,808 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand 325 states. [2018-11-23 12:45:30,808 INFO L87 Difference]: Start difference. First operand 325 states. Second operand 325 states. [2018-11-23 12:45:30,821 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:30,822 INFO L93 Difference]: Finished difference Result 325 states and 476 transitions. [2018-11-23 12:45:30,822 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 476 transitions. [2018-11-23 12:45:30,823 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:45:30,823 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:45:30,823 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:45:30,823 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:45:30,823 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 325 states. [2018-11-23 12:45:30,837 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 325 states to 325 states and 476 transitions. [2018-11-23 12:45:30,837 INFO L78 Accepts]: Start accepts. Automaton has 325 states and 476 transitions. Word has length 45 [2018-11-23 12:45:30,837 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:45:30,837 INFO L480 AbstractCegarLoop]: Abstraction has 325 states and 476 transitions. [2018-11-23 12:45:30,838 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:45:30,838 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 476 transitions. [2018-11-23 12:45:30,839 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2018-11-23 12:45:30,840 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:45:30,840 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:45:30,840 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:45:30,840 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:45:30,840 INFO L82 PathProgramCache]: Analyzing trace with hash -1822634295, now seen corresponding path program 1 times [2018-11-23 12:45:30,841 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:45:30,841 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:45:30,842 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:30,843 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:45:30,843 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:30,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:45:31,076 INFO L256 TraceCheckUtils]: 0: Hoare triple {2845#true} call ULTIMATE.init(); {2845#true} is VALID [2018-11-23 12:45:31,076 INFO L273 TraceCheckUtils]: 1: Hoare triple {2845#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {2845#true} is VALID [2018-11-23 12:45:31,077 INFO L273 TraceCheckUtils]: 2: Hoare triple {2845#true} assume true; {2845#true} is VALID [2018-11-23 12:45:31,077 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {2845#true} {2845#true} #542#return; {2845#true} is VALID [2018-11-23 12:45:31,077 INFO L256 TraceCheckUtils]: 4: Hoare triple {2845#true} call #t~ret139 := main(); {2845#true} is VALID [2018-11-23 12:45:31,077 INFO L273 TraceCheckUtils]: 5: Hoare triple {2845#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {2845#true} is VALID [2018-11-23 12:45:31,078 INFO L256 TraceCheckUtils]: 6: Hoare triple {2845#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {2845#true} is VALID [2018-11-23 12:45:31,078 INFO L273 TraceCheckUtils]: 7: Hoare triple {2845#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 12:45:31,078 INFO L273 TraceCheckUtils]: 8: Hoare triple {2845#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {2845#true} is VALID [2018-11-23 12:45:31,079 INFO L273 TraceCheckUtils]: 9: Hoare triple {2845#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {2845#true} is VALID [2018-11-23 12:45:31,079 INFO L273 TraceCheckUtils]: 10: Hoare triple {2845#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {2845#true} is VALID [2018-11-23 12:45:31,079 INFO L273 TraceCheckUtils]: 11: Hoare triple {2845#true} assume !false; {2845#true} is VALID [2018-11-23 12:45:31,079 INFO L273 TraceCheckUtils]: 12: Hoare triple {2845#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 12:45:31,080 INFO L273 TraceCheckUtils]: 13: Hoare triple {2845#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 12:45:31,080 INFO L273 TraceCheckUtils]: 14: Hoare triple {2845#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 12:45:31,080 INFO L273 TraceCheckUtils]: 15: Hoare triple {2845#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 12:45:31,081 INFO L273 TraceCheckUtils]: 16: Hoare triple {2845#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 12:45:31,081 INFO L273 TraceCheckUtils]: 17: Hoare triple {2845#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 12:45:31,081 INFO L273 TraceCheckUtils]: 18: Hoare triple {2845#true} assume 4368 == #t~mem28;havoc #t~mem28; {2845#true} is VALID [2018-11-23 12:45:31,081 INFO L273 TraceCheckUtils]: 19: Hoare triple {2845#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {2845#true} is VALID [2018-11-23 12:45:31,082 INFO L273 TraceCheckUtils]: 20: Hoare triple {2845#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {2845#true} is VALID [2018-11-23 12:45:31,082 INFO L273 TraceCheckUtils]: 21: Hoare triple {2845#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 12:45:31,082 INFO L273 TraceCheckUtils]: 22: Hoare triple {2845#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {2845#true} is VALID [2018-11-23 12:45:31,082 INFO L273 TraceCheckUtils]: 23: Hoare triple {2845#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {2845#true} is VALID [2018-11-23 12:45:31,083 INFO L273 TraceCheckUtils]: 24: Hoare triple {2845#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {2845#true} is VALID [2018-11-23 12:45:31,083 INFO L273 TraceCheckUtils]: 25: Hoare triple {2845#true} ~skip~0 := 0; {2845#true} is VALID [2018-11-23 12:45:31,083 INFO L273 TraceCheckUtils]: 26: Hoare triple {2845#true} assume !false; {2845#true} is VALID [2018-11-23 12:45:31,083 INFO L273 TraceCheckUtils]: 27: Hoare triple {2845#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 12:45:31,084 INFO L273 TraceCheckUtils]: 28: Hoare triple {2845#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 12:45:31,084 INFO L273 TraceCheckUtils]: 29: Hoare triple {2845#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 12:45:31,084 INFO L273 TraceCheckUtils]: 30: Hoare triple {2845#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 12:45:31,085 INFO L273 TraceCheckUtils]: 31: Hoare triple {2845#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 12:45:31,085 INFO L273 TraceCheckUtils]: 32: Hoare triple {2845#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 12:45:31,085 INFO L273 TraceCheckUtils]: 33: Hoare triple {2845#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 12:45:31,085 INFO L273 TraceCheckUtils]: 34: Hoare triple {2845#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 12:45:31,086 INFO L273 TraceCheckUtils]: 35: Hoare triple {2845#true} assume 4384 == #t~mem30;havoc #t~mem30; {2845#true} is VALID [2018-11-23 12:45:31,086 INFO L273 TraceCheckUtils]: 36: Hoare triple {2845#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {2845#true} is VALID [2018-11-23 12:45:31,086 INFO L273 TraceCheckUtils]: 37: Hoare triple {2845#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {2845#true} is VALID [2018-11-23 12:45:31,087 INFO L273 TraceCheckUtils]: 38: Hoare triple {2845#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 12:45:31,090 INFO L273 TraceCheckUtils]: 39: Hoare triple {2845#true} assume 0 != #t~mem69;havoc #t~mem69;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:31,091 INFO L273 TraceCheckUtils]: 40: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:31,093 INFO L273 TraceCheckUtils]: 41: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:31,093 INFO L273 TraceCheckUtils]: 42: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:31,095 INFO L273 TraceCheckUtils]: 43: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} ~skip~0 := 0; {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:31,095 INFO L273 TraceCheckUtils]: 44: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !false; {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:31,097 INFO L273 TraceCheckUtils]: 45: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:31,111 INFO L273 TraceCheckUtils]: 46: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:31,113 INFO L273 TraceCheckUtils]: 47: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:31,113 INFO L273 TraceCheckUtils]: 48: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:31,115 INFO L273 TraceCheckUtils]: 49: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:31,115 INFO L273 TraceCheckUtils]: 50: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:31,117 INFO L273 TraceCheckUtils]: 51: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:31,119 INFO L273 TraceCheckUtils]: 52: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:31,124 INFO L273 TraceCheckUtils]: 53: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:31,124 INFO L273 TraceCheckUtils]: 54: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:31,124 INFO L273 TraceCheckUtils]: 55: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:31,125 INFO L273 TraceCheckUtils]: 56: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:31,125 INFO L273 TraceCheckUtils]: 57: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:31,126 INFO L273 TraceCheckUtils]: 58: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {2848#(= 4560 |ssl3_connect_#t~mem36|)} is VALID [2018-11-23 12:45:31,126 INFO L273 TraceCheckUtils]: 59: Hoare triple {2848#(= 4560 |ssl3_connect_#t~mem36|)} assume 4432 == #t~mem36;havoc #t~mem36; {2846#false} is VALID [2018-11-23 12:45:31,126 INFO L273 TraceCheckUtils]: 60: Hoare triple {2846#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {2846#false} is VALID [2018-11-23 12:45:31,127 INFO L273 TraceCheckUtils]: 61: Hoare triple {2846#false} assume 5 == ~blastFlag~0; {2846#false} is VALID [2018-11-23 12:45:31,127 INFO L273 TraceCheckUtils]: 62: Hoare triple {2846#false} assume !false; {2846#false} is VALID [2018-11-23 12:45:31,137 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 12:45:31,137 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:45:31,137 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:45:31,138 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 63 [2018-11-23 12:45:31,138 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:45:31,138 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:45:31,220 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:45:31,220 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:45:31,220 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:45:31,221 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:45:31,221 INFO L87 Difference]: Start difference. First operand 325 states and 476 transitions. Second operand 4 states. [2018-11-23 12:45:33,065 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:33,066 INFO L93 Difference]: Finished difference Result 825 states and 1216 transitions. [2018-11-23 12:45:33,066 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:45:33,066 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 63 [2018-11-23 12:45:33,066 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:45:33,067 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:45:33,073 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 481 transitions. [2018-11-23 12:45:33,073 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:45:33,079 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 481 transitions. [2018-11-23 12:45:33,079 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 481 transitions. [2018-11-23 12:45:33,816 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 481 edges. 481 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:45:33,838 INFO L225 Difference]: With dead ends: 825 [2018-11-23 12:45:33,838 INFO L226 Difference]: Without dead ends: 513 [2018-11-23 12:45:33,840 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:45:33,841 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 513 states. [2018-11-23 12:45:33,962 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 513 to 375. [2018-11-23 12:45:33,962 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:45:33,962 INFO L82 GeneralOperation]: Start isEquivalent. First operand 513 states. Second operand 375 states. [2018-11-23 12:45:33,962 INFO L74 IsIncluded]: Start isIncluded. First operand 513 states. Second operand 375 states. [2018-11-23 12:45:33,962 INFO L87 Difference]: Start difference. First operand 513 states. Second operand 375 states. [2018-11-23 12:45:33,982 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:33,982 INFO L93 Difference]: Finished difference Result 513 states and 755 transitions. [2018-11-23 12:45:33,982 INFO L276 IsEmpty]: Start isEmpty. Operand 513 states and 755 transitions. [2018-11-23 12:45:33,983 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:45:33,983 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:45:33,984 INFO L74 IsIncluded]: Start isIncluded. First operand 375 states. Second operand 513 states. [2018-11-23 12:45:33,984 INFO L87 Difference]: Start difference. First operand 375 states. Second operand 513 states. [2018-11-23 12:45:34,004 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:34,004 INFO L93 Difference]: Finished difference Result 513 states and 755 transitions. [2018-11-23 12:45:34,005 INFO L276 IsEmpty]: Start isEmpty. Operand 513 states and 755 transitions. [2018-11-23 12:45:34,006 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:45:34,006 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:45:34,006 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:45:34,007 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:45:34,007 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 375 states. [2018-11-23 12:45:34,018 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 375 states to 375 states and 562 transitions. [2018-11-23 12:45:34,019 INFO L78 Accepts]: Start accepts. Automaton has 375 states and 562 transitions. Word has length 63 [2018-11-23 12:45:34,019 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:45:34,019 INFO L480 AbstractCegarLoop]: Abstraction has 375 states and 562 transitions. [2018-11-23 12:45:34,019 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:45:34,019 INFO L276 IsEmpty]: Start isEmpty. Operand 375 states and 562 transitions. [2018-11-23 12:45:34,021 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2018-11-23 12:45:34,021 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:45:34,021 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:45:34,021 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:45:34,021 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:45:34,022 INFO L82 PathProgramCache]: Analyzing trace with hash -1956647801, now seen corresponding path program 1 times [2018-11-23 12:45:34,022 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:45:34,022 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:45:34,023 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:34,024 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:45:34,024 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:34,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:45:34,163 INFO L256 TraceCheckUtils]: 0: Hoare triple {5273#true} call ULTIMATE.init(); {5273#true} is VALID [2018-11-23 12:45:34,164 INFO L273 TraceCheckUtils]: 1: Hoare triple {5273#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {5273#true} is VALID [2018-11-23 12:45:34,164 INFO L273 TraceCheckUtils]: 2: Hoare triple {5273#true} assume true; {5273#true} is VALID [2018-11-23 12:45:34,164 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {5273#true} {5273#true} #542#return; {5273#true} is VALID [2018-11-23 12:45:34,165 INFO L256 TraceCheckUtils]: 4: Hoare triple {5273#true} call #t~ret139 := main(); {5273#true} is VALID [2018-11-23 12:45:34,165 INFO L273 TraceCheckUtils]: 5: Hoare triple {5273#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {5273#true} is VALID [2018-11-23 12:45:34,165 INFO L256 TraceCheckUtils]: 6: Hoare triple {5273#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {5273#true} is VALID [2018-11-23 12:45:34,165 INFO L273 TraceCheckUtils]: 7: Hoare triple {5273#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 12:45:34,166 INFO L273 TraceCheckUtils]: 8: Hoare triple {5273#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {5273#true} is VALID [2018-11-23 12:45:34,166 INFO L273 TraceCheckUtils]: 9: Hoare triple {5273#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {5273#true} is VALID [2018-11-23 12:45:34,166 INFO L273 TraceCheckUtils]: 10: Hoare triple {5273#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {5273#true} is VALID [2018-11-23 12:45:34,166 INFO L273 TraceCheckUtils]: 11: Hoare triple {5273#true} assume !false; {5273#true} is VALID [2018-11-23 12:45:34,167 INFO L273 TraceCheckUtils]: 12: Hoare triple {5273#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 12:45:34,167 INFO L273 TraceCheckUtils]: 13: Hoare triple {5273#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 12:45:34,167 INFO L273 TraceCheckUtils]: 14: Hoare triple {5273#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 12:45:34,168 INFO L273 TraceCheckUtils]: 15: Hoare triple {5273#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 12:45:34,168 INFO L273 TraceCheckUtils]: 16: Hoare triple {5273#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 12:45:34,168 INFO L273 TraceCheckUtils]: 17: Hoare triple {5273#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 12:45:34,168 INFO L273 TraceCheckUtils]: 18: Hoare triple {5273#true} assume 4368 == #t~mem28;havoc #t~mem28; {5273#true} is VALID [2018-11-23 12:45:34,169 INFO L273 TraceCheckUtils]: 19: Hoare triple {5273#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {5273#true} is VALID [2018-11-23 12:45:34,169 INFO L273 TraceCheckUtils]: 20: Hoare triple {5273#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {5273#true} is VALID [2018-11-23 12:45:34,169 INFO L273 TraceCheckUtils]: 21: Hoare triple {5273#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 12:45:34,169 INFO L273 TraceCheckUtils]: 22: Hoare triple {5273#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {5273#true} is VALID [2018-11-23 12:45:34,170 INFO L273 TraceCheckUtils]: 23: Hoare triple {5273#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {5273#true} is VALID [2018-11-23 12:45:34,170 INFO L273 TraceCheckUtils]: 24: Hoare triple {5273#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {5273#true} is VALID [2018-11-23 12:45:34,170 INFO L273 TraceCheckUtils]: 25: Hoare triple {5273#true} ~skip~0 := 0; {5273#true} is VALID [2018-11-23 12:45:34,170 INFO L273 TraceCheckUtils]: 26: Hoare triple {5273#true} assume !false; {5273#true} is VALID [2018-11-23 12:45:34,171 INFO L273 TraceCheckUtils]: 27: Hoare triple {5273#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 12:45:34,171 INFO L273 TraceCheckUtils]: 28: Hoare triple {5273#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 12:45:34,171 INFO L273 TraceCheckUtils]: 29: Hoare triple {5273#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 12:45:34,171 INFO L273 TraceCheckUtils]: 30: Hoare triple {5273#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 12:45:34,171 INFO L273 TraceCheckUtils]: 31: Hoare triple {5273#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 12:45:34,172 INFO L273 TraceCheckUtils]: 32: Hoare triple {5273#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 12:45:34,172 INFO L273 TraceCheckUtils]: 33: Hoare triple {5273#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 12:45:34,172 INFO L273 TraceCheckUtils]: 34: Hoare triple {5273#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 12:45:34,172 INFO L273 TraceCheckUtils]: 35: Hoare triple {5273#true} assume 4384 == #t~mem30;havoc #t~mem30; {5273#true} is VALID [2018-11-23 12:45:34,173 INFO L273 TraceCheckUtils]: 36: Hoare triple {5273#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {5273#true} is VALID [2018-11-23 12:45:34,173 INFO L273 TraceCheckUtils]: 37: Hoare triple {5273#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {5273#true} is VALID [2018-11-23 12:45:34,173 INFO L273 TraceCheckUtils]: 38: Hoare triple {5273#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 12:45:34,178 INFO L273 TraceCheckUtils]: 39: Hoare triple {5273#true} assume !(0 != #t~mem69);havoc #t~mem69;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:34,179 INFO L273 TraceCheckUtils]: 40: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:34,180 INFO L273 TraceCheckUtils]: 41: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:34,180 INFO L273 TraceCheckUtils]: 42: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:34,182 INFO L273 TraceCheckUtils]: 43: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} ~skip~0 := 0; {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:34,182 INFO L273 TraceCheckUtils]: 44: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !false; {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:34,184 INFO L273 TraceCheckUtils]: 45: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:34,184 INFO L273 TraceCheckUtils]: 46: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:34,186 INFO L273 TraceCheckUtils]: 47: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:34,186 INFO L273 TraceCheckUtils]: 48: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:34,188 INFO L273 TraceCheckUtils]: 49: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:34,188 INFO L273 TraceCheckUtils]: 50: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:34,191 INFO L273 TraceCheckUtils]: 51: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:34,191 INFO L273 TraceCheckUtils]: 52: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:34,194 INFO L273 TraceCheckUtils]: 53: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:34,194 INFO L273 TraceCheckUtils]: 54: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {5276#(= |ssl3_connect_#t~mem32| 4400)} is VALID [2018-11-23 12:45:34,197 INFO L273 TraceCheckUtils]: 55: Hoare triple {5276#(= |ssl3_connect_#t~mem32| 4400)} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {5274#false} is VALID [2018-11-23 12:45:34,197 INFO L273 TraceCheckUtils]: 56: Hoare triple {5274#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {5274#false} is VALID [2018-11-23 12:45:34,197 INFO L273 TraceCheckUtils]: 57: Hoare triple {5274#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {5274#false} is VALID [2018-11-23 12:45:34,197 INFO L273 TraceCheckUtils]: 58: Hoare triple {5274#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {5274#false} is VALID [2018-11-23 12:45:34,197 INFO L273 TraceCheckUtils]: 59: Hoare triple {5274#false} assume 4432 == #t~mem36;havoc #t~mem36; {5274#false} is VALID [2018-11-23 12:45:34,198 INFO L273 TraceCheckUtils]: 60: Hoare triple {5274#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {5274#false} is VALID [2018-11-23 12:45:34,198 INFO L273 TraceCheckUtils]: 61: Hoare triple {5274#false} assume 5 == ~blastFlag~0; {5274#false} is VALID [2018-11-23 12:45:34,198 INFO L273 TraceCheckUtils]: 62: Hoare triple {5274#false} assume !false; {5274#false} is VALID [2018-11-23 12:45:34,203 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 12:45:34,204 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:45:34,204 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:45:34,204 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 63 [2018-11-23 12:45:34,205 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:45:34,205 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:45:34,290 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:45:34,290 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:45:34,290 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:45:34,291 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:45:34,291 INFO L87 Difference]: Start difference. First operand 375 states and 562 transitions. Second operand 4 states. [2018-11-23 12:45:35,665 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:35,665 INFO L93 Difference]: Finished difference Result 821 states and 1232 transitions. [2018-11-23 12:45:35,665 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:45:35,665 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 63 [2018-11-23 12:45:35,666 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:45:35,666 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:45:35,670 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 402 transitions. [2018-11-23 12:45:35,670 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:45:35,672 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 402 transitions. [2018-11-23 12:45:35,673 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 402 transitions. [2018-11-23 12:45:36,957 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 402 edges. 402 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:45:36,975 INFO L225 Difference]: With dead ends: 821 [2018-11-23 12:45:36,975 INFO L226 Difference]: Without dead ends: 459 [2018-11-23 12:45:36,976 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:45:36,977 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 459 states. [2018-11-23 12:45:37,112 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 459 to 415. [2018-11-23 12:45:37,113 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:45:37,113 INFO L82 GeneralOperation]: Start isEquivalent. First operand 459 states. Second operand 415 states. [2018-11-23 12:45:37,113 INFO L74 IsIncluded]: Start isIncluded. First operand 459 states. Second operand 415 states. [2018-11-23 12:45:37,113 INFO L87 Difference]: Start difference. First operand 459 states. Second operand 415 states. [2018-11-23 12:45:37,129 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:37,129 INFO L93 Difference]: Finished difference Result 459 states and 685 transitions. [2018-11-23 12:45:37,130 INFO L276 IsEmpty]: Start isEmpty. Operand 459 states and 685 transitions. [2018-11-23 12:45:37,131 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:45:37,131 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:45:37,131 INFO L74 IsIncluded]: Start isIncluded. First operand 415 states. Second operand 459 states. [2018-11-23 12:45:37,131 INFO L87 Difference]: Start difference. First operand 415 states. Second operand 459 states. [2018-11-23 12:45:37,148 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:37,148 INFO L93 Difference]: Finished difference Result 459 states and 685 transitions. [2018-11-23 12:45:37,148 INFO L276 IsEmpty]: Start isEmpty. Operand 459 states and 685 transitions. [2018-11-23 12:45:37,150 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:45:37,150 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:45:37,150 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:45:37,150 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:45:37,150 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 415 states. [2018-11-23 12:45:37,165 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 415 states to 415 states and 630 transitions. [2018-11-23 12:45:37,165 INFO L78 Accepts]: Start accepts. Automaton has 415 states and 630 transitions. Word has length 63 [2018-11-23 12:45:37,166 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:45:37,166 INFO L480 AbstractCegarLoop]: Abstraction has 415 states and 630 transitions. [2018-11-23 12:45:37,166 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:45:37,166 INFO L276 IsEmpty]: Start isEmpty. Operand 415 states and 630 transitions. [2018-11-23 12:45:37,168 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2018-11-23 12:45:37,168 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:45:37,168 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:45:37,168 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:45:37,169 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:45:37,169 INFO L82 PathProgramCache]: Analyzing trace with hash -671506196, now seen corresponding path program 1 times [2018-11-23 12:45:37,169 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:45:37,169 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:45:37,170 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:37,170 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:45:37,171 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:37,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:45:37,727 INFO L256 TraceCheckUtils]: 0: Hoare triple {7614#true} call ULTIMATE.init(); {7614#true} is VALID [2018-11-23 12:45:37,727 INFO L273 TraceCheckUtils]: 1: Hoare triple {7614#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {7614#true} is VALID [2018-11-23 12:45:37,728 INFO L273 TraceCheckUtils]: 2: Hoare triple {7614#true} assume true; {7614#true} is VALID [2018-11-23 12:45:37,728 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {7614#true} {7614#true} #542#return; {7614#true} is VALID [2018-11-23 12:45:37,729 INFO L256 TraceCheckUtils]: 4: Hoare triple {7614#true} call #t~ret139 := main(); {7614#true} is VALID [2018-11-23 12:45:37,729 INFO L273 TraceCheckUtils]: 5: Hoare triple {7614#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {7614#true} is VALID [2018-11-23 12:45:37,730 INFO L256 TraceCheckUtils]: 6: Hoare triple {7614#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {7614#true} is VALID [2018-11-23 12:45:37,730 INFO L273 TraceCheckUtils]: 7: Hoare triple {7614#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 12:45:37,730 INFO L273 TraceCheckUtils]: 8: Hoare triple {7614#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {7614#true} is VALID [2018-11-23 12:45:37,731 INFO L273 TraceCheckUtils]: 9: Hoare triple {7614#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {7614#true} is VALID [2018-11-23 12:45:37,731 INFO L273 TraceCheckUtils]: 10: Hoare triple {7614#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {7614#true} is VALID [2018-11-23 12:45:37,731 INFO L273 TraceCheckUtils]: 11: Hoare triple {7614#true} assume !false; {7614#true} is VALID [2018-11-23 12:45:37,732 INFO L273 TraceCheckUtils]: 12: Hoare triple {7614#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 12:45:37,732 INFO L273 TraceCheckUtils]: 13: Hoare triple {7614#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 12:45:37,732 INFO L273 TraceCheckUtils]: 14: Hoare triple {7614#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 12:45:37,732 INFO L273 TraceCheckUtils]: 15: Hoare triple {7614#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 12:45:37,739 INFO L273 TraceCheckUtils]: 16: Hoare triple {7614#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 12:45:37,739 INFO L273 TraceCheckUtils]: 17: Hoare triple {7614#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 12:45:37,740 INFO L273 TraceCheckUtils]: 18: Hoare triple {7614#true} assume 4368 == #t~mem28;havoc #t~mem28; {7614#true} is VALID [2018-11-23 12:45:37,740 INFO L273 TraceCheckUtils]: 19: Hoare triple {7614#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {7614#true} is VALID [2018-11-23 12:45:37,740 INFO L273 TraceCheckUtils]: 20: Hoare triple {7614#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {7614#true} is VALID [2018-11-23 12:45:37,740 INFO L273 TraceCheckUtils]: 21: Hoare triple {7614#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 12:45:37,740 INFO L273 TraceCheckUtils]: 22: Hoare triple {7614#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {7614#true} is VALID [2018-11-23 12:45:37,741 INFO L273 TraceCheckUtils]: 23: Hoare triple {7614#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {7614#true} is VALID [2018-11-23 12:45:37,741 INFO L273 TraceCheckUtils]: 24: Hoare triple {7614#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {7614#true} is VALID [2018-11-23 12:45:37,741 INFO L273 TraceCheckUtils]: 25: Hoare triple {7614#true} ~skip~0 := 0; {7614#true} is VALID [2018-11-23 12:45:37,741 INFO L273 TraceCheckUtils]: 26: Hoare triple {7614#true} assume !false; {7614#true} is VALID [2018-11-23 12:45:37,741 INFO L273 TraceCheckUtils]: 27: Hoare triple {7614#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 12:45:37,742 INFO L273 TraceCheckUtils]: 28: Hoare triple {7614#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 12:45:37,742 INFO L273 TraceCheckUtils]: 29: Hoare triple {7614#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 12:45:37,742 INFO L273 TraceCheckUtils]: 30: Hoare triple {7614#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 12:45:37,742 INFO L273 TraceCheckUtils]: 31: Hoare triple {7614#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 12:45:37,743 INFO L273 TraceCheckUtils]: 32: Hoare triple {7614#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 12:45:37,743 INFO L273 TraceCheckUtils]: 33: Hoare triple {7614#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 12:45:37,743 INFO L273 TraceCheckUtils]: 34: Hoare triple {7614#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 12:45:37,743 INFO L273 TraceCheckUtils]: 35: Hoare triple {7614#true} assume 4384 == #t~mem30;havoc #t~mem30; {7614#true} is VALID [2018-11-23 12:45:37,743 INFO L273 TraceCheckUtils]: 36: Hoare triple {7614#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {7614#true} is VALID [2018-11-23 12:45:37,744 INFO L273 TraceCheckUtils]: 37: Hoare triple {7614#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {7614#true} is VALID [2018-11-23 12:45:37,744 INFO L273 TraceCheckUtils]: 38: Hoare triple {7614#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 12:45:37,745 INFO L273 TraceCheckUtils]: 39: Hoare triple {7614#true} assume 0 != #t~mem69;havoc #t~mem69;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:37,746 INFO L273 TraceCheckUtils]: 40: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:37,749 INFO L273 TraceCheckUtils]: 41: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:37,749 INFO L273 TraceCheckUtils]: 42: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:37,751 INFO L273 TraceCheckUtils]: 43: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} ~skip~0 := 0; {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:37,751 INFO L273 TraceCheckUtils]: 44: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !false; {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:37,753 INFO L273 TraceCheckUtils]: 45: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:37,753 INFO L273 TraceCheckUtils]: 46: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:37,755 INFO L273 TraceCheckUtils]: 47: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:37,758 INFO L273 TraceCheckUtils]: 48: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:37,758 INFO L273 TraceCheckUtils]: 49: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:37,759 INFO L273 TraceCheckUtils]: 50: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:37,760 INFO L273 TraceCheckUtils]: 51: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:37,764 INFO L273 TraceCheckUtils]: 52: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:37,766 INFO L273 TraceCheckUtils]: 53: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:37,770 INFO L273 TraceCheckUtils]: 54: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:37,771 INFO L273 TraceCheckUtils]: 55: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:37,772 INFO L273 TraceCheckUtils]: 56: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:37,772 INFO L273 TraceCheckUtils]: 57: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:37,772 INFO L273 TraceCheckUtils]: 58: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:37,773 INFO L273 TraceCheckUtils]: 59: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4432 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {7617#(= 4560 |ssl3_connect_#t~mem37|)} is VALID [2018-11-23 12:45:37,774 INFO L273 TraceCheckUtils]: 60: Hoare triple {7617#(= 4560 |ssl3_connect_#t~mem37|)} assume 4433 == #t~mem37;havoc #t~mem37; {7615#false} is VALID [2018-11-23 12:45:37,774 INFO L273 TraceCheckUtils]: 61: Hoare triple {7615#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {7615#false} is VALID [2018-11-23 12:45:37,774 INFO L273 TraceCheckUtils]: 62: Hoare triple {7615#false} assume 5 == ~blastFlag~0; {7615#false} is VALID [2018-11-23 12:45:37,774 INFO L273 TraceCheckUtils]: 63: Hoare triple {7615#false} assume !false; {7615#false} is VALID [2018-11-23 12:45:37,784 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 12:45:37,784 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:45:37,784 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:45:37,785 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 64 [2018-11-23 12:45:37,785 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:45:37,785 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:45:37,862 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:45:37,862 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:45:37,862 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:45:37,863 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:45:37,863 INFO L87 Difference]: Start difference. First operand 415 states and 630 transitions. Second operand 4 states. [2018-11-23 12:45:39,975 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:39,975 INFO L93 Difference]: Finished difference Result 949 states and 1429 transitions. [2018-11-23 12:45:39,975 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:45:39,976 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 64 [2018-11-23 12:45:39,976 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:45:39,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:45:39,980 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 476 transitions. [2018-11-23 12:45:39,980 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:45:39,984 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 476 transitions. [2018-11-23 12:45:39,984 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 476 transitions. [2018-11-23 12:45:40,913 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 476 edges. 476 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:45:40,936 INFO L225 Difference]: With dead ends: 949 [2018-11-23 12:45:40,936 INFO L226 Difference]: Without dead ends: 547 [2018-11-23 12:45:40,937 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:45:40,938 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 547 states. [2018-11-23 12:45:41,319 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 547 to 417. [2018-11-23 12:45:41,319 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:45:41,319 INFO L82 GeneralOperation]: Start isEquivalent. First operand 547 states. Second operand 417 states. [2018-11-23 12:45:41,319 INFO L74 IsIncluded]: Start isIncluded. First operand 547 states. Second operand 417 states. [2018-11-23 12:45:41,319 INFO L87 Difference]: Start difference. First operand 547 states. Second operand 417 states. [2018-11-23 12:45:41,339 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:41,339 INFO L93 Difference]: Finished difference Result 547 states and 814 transitions. [2018-11-23 12:45:41,339 INFO L276 IsEmpty]: Start isEmpty. Operand 547 states and 814 transitions. [2018-11-23 12:45:41,341 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:45:41,341 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:45:41,341 INFO L74 IsIncluded]: Start isIncluded. First operand 417 states. Second operand 547 states. [2018-11-23 12:45:41,341 INFO L87 Difference]: Start difference. First operand 417 states. Second operand 547 states. [2018-11-23 12:45:41,362 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:41,362 INFO L93 Difference]: Finished difference Result 547 states and 814 transitions. [2018-11-23 12:45:41,362 INFO L276 IsEmpty]: Start isEmpty. Operand 547 states and 814 transitions. [2018-11-23 12:45:41,363 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:45:41,363 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:45:41,364 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:45:41,364 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:45:41,364 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 417 states. [2018-11-23 12:45:41,377 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 417 states to 417 states and 632 transitions. [2018-11-23 12:45:41,378 INFO L78 Accepts]: Start accepts. Automaton has 417 states and 632 transitions. Word has length 64 [2018-11-23 12:45:41,378 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:45:41,378 INFO L480 AbstractCegarLoop]: Abstraction has 417 states and 632 transitions. [2018-11-23 12:45:41,378 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:45:41,378 INFO L276 IsEmpty]: Start isEmpty. Operand 417 states and 632 transitions. [2018-11-23 12:45:41,380 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2018-11-23 12:45:41,380 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:45:41,380 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:45:41,380 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:45:41,381 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:45:41,381 INFO L82 PathProgramCache]: Analyzing trace with hash 653887364, now seen corresponding path program 1 times [2018-11-23 12:45:41,381 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:45:41,381 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:45:41,382 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:41,382 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:45:41,383 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:41,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:45:41,660 WARN L180 SmtUtils]: Spent 104.00 ms on a formula simplification. DAG size of input: 16 DAG size of output: 13 [2018-11-23 12:45:41,895 INFO L256 TraceCheckUtils]: 0: Hoare triple {10282#true} call ULTIMATE.init(); {10282#true} is VALID [2018-11-23 12:45:41,895 INFO L273 TraceCheckUtils]: 1: Hoare triple {10282#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {10282#true} is VALID [2018-11-23 12:45:41,896 INFO L273 TraceCheckUtils]: 2: Hoare triple {10282#true} assume true; {10282#true} is VALID [2018-11-23 12:45:41,896 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {10282#true} {10282#true} #542#return; {10282#true} is VALID [2018-11-23 12:45:41,896 INFO L256 TraceCheckUtils]: 4: Hoare triple {10282#true} call #t~ret139 := main(); {10282#true} is VALID [2018-11-23 12:45:41,896 INFO L273 TraceCheckUtils]: 5: Hoare triple {10282#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {10282#true} is VALID [2018-11-23 12:45:41,896 INFO L256 TraceCheckUtils]: 6: Hoare triple {10282#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {10282#true} is VALID [2018-11-23 12:45:41,896 INFO L273 TraceCheckUtils]: 7: Hoare triple {10282#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 12:45:41,897 INFO L273 TraceCheckUtils]: 8: Hoare triple {10282#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {10282#true} is VALID [2018-11-23 12:45:41,897 INFO L273 TraceCheckUtils]: 9: Hoare triple {10282#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {10282#true} is VALID [2018-11-23 12:45:41,897 INFO L273 TraceCheckUtils]: 10: Hoare triple {10282#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {10282#true} is VALID [2018-11-23 12:45:41,897 INFO L273 TraceCheckUtils]: 11: Hoare triple {10282#true} assume !false; {10282#true} is VALID [2018-11-23 12:45:41,898 INFO L273 TraceCheckUtils]: 12: Hoare triple {10282#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 12:45:41,898 INFO L273 TraceCheckUtils]: 13: Hoare triple {10282#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 12:45:41,898 INFO L273 TraceCheckUtils]: 14: Hoare triple {10282#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 12:45:41,898 INFO L273 TraceCheckUtils]: 15: Hoare triple {10282#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 12:45:41,898 INFO L273 TraceCheckUtils]: 16: Hoare triple {10282#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 12:45:41,899 INFO L273 TraceCheckUtils]: 17: Hoare triple {10282#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 12:45:41,899 INFO L273 TraceCheckUtils]: 18: Hoare triple {10282#true} assume 4368 == #t~mem28;havoc #t~mem28; {10282#true} is VALID [2018-11-23 12:45:41,899 INFO L273 TraceCheckUtils]: 19: Hoare triple {10282#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {10282#true} is VALID [2018-11-23 12:45:41,899 INFO L273 TraceCheckUtils]: 20: Hoare triple {10282#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {10282#true} is VALID [2018-11-23 12:45:41,899 INFO L273 TraceCheckUtils]: 21: Hoare triple {10282#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 12:45:41,899 INFO L273 TraceCheckUtils]: 22: Hoare triple {10282#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {10282#true} is VALID [2018-11-23 12:45:41,900 INFO L273 TraceCheckUtils]: 23: Hoare triple {10282#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {10282#true} is VALID [2018-11-23 12:45:41,900 INFO L273 TraceCheckUtils]: 24: Hoare triple {10282#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {10282#true} is VALID [2018-11-23 12:45:41,900 INFO L273 TraceCheckUtils]: 25: Hoare triple {10282#true} ~skip~0 := 0; {10282#true} is VALID [2018-11-23 12:45:41,900 INFO L273 TraceCheckUtils]: 26: Hoare triple {10282#true} assume !false; {10282#true} is VALID [2018-11-23 12:45:41,900 INFO L273 TraceCheckUtils]: 27: Hoare triple {10282#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 12:45:41,901 INFO L273 TraceCheckUtils]: 28: Hoare triple {10282#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 12:45:41,901 INFO L273 TraceCheckUtils]: 29: Hoare triple {10282#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 12:45:41,901 INFO L273 TraceCheckUtils]: 30: Hoare triple {10282#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 12:45:41,901 INFO L273 TraceCheckUtils]: 31: Hoare triple {10282#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 12:45:41,901 INFO L273 TraceCheckUtils]: 32: Hoare triple {10282#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 12:45:41,901 INFO L273 TraceCheckUtils]: 33: Hoare triple {10282#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 12:45:41,901 INFO L273 TraceCheckUtils]: 34: Hoare triple {10282#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 12:45:41,902 INFO L273 TraceCheckUtils]: 35: Hoare triple {10282#true} assume 4384 == #t~mem30;havoc #t~mem30; {10282#true} is VALID [2018-11-23 12:45:41,902 INFO L273 TraceCheckUtils]: 36: Hoare triple {10282#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {10282#true} is VALID [2018-11-23 12:45:41,902 INFO L273 TraceCheckUtils]: 37: Hoare triple {10282#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {10282#true} is VALID [2018-11-23 12:45:41,902 INFO L273 TraceCheckUtils]: 38: Hoare triple {10282#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 12:45:41,903 INFO L273 TraceCheckUtils]: 39: Hoare triple {10282#true} assume 0 != #t~mem69;havoc #t~mem69;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:41,905 INFO L273 TraceCheckUtils]: 40: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:41,905 INFO L273 TraceCheckUtils]: 41: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:41,907 INFO L273 TraceCheckUtils]: 42: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:41,907 INFO L273 TraceCheckUtils]: 43: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} ~skip~0 := 0; {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:41,910 INFO L273 TraceCheckUtils]: 44: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !false; {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:41,910 INFO L273 TraceCheckUtils]: 45: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:41,910 INFO L273 TraceCheckUtils]: 46: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:41,911 INFO L273 TraceCheckUtils]: 47: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:41,913 INFO L273 TraceCheckUtils]: 48: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:41,913 INFO L273 TraceCheckUtils]: 49: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:41,913 INFO L273 TraceCheckUtils]: 50: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:41,914 INFO L273 TraceCheckUtils]: 51: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:41,914 INFO L273 TraceCheckUtils]: 52: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:41,914 INFO L273 TraceCheckUtils]: 53: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:41,915 INFO L273 TraceCheckUtils]: 54: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:41,915 INFO L273 TraceCheckUtils]: 55: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:41,915 INFO L273 TraceCheckUtils]: 56: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:41,916 INFO L273 TraceCheckUtils]: 57: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:41,916 INFO L273 TraceCheckUtils]: 58: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:41,917 INFO L273 TraceCheckUtils]: 59: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4432 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:41,917 INFO L273 TraceCheckUtils]: 60: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4433 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {10285#(= 4560 |ssl3_connect_#t~mem38|)} is VALID [2018-11-23 12:45:41,918 INFO L273 TraceCheckUtils]: 61: Hoare triple {10285#(= 4560 |ssl3_connect_#t~mem38|)} assume 4448 == #t~mem38;havoc #t~mem38; {10283#false} is VALID [2018-11-23 12:45:41,918 INFO L273 TraceCheckUtils]: 62: Hoare triple {10283#false} assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~ret~0 := #t~nondet77;havoc #t~nondet77; {10283#false} is VALID [2018-11-23 12:45:41,919 INFO L273 TraceCheckUtils]: 63: Hoare triple {10283#false} assume 4 == ~blastFlag~0; {10283#false} is VALID [2018-11-23 12:45:41,919 INFO L273 TraceCheckUtils]: 64: Hoare triple {10283#false} assume !false; {10283#false} is VALID [2018-11-23 12:45:41,927 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 12:45:41,928 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:45:41,928 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:45:41,928 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 65 [2018-11-23 12:45:41,928 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:45:41,929 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:45:42,009 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 58 edges. 58 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:45:42,009 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:45:42,009 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:45:42,010 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:45:42,010 INFO L87 Difference]: Start difference. First operand 417 states and 632 transitions. Second operand 4 states. [2018-11-23 12:45:44,467 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:44,467 INFO L93 Difference]: Finished difference Result 951 states and 1429 transitions. [2018-11-23 12:45:44,467 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:45:44,467 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 65 [2018-11-23 12:45:44,468 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:45:44,468 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:45:44,471 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 475 transitions. [2018-11-23 12:45:44,471 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:45:44,475 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 475 transitions. [2018-11-23 12:45:44,475 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 475 transitions. [2018-11-23 12:45:45,371 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 475 edges. 475 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:45:45,390 INFO L225 Difference]: With dead ends: 951 [2018-11-23 12:45:45,390 INFO L226 Difference]: Without dead ends: 547 [2018-11-23 12:45:45,391 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:45:45,392 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 547 states. [2018-11-23 12:45:45,506 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 547 to 419. [2018-11-23 12:45:45,506 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:45:45,507 INFO L82 GeneralOperation]: Start isEquivalent. First operand 547 states. Second operand 419 states. [2018-11-23 12:45:45,507 INFO L74 IsIncluded]: Start isIncluded. First operand 547 states. Second operand 419 states. [2018-11-23 12:45:45,507 INFO L87 Difference]: Start difference. First operand 547 states. Second operand 419 states. [2018-11-23 12:45:45,530 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:45,530 INFO L93 Difference]: Finished difference Result 547 states and 812 transitions. [2018-11-23 12:45:45,530 INFO L276 IsEmpty]: Start isEmpty. Operand 547 states and 812 transitions. [2018-11-23 12:45:45,532 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:45:45,532 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:45:45,532 INFO L74 IsIncluded]: Start isIncluded. First operand 419 states. Second operand 547 states. [2018-11-23 12:45:45,532 INFO L87 Difference]: Start difference. First operand 419 states. Second operand 547 states. [2018-11-23 12:45:45,552 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:45,553 INFO L93 Difference]: Finished difference Result 547 states and 812 transitions. [2018-11-23 12:45:45,553 INFO L276 IsEmpty]: Start isEmpty. Operand 547 states and 812 transitions. [2018-11-23 12:45:45,554 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:45:45,554 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:45:45,554 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:45:45,554 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:45:45,555 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 419 states. [2018-11-23 12:45:45,569 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 419 states to 419 states and 634 transitions. [2018-11-23 12:45:45,570 INFO L78 Accepts]: Start accepts. Automaton has 419 states and 634 transitions. Word has length 65 [2018-11-23 12:45:45,570 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:45:45,570 INFO L480 AbstractCegarLoop]: Abstraction has 419 states and 634 transitions. [2018-11-23 12:45:45,570 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:45:45,570 INFO L276 IsEmpty]: Start isEmpty. Operand 419 states and 634 transitions. [2018-11-23 12:45:45,571 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2018-11-23 12:45:45,572 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:45:45,572 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:45:45,572 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:45:45,572 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:45:45,572 INFO L82 PathProgramCache]: Analyzing trace with hash -1208805305, now seen corresponding path program 1 times [2018-11-23 12:45:45,572 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:45:45,573 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:45:45,575 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:45,575 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:45:45,576 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:45,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:45:45,881 WARN L180 SmtUtils]: Spent 102.00 ms on a formula simplification. DAG size of input: 16 DAG size of output: 13 [2018-11-23 12:45:46,211 INFO L256 TraceCheckUtils]: 0: Hoare triple {12954#true} call ULTIMATE.init(); {12954#true} is VALID [2018-11-23 12:45:46,211 INFO L273 TraceCheckUtils]: 1: Hoare triple {12954#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {12954#true} is VALID [2018-11-23 12:45:46,211 INFO L273 TraceCheckUtils]: 2: Hoare triple {12954#true} assume true; {12954#true} is VALID [2018-11-23 12:45:46,212 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {12954#true} {12954#true} #542#return; {12954#true} is VALID [2018-11-23 12:45:46,212 INFO L256 TraceCheckUtils]: 4: Hoare triple {12954#true} call #t~ret139 := main(); {12954#true} is VALID [2018-11-23 12:45:46,212 INFO L273 TraceCheckUtils]: 5: Hoare triple {12954#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {12954#true} is VALID [2018-11-23 12:45:46,212 INFO L256 TraceCheckUtils]: 6: Hoare triple {12954#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {12954#true} is VALID [2018-11-23 12:45:46,212 INFO L273 TraceCheckUtils]: 7: Hoare triple {12954#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 12:45:46,213 INFO L273 TraceCheckUtils]: 8: Hoare triple {12954#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {12954#true} is VALID [2018-11-23 12:45:46,213 INFO L273 TraceCheckUtils]: 9: Hoare triple {12954#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {12954#true} is VALID [2018-11-23 12:45:46,213 INFO L273 TraceCheckUtils]: 10: Hoare triple {12954#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {12954#true} is VALID [2018-11-23 12:45:46,213 INFO L273 TraceCheckUtils]: 11: Hoare triple {12954#true} assume !false; {12954#true} is VALID [2018-11-23 12:45:46,213 INFO L273 TraceCheckUtils]: 12: Hoare triple {12954#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 12:45:46,214 INFO L273 TraceCheckUtils]: 13: Hoare triple {12954#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 12:45:46,214 INFO L273 TraceCheckUtils]: 14: Hoare triple {12954#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 12:45:46,214 INFO L273 TraceCheckUtils]: 15: Hoare triple {12954#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 12:45:46,214 INFO L273 TraceCheckUtils]: 16: Hoare triple {12954#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 12:45:46,214 INFO L273 TraceCheckUtils]: 17: Hoare triple {12954#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 12:45:46,215 INFO L273 TraceCheckUtils]: 18: Hoare triple {12954#true} assume 4368 == #t~mem28;havoc #t~mem28; {12954#true} is VALID [2018-11-23 12:45:46,215 INFO L273 TraceCheckUtils]: 19: Hoare triple {12954#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {12954#true} is VALID [2018-11-23 12:45:46,215 INFO L273 TraceCheckUtils]: 20: Hoare triple {12954#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {12954#true} is VALID [2018-11-23 12:45:46,215 INFO L273 TraceCheckUtils]: 21: Hoare triple {12954#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 12:45:46,215 INFO L273 TraceCheckUtils]: 22: Hoare triple {12954#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {12954#true} is VALID [2018-11-23 12:45:46,215 INFO L273 TraceCheckUtils]: 23: Hoare triple {12954#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {12954#true} is VALID [2018-11-23 12:45:46,215 INFO L273 TraceCheckUtils]: 24: Hoare triple {12954#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {12954#true} is VALID [2018-11-23 12:45:46,216 INFO L273 TraceCheckUtils]: 25: Hoare triple {12954#true} ~skip~0 := 0; {12954#true} is VALID [2018-11-23 12:45:46,216 INFO L273 TraceCheckUtils]: 26: Hoare triple {12954#true} assume !false; {12954#true} is VALID [2018-11-23 12:45:46,216 INFO L273 TraceCheckUtils]: 27: Hoare triple {12954#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 12:45:46,216 INFO L273 TraceCheckUtils]: 28: Hoare triple {12954#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 12:45:46,216 INFO L273 TraceCheckUtils]: 29: Hoare triple {12954#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 12:45:46,216 INFO L273 TraceCheckUtils]: 30: Hoare triple {12954#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 12:45:46,217 INFO L273 TraceCheckUtils]: 31: Hoare triple {12954#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 12:45:46,217 INFO L273 TraceCheckUtils]: 32: Hoare triple {12954#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 12:45:46,217 INFO L273 TraceCheckUtils]: 33: Hoare triple {12954#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 12:45:46,217 INFO L273 TraceCheckUtils]: 34: Hoare triple {12954#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 12:45:46,218 INFO L273 TraceCheckUtils]: 35: Hoare triple {12954#true} assume 4384 == #t~mem30;havoc #t~mem30; {12954#true} is VALID [2018-11-23 12:45:46,218 INFO L273 TraceCheckUtils]: 36: Hoare triple {12954#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {12954#true} is VALID [2018-11-23 12:45:46,218 INFO L273 TraceCheckUtils]: 37: Hoare triple {12954#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {12954#true} is VALID [2018-11-23 12:45:46,218 INFO L273 TraceCheckUtils]: 38: Hoare triple {12954#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 12:45:46,231 INFO L273 TraceCheckUtils]: 39: Hoare triple {12954#true} assume 0 != #t~mem69;havoc #t~mem69;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:46,236 INFO L273 TraceCheckUtils]: 40: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:46,236 INFO L273 TraceCheckUtils]: 41: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:46,238 INFO L273 TraceCheckUtils]: 42: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:46,238 INFO L273 TraceCheckUtils]: 43: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} ~skip~0 := 0; {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:46,238 INFO L273 TraceCheckUtils]: 44: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !false; {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:46,240 INFO L273 TraceCheckUtils]: 45: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:46,240 INFO L273 TraceCheckUtils]: 46: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:46,245 INFO L273 TraceCheckUtils]: 47: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:46,245 INFO L273 TraceCheckUtils]: 48: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:46,247 INFO L273 TraceCheckUtils]: 49: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:46,247 INFO L273 TraceCheckUtils]: 50: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:46,249 INFO L273 TraceCheckUtils]: 51: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:46,249 INFO L273 TraceCheckUtils]: 52: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:46,252 INFO L273 TraceCheckUtils]: 53: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:46,255 INFO L273 TraceCheckUtils]: 54: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:46,255 INFO L273 TraceCheckUtils]: 55: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:46,258 INFO L273 TraceCheckUtils]: 56: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:46,258 INFO L273 TraceCheckUtils]: 57: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:46,261 INFO L273 TraceCheckUtils]: 58: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:46,261 INFO L273 TraceCheckUtils]: 59: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4432 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:46,262 INFO L273 TraceCheckUtils]: 60: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4433 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:45:46,263 INFO L273 TraceCheckUtils]: 61: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4448 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {12957#(= 4560 |ssl3_connect_#t~mem39|)} is VALID [2018-11-23 12:45:46,263 INFO L273 TraceCheckUtils]: 62: Hoare triple {12957#(= 4560 |ssl3_connect_#t~mem39|)} assume 4449 == #t~mem39;havoc #t~mem39; {12955#false} is VALID [2018-11-23 12:45:46,263 INFO L273 TraceCheckUtils]: 63: Hoare triple {12955#false} assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~ret~0 := #t~nondet77;havoc #t~nondet77; {12955#false} is VALID [2018-11-23 12:45:46,264 INFO L273 TraceCheckUtils]: 64: Hoare triple {12955#false} assume 4 == ~blastFlag~0; {12955#false} is VALID [2018-11-23 12:45:46,264 INFO L273 TraceCheckUtils]: 65: Hoare triple {12955#false} assume !false; {12955#false} is VALID [2018-11-23 12:45:46,269 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 12:45:46,269 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:45:46,269 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:45:46,270 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 66 [2018-11-23 12:45:46,270 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:45:46,270 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:45:46,331 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 59 edges. 59 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:45:46,332 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:45:46,332 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:45:46,332 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:45:46,332 INFO L87 Difference]: Start difference. First operand 419 states and 634 transitions. Second operand 4 states. [2018-11-23 12:45:48,087 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:48,087 INFO L93 Difference]: Finished difference Result 943 states and 1417 transitions. [2018-11-23 12:45:48,087 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:45:48,088 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 66 [2018-11-23 12:45:48,088 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:45:48,088 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:45:48,093 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 467 transitions. [2018-11-23 12:45:48,093 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:45:48,096 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 467 transitions. [2018-11-23 12:45:48,096 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 467 transitions. [2018-11-23 12:45:48,691 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 467 edges. 467 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:45:48,709 INFO L225 Difference]: With dead ends: 943 [2018-11-23 12:45:48,709 INFO L226 Difference]: Without dead ends: 537 [2018-11-23 12:45:48,710 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:45:48,711 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 537 states. [2018-11-23 12:45:48,885 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 537 to 421. [2018-11-23 12:45:48,885 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:45:48,886 INFO L82 GeneralOperation]: Start isEquivalent. First operand 537 states. Second operand 421 states. [2018-11-23 12:45:48,886 INFO L74 IsIncluded]: Start isIncluded. First operand 537 states. Second operand 421 states. [2018-11-23 12:45:48,886 INFO L87 Difference]: Start difference. First operand 537 states. Second operand 421 states. [2018-11-23 12:45:48,928 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:48,928 INFO L93 Difference]: Finished difference Result 537 states and 798 transitions. [2018-11-23 12:45:48,928 INFO L276 IsEmpty]: Start isEmpty. Operand 537 states and 798 transitions. [2018-11-23 12:45:48,929 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:45:48,929 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:45:48,930 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 537 states. [2018-11-23 12:45:48,930 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 537 states. [2018-11-23 12:45:48,947 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:48,947 INFO L93 Difference]: Finished difference Result 537 states and 798 transitions. [2018-11-23 12:45:48,947 INFO L276 IsEmpty]: Start isEmpty. Operand 537 states and 798 transitions. [2018-11-23 12:45:48,948 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:45:48,948 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:45:48,948 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:45:48,948 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:45:48,949 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 12:45:48,960 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 636 transitions. [2018-11-23 12:45:48,961 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 636 transitions. Word has length 66 [2018-11-23 12:45:48,961 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:45:48,961 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 636 transitions. [2018-11-23 12:45:48,961 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:45:48,961 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 636 transitions. [2018-11-23 12:45:48,963 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2018-11-23 12:45:48,963 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:45:48,963 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:45:48,963 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:45:48,964 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:45:48,964 INFO L82 PathProgramCache]: Analyzing trace with hash -784316286, now seen corresponding path program 1 times [2018-11-23 12:45:48,964 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:45:48,964 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:45:48,965 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:48,965 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:45:48,965 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:48,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:45:49,285 INFO L256 TraceCheckUtils]: 0: Hoare triple {15597#true} call ULTIMATE.init(); {15597#true} is VALID [2018-11-23 12:45:49,285 INFO L273 TraceCheckUtils]: 1: Hoare triple {15597#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {15597#true} is VALID [2018-11-23 12:45:49,286 INFO L273 TraceCheckUtils]: 2: Hoare triple {15597#true} assume true; {15597#true} is VALID [2018-11-23 12:45:49,286 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {15597#true} {15597#true} #542#return; {15597#true} is VALID [2018-11-23 12:45:49,286 INFO L256 TraceCheckUtils]: 4: Hoare triple {15597#true} call #t~ret139 := main(); {15597#true} is VALID [2018-11-23 12:45:49,287 INFO L273 TraceCheckUtils]: 5: Hoare triple {15597#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {15597#true} is VALID [2018-11-23 12:45:49,289 INFO L256 TraceCheckUtils]: 6: Hoare triple {15597#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {15597#true} is VALID [2018-11-23 12:45:49,289 INFO L273 TraceCheckUtils]: 7: Hoare triple {15597#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 12:45:49,289 INFO L273 TraceCheckUtils]: 8: Hoare triple {15597#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {15597#true} is VALID [2018-11-23 12:45:49,289 INFO L273 TraceCheckUtils]: 9: Hoare triple {15597#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {15597#true} is VALID [2018-11-23 12:45:49,290 INFO L273 TraceCheckUtils]: 10: Hoare triple {15597#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {15597#true} is VALID [2018-11-23 12:45:49,290 INFO L273 TraceCheckUtils]: 11: Hoare triple {15597#true} assume !false; {15597#true} is VALID [2018-11-23 12:45:49,290 INFO L273 TraceCheckUtils]: 12: Hoare triple {15597#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 12:45:49,290 INFO L273 TraceCheckUtils]: 13: Hoare triple {15597#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 12:45:49,290 INFO L273 TraceCheckUtils]: 14: Hoare triple {15597#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 12:45:49,290 INFO L273 TraceCheckUtils]: 15: Hoare triple {15597#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 12:45:49,291 INFO L273 TraceCheckUtils]: 16: Hoare triple {15597#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 12:45:49,291 INFO L273 TraceCheckUtils]: 17: Hoare triple {15597#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 12:45:49,291 INFO L273 TraceCheckUtils]: 18: Hoare triple {15597#true} assume 4368 == #t~mem28;havoc #t~mem28; {15597#true} is VALID [2018-11-23 12:45:49,291 INFO L273 TraceCheckUtils]: 19: Hoare triple {15597#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {15597#true} is VALID [2018-11-23 12:45:49,291 INFO L273 TraceCheckUtils]: 20: Hoare triple {15597#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {15597#true} is VALID [2018-11-23 12:45:49,291 INFO L273 TraceCheckUtils]: 21: Hoare triple {15597#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 12:45:49,292 INFO L273 TraceCheckUtils]: 22: Hoare triple {15597#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {15597#true} is VALID [2018-11-23 12:45:49,292 INFO L273 TraceCheckUtils]: 23: Hoare triple {15597#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {15597#true} is VALID [2018-11-23 12:45:49,292 INFO L273 TraceCheckUtils]: 24: Hoare triple {15597#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {15597#true} is VALID [2018-11-23 12:45:49,292 INFO L273 TraceCheckUtils]: 25: Hoare triple {15597#true} ~skip~0 := 0; {15597#true} is VALID [2018-11-23 12:45:49,292 INFO L273 TraceCheckUtils]: 26: Hoare triple {15597#true} assume !false; {15597#true} is VALID [2018-11-23 12:45:49,292 INFO L273 TraceCheckUtils]: 27: Hoare triple {15597#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 12:45:49,292 INFO L273 TraceCheckUtils]: 28: Hoare triple {15597#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 12:45:49,293 INFO L273 TraceCheckUtils]: 29: Hoare triple {15597#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 12:45:49,293 INFO L273 TraceCheckUtils]: 30: Hoare triple {15597#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 12:45:49,293 INFO L273 TraceCheckUtils]: 31: Hoare triple {15597#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 12:45:49,293 INFO L273 TraceCheckUtils]: 32: Hoare triple {15597#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 12:45:49,293 INFO L273 TraceCheckUtils]: 33: Hoare triple {15597#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 12:45:49,293 INFO L273 TraceCheckUtils]: 34: Hoare triple {15597#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 12:45:49,293 INFO L273 TraceCheckUtils]: 35: Hoare triple {15597#true} assume 4384 == #t~mem30;havoc #t~mem30; {15597#true} is VALID [2018-11-23 12:45:49,293 INFO L273 TraceCheckUtils]: 36: Hoare triple {15597#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {15597#true} is VALID [2018-11-23 12:45:49,294 INFO L273 TraceCheckUtils]: 37: Hoare triple {15597#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {15597#true} is VALID [2018-11-23 12:45:49,294 INFO L273 TraceCheckUtils]: 38: Hoare triple {15597#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 12:45:49,295 INFO L273 TraceCheckUtils]: 39: Hoare triple {15597#true} assume 0 != #t~mem69;havoc #t~mem69;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:49,298 INFO L273 TraceCheckUtils]: 40: Hoare triple {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:49,298 INFO L273 TraceCheckUtils]: 41: Hoare triple {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:49,299 INFO L273 TraceCheckUtils]: 42: Hoare triple {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:49,299 INFO L273 TraceCheckUtils]: 43: Hoare triple {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} ~skip~0 := 0; {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:49,300 INFO L273 TraceCheckUtils]: 44: Hoare triple {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !false; {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:49,300 INFO L273 TraceCheckUtils]: 45: Hoare triple {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {15600#(= |ssl3_connect_#t~mem23| 4560)} is VALID [2018-11-23 12:45:49,301 INFO L273 TraceCheckUtils]: 46: Hoare triple {15600#(= |ssl3_connect_#t~mem23| 4560)} assume 12292 == #t~mem23;havoc #t~mem23; {15598#false} is VALID [2018-11-23 12:45:49,301 INFO L273 TraceCheckUtils]: 47: Hoare triple {15598#false} call write~int(1, ~s.base, 40 + ~s.offset, 4);call write~int(4096, ~s.base, 52 + ~s.offset, 4);call #t~mem56.base, #t~mem56.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem57 := read~int(#t~mem56.base, 64 + #t~mem56.offset, 4);call write~int(1 + #t~mem57, #t~mem56.base, 64 + #t~mem56.offset, 4);havoc #t~mem56.base, #t~mem56.offset;havoc #t~mem57; {15598#false} is VALID [2018-11-23 12:45:49,301 INFO L273 TraceCheckUtils]: 48: Hoare triple {15598#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 12:45:49,301 INFO L273 TraceCheckUtils]: 49: Hoare triple {15598#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {15598#false} is VALID [2018-11-23 12:45:49,301 INFO L273 TraceCheckUtils]: 50: Hoare triple {15598#false} call #t~mem58 := read~int(~s.base, ~s.offset, 4); {15598#false} is VALID [2018-11-23 12:45:49,302 INFO L273 TraceCheckUtils]: 51: Hoare triple {15598#false} assume !(768 != ~bitwiseAnd(#t~mem58, 65280));havoc #t~mem58;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem59.base, #t~mem59.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 12:45:49,302 INFO L273 TraceCheckUtils]: 52: Hoare triple {15598#false} assume !(0 == (#t~mem59.base + #t~mem59.offset) % 4294967296);havoc #t~mem59.base, #t~mem59.offset; {15598#false} is VALID [2018-11-23 12:45:49,302 INFO L273 TraceCheckUtils]: 53: Hoare triple {15598#false} assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___4~0 := #t~nondet61;havoc #t~nondet61; {15598#false} is VALID [2018-11-23 12:45:49,302 INFO L273 TraceCheckUtils]: 54: Hoare triple {15598#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet62 && #t~nondet62 <= 2147483647;~tmp___5~0 := #t~nondet62;havoc #t~nondet62; {15598#false} is VALID [2018-11-23 12:45:49,303 INFO L273 TraceCheckUtils]: 55: Hoare triple {15598#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 60 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 60 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset;call write~int(0, ~s.base, 64 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 12:45:49,303 INFO L273 TraceCheckUtils]: 56: Hoare triple {15598#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {15598#false} is VALID [2018-11-23 12:45:49,303 INFO L273 TraceCheckUtils]: 57: Hoare triple {15598#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {15598#false} is VALID [2018-11-23 12:45:49,304 INFO L273 TraceCheckUtils]: 58: Hoare triple {15598#false} ~skip~0 := 0; {15598#false} is VALID [2018-11-23 12:45:49,304 INFO L273 TraceCheckUtils]: 59: Hoare triple {15598#false} assume !false; {15598#false} is VALID [2018-11-23 12:45:49,304 INFO L273 TraceCheckUtils]: 60: Hoare triple {15598#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 12:45:49,304 INFO L273 TraceCheckUtils]: 61: Hoare triple {15598#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 12:45:49,304 INFO L273 TraceCheckUtils]: 62: Hoare triple {15598#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 12:45:49,305 INFO L273 TraceCheckUtils]: 63: Hoare triple {15598#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 12:45:49,305 INFO L273 TraceCheckUtils]: 64: Hoare triple {15598#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 12:45:49,305 INFO L273 TraceCheckUtils]: 65: Hoare triple {15598#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 12:45:49,305 INFO L273 TraceCheckUtils]: 66: Hoare triple {15598#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 12:45:49,305 INFO L273 TraceCheckUtils]: 67: Hoare triple {15598#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 12:45:49,306 INFO L273 TraceCheckUtils]: 68: Hoare triple {15598#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 12:45:49,306 INFO L273 TraceCheckUtils]: 69: Hoare triple {15598#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 12:45:49,306 INFO L273 TraceCheckUtils]: 70: Hoare triple {15598#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 12:45:49,306 INFO L273 TraceCheckUtils]: 71: Hoare triple {15598#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 12:45:49,306 INFO L273 TraceCheckUtils]: 72: Hoare triple {15598#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 12:45:49,306 INFO L273 TraceCheckUtils]: 73: Hoare triple {15598#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 12:45:49,307 INFO L273 TraceCheckUtils]: 74: Hoare triple {15598#false} assume 4432 == #t~mem36;havoc #t~mem36; {15598#false} is VALID [2018-11-23 12:45:49,307 INFO L273 TraceCheckUtils]: 75: Hoare triple {15598#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {15598#false} is VALID [2018-11-23 12:45:49,307 INFO L273 TraceCheckUtils]: 76: Hoare triple {15598#false} assume 5 == ~blastFlag~0; {15598#false} is VALID [2018-11-23 12:45:49,307 INFO L273 TraceCheckUtils]: 77: Hoare triple {15598#false} assume !false; {15598#false} is VALID [2018-11-23 12:45:49,312 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 12:45:49,312 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:45:49,312 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:45:49,313 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 12:45:49,313 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:45:49,313 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:45:49,387 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 71 edges. 71 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:45:49,387 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:45:49,387 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:45:49,388 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:45:49,388 INFO L87 Difference]: Start difference. First operand 421 states and 636 transitions. Second operand 4 states. [2018-11-23 12:45:50,837 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:50,837 INFO L93 Difference]: Finished difference Result 943 states and 1415 transitions. [2018-11-23 12:45:50,837 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:45:50,837 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 12:45:50,837 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:45:50,837 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:45:50,839 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 465 transitions. [2018-11-23 12:45:50,840 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:45:50,842 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 465 transitions. [2018-11-23 12:45:50,842 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 465 transitions. [2018-11-23 12:45:51,959 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 465 edges. 465 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:45:51,974 INFO L225 Difference]: With dead ends: 943 [2018-11-23 12:45:51,974 INFO L226 Difference]: Without dead ends: 535 [2018-11-23 12:45:51,975 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:45:51,976 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 535 states. [2018-11-23 12:45:52,085 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 535 to 421. [2018-11-23 12:45:52,085 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:45:52,085 INFO L82 GeneralOperation]: Start isEquivalent. First operand 535 states. Second operand 421 states. [2018-11-23 12:45:52,085 INFO L74 IsIncluded]: Start isIncluded. First operand 535 states. Second operand 421 states. [2018-11-23 12:45:52,085 INFO L87 Difference]: Start difference. First operand 535 states. Second operand 421 states. [2018-11-23 12:45:52,101 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:52,101 INFO L93 Difference]: Finished difference Result 535 states and 794 transitions. [2018-11-23 12:45:52,101 INFO L276 IsEmpty]: Start isEmpty. Operand 535 states and 794 transitions. [2018-11-23 12:45:52,102 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:45:52,102 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:45:52,102 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 535 states. [2018-11-23 12:45:52,103 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 535 states. [2018-11-23 12:45:52,120 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:52,120 INFO L93 Difference]: Finished difference Result 535 states and 794 transitions. [2018-11-23 12:45:52,120 INFO L276 IsEmpty]: Start isEmpty. Operand 535 states and 794 transitions. [2018-11-23 12:45:52,121 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:45:52,121 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:45:52,121 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:45:52,121 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:45:52,122 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 12:45:52,134 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 634 transitions. [2018-11-23 12:45:52,134 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 634 transitions. Word has length 78 [2018-11-23 12:45:52,134 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:45:52,134 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 634 transitions. [2018-11-23 12:45:52,134 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:45:52,134 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 634 transitions. [2018-11-23 12:45:52,136 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2018-11-23 12:45:52,136 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:45:52,136 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:45:52,136 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:45:52,136 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:45:52,137 INFO L82 PathProgramCache]: Analyzing trace with hash -802971744, now seen corresponding path program 1 times [2018-11-23 12:45:52,137 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:45:52,137 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:45:52,138 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:52,138 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:45:52,138 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:52,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:45:52,313 INFO L256 TraceCheckUtils]: 0: Hoare triple {18234#true} call ULTIMATE.init(); {18234#true} is VALID [2018-11-23 12:45:52,314 INFO L273 TraceCheckUtils]: 1: Hoare triple {18234#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {18234#true} is VALID [2018-11-23 12:45:52,314 INFO L273 TraceCheckUtils]: 2: Hoare triple {18234#true} assume true; {18234#true} is VALID [2018-11-23 12:45:52,314 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {18234#true} {18234#true} #542#return; {18234#true} is VALID [2018-11-23 12:45:52,315 INFO L256 TraceCheckUtils]: 4: Hoare triple {18234#true} call #t~ret139 := main(); {18234#true} is VALID [2018-11-23 12:45:52,315 INFO L273 TraceCheckUtils]: 5: Hoare triple {18234#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {18234#true} is VALID [2018-11-23 12:45:52,315 INFO L256 TraceCheckUtils]: 6: Hoare triple {18234#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {18234#true} is VALID [2018-11-23 12:45:52,315 INFO L273 TraceCheckUtils]: 7: Hoare triple {18234#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 12:45:52,315 INFO L273 TraceCheckUtils]: 8: Hoare triple {18234#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {18234#true} is VALID [2018-11-23 12:45:52,316 INFO L273 TraceCheckUtils]: 9: Hoare triple {18234#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {18234#true} is VALID [2018-11-23 12:45:52,316 INFO L273 TraceCheckUtils]: 10: Hoare triple {18234#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {18234#true} is VALID [2018-11-23 12:45:52,316 INFO L273 TraceCheckUtils]: 11: Hoare triple {18234#true} assume !false; {18234#true} is VALID [2018-11-23 12:45:52,316 INFO L273 TraceCheckUtils]: 12: Hoare triple {18234#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 12:45:52,317 INFO L273 TraceCheckUtils]: 13: Hoare triple {18234#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 12:45:52,317 INFO L273 TraceCheckUtils]: 14: Hoare triple {18234#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 12:45:52,317 INFO L273 TraceCheckUtils]: 15: Hoare triple {18234#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 12:45:52,317 INFO L273 TraceCheckUtils]: 16: Hoare triple {18234#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 12:45:52,317 INFO L273 TraceCheckUtils]: 17: Hoare triple {18234#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 12:45:52,317 INFO L273 TraceCheckUtils]: 18: Hoare triple {18234#true} assume 4368 == #t~mem28;havoc #t~mem28; {18234#true} is VALID [2018-11-23 12:45:52,317 INFO L273 TraceCheckUtils]: 19: Hoare triple {18234#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {18234#true} is VALID [2018-11-23 12:45:52,318 INFO L273 TraceCheckUtils]: 20: Hoare triple {18234#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {18234#true} is VALID [2018-11-23 12:45:52,318 INFO L273 TraceCheckUtils]: 21: Hoare triple {18234#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 12:45:52,318 INFO L273 TraceCheckUtils]: 22: Hoare triple {18234#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {18234#true} is VALID [2018-11-23 12:45:52,318 INFO L273 TraceCheckUtils]: 23: Hoare triple {18234#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {18234#true} is VALID [2018-11-23 12:45:52,318 INFO L273 TraceCheckUtils]: 24: Hoare triple {18234#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {18234#true} is VALID [2018-11-23 12:45:52,318 INFO L273 TraceCheckUtils]: 25: Hoare triple {18234#true} ~skip~0 := 0; {18234#true} is VALID [2018-11-23 12:45:52,318 INFO L273 TraceCheckUtils]: 26: Hoare triple {18234#true} assume !false; {18234#true} is VALID [2018-11-23 12:45:52,318 INFO L273 TraceCheckUtils]: 27: Hoare triple {18234#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 12:45:52,319 INFO L273 TraceCheckUtils]: 28: Hoare triple {18234#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 12:45:52,319 INFO L273 TraceCheckUtils]: 29: Hoare triple {18234#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 12:45:52,319 INFO L273 TraceCheckUtils]: 30: Hoare triple {18234#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 12:45:52,319 INFO L273 TraceCheckUtils]: 31: Hoare triple {18234#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 12:45:52,319 INFO L273 TraceCheckUtils]: 32: Hoare triple {18234#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 12:45:52,320 INFO L273 TraceCheckUtils]: 33: Hoare triple {18234#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 12:45:52,320 INFO L273 TraceCheckUtils]: 34: Hoare triple {18234#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 12:45:52,320 INFO L273 TraceCheckUtils]: 35: Hoare triple {18234#true} assume 4384 == #t~mem30;havoc #t~mem30; {18234#true} is VALID [2018-11-23 12:45:52,320 INFO L273 TraceCheckUtils]: 36: Hoare triple {18234#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {18234#true} is VALID [2018-11-23 12:45:52,320 INFO L273 TraceCheckUtils]: 37: Hoare triple {18234#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {18234#true} is VALID [2018-11-23 12:45:52,321 INFO L273 TraceCheckUtils]: 38: Hoare triple {18234#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 12:45:52,333 INFO L273 TraceCheckUtils]: 39: Hoare triple {18234#true} assume 0 != #t~mem69;havoc #t~mem69;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:52,337 INFO L273 TraceCheckUtils]: 40: Hoare triple {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:52,339 INFO L273 TraceCheckUtils]: 41: Hoare triple {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:52,341 INFO L273 TraceCheckUtils]: 42: Hoare triple {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:52,341 INFO L273 TraceCheckUtils]: 43: Hoare triple {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} ~skip~0 := 0; {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:52,344 INFO L273 TraceCheckUtils]: 44: Hoare triple {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !false; {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:52,344 INFO L273 TraceCheckUtils]: 45: Hoare triple {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:52,347 INFO L273 TraceCheckUtils]: 46: Hoare triple {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {18237#(= |ssl3_connect_#t~mem24| 4560)} is VALID [2018-11-23 12:45:52,347 INFO L273 TraceCheckUtils]: 47: Hoare triple {18237#(= |ssl3_connect_#t~mem24| 4560)} assume 16384 == #t~mem24;havoc #t~mem24; {18235#false} is VALID [2018-11-23 12:45:52,347 INFO L273 TraceCheckUtils]: 48: Hoare triple {18235#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 12:45:52,347 INFO L273 TraceCheckUtils]: 49: Hoare triple {18235#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {18235#false} is VALID [2018-11-23 12:45:52,348 INFO L273 TraceCheckUtils]: 50: Hoare triple {18235#false} call #t~mem58 := read~int(~s.base, ~s.offset, 4); {18235#false} is VALID [2018-11-23 12:45:52,348 INFO L273 TraceCheckUtils]: 51: Hoare triple {18235#false} assume !(768 != ~bitwiseAnd(#t~mem58, 65280));havoc #t~mem58;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem59.base, #t~mem59.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 12:45:52,348 INFO L273 TraceCheckUtils]: 52: Hoare triple {18235#false} assume !(0 == (#t~mem59.base + #t~mem59.offset) % 4294967296);havoc #t~mem59.base, #t~mem59.offset; {18235#false} is VALID [2018-11-23 12:45:52,348 INFO L273 TraceCheckUtils]: 53: Hoare triple {18235#false} assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___4~0 := #t~nondet61;havoc #t~nondet61; {18235#false} is VALID [2018-11-23 12:45:52,348 INFO L273 TraceCheckUtils]: 54: Hoare triple {18235#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet62 && #t~nondet62 <= 2147483647;~tmp___5~0 := #t~nondet62;havoc #t~nondet62; {18235#false} is VALID [2018-11-23 12:45:52,348 INFO L273 TraceCheckUtils]: 55: Hoare triple {18235#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 60 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 60 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset;call write~int(0, ~s.base, 64 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 12:45:52,348 INFO L273 TraceCheckUtils]: 56: Hoare triple {18235#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {18235#false} is VALID [2018-11-23 12:45:52,348 INFO L273 TraceCheckUtils]: 57: Hoare triple {18235#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {18235#false} is VALID [2018-11-23 12:45:52,349 INFO L273 TraceCheckUtils]: 58: Hoare triple {18235#false} ~skip~0 := 0; {18235#false} is VALID [2018-11-23 12:45:52,349 INFO L273 TraceCheckUtils]: 59: Hoare triple {18235#false} assume !false; {18235#false} is VALID [2018-11-23 12:45:52,349 INFO L273 TraceCheckUtils]: 60: Hoare triple {18235#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 12:45:52,349 INFO L273 TraceCheckUtils]: 61: Hoare triple {18235#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 12:45:52,349 INFO L273 TraceCheckUtils]: 62: Hoare triple {18235#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 12:45:52,349 INFO L273 TraceCheckUtils]: 63: Hoare triple {18235#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 12:45:52,349 INFO L273 TraceCheckUtils]: 64: Hoare triple {18235#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 12:45:52,349 INFO L273 TraceCheckUtils]: 65: Hoare triple {18235#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 12:45:52,349 INFO L273 TraceCheckUtils]: 66: Hoare triple {18235#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 12:45:52,350 INFO L273 TraceCheckUtils]: 67: Hoare triple {18235#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 12:45:52,350 INFO L273 TraceCheckUtils]: 68: Hoare triple {18235#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 12:45:52,350 INFO L273 TraceCheckUtils]: 69: Hoare triple {18235#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 12:45:52,350 INFO L273 TraceCheckUtils]: 70: Hoare triple {18235#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 12:45:52,350 INFO L273 TraceCheckUtils]: 71: Hoare triple {18235#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 12:45:52,350 INFO L273 TraceCheckUtils]: 72: Hoare triple {18235#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 12:45:52,350 INFO L273 TraceCheckUtils]: 73: Hoare triple {18235#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 12:45:52,350 INFO L273 TraceCheckUtils]: 74: Hoare triple {18235#false} assume 4432 == #t~mem36;havoc #t~mem36; {18235#false} is VALID [2018-11-23 12:45:52,351 INFO L273 TraceCheckUtils]: 75: Hoare triple {18235#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {18235#false} is VALID [2018-11-23 12:45:52,351 INFO L273 TraceCheckUtils]: 76: Hoare triple {18235#false} assume 5 == ~blastFlag~0; {18235#false} is VALID [2018-11-23 12:45:52,351 INFO L273 TraceCheckUtils]: 77: Hoare triple {18235#false} assume !false; {18235#false} is VALID [2018-11-23 12:45:52,355 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 12:45:52,355 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:45:52,355 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:45:52,355 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 12:45:52,355 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:45:52,356 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:45:52,462 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 71 edges. 71 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:45:52,462 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:45:52,462 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:45:52,462 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:45:52,463 INFO L87 Difference]: Start difference. First operand 421 states and 634 transitions. Second operand 4 states. [2018-11-23 12:45:53,974 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:53,974 INFO L93 Difference]: Finished difference Result 943 states and 1411 transitions. [2018-11-23 12:45:53,974 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:45:53,974 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 12:45:53,974 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:45:53,974 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:45:53,977 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 464 transitions. [2018-11-23 12:45:53,977 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:45:53,979 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 464 transitions. [2018-11-23 12:45:53,979 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 464 transitions. [2018-11-23 12:45:54,454 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 464 edges. 464 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:45:54,474 INFO L225 Difference]: With dead ends: 943 [2018-11-23 12:45:54,474 INFO L226 Difference]: Without dead ends: 535 [2018-11-23 12:45:54,475 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:45:54,476 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 535 states. [2018-11-23 12:45:54,888 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 535 to 421. [2018-11-23 12:45:54,888 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:45:54,888 INFO L82 GeneralOperation]: Start isEquivalent. First operand 535 states. Second operand 421 states. [2018-11-23 12:45:54,888 INFO L74 IsIncluded]: Start isIncluded. First operand 535 states. Second operand 421 states. [2018-11-23 12:45:54,888 INFO L87 Difference]: Start difference. First operand 535 states. Second operand 421 states. [2018-11-23 12:45:54,903 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:54,903 INFO L93 Difference]: Finished difference Result 535 states and 792 transitions. [2018-11-23 12:45:54,903 INFO L276 IsEmpty]: Start isEmpty. Operand 535 states and 792 transitions. [2018-11-23 12:45:54,904 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:45:54,904 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:45:54,905 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 535 states. [2018-11-23 12:45:54,905 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 535 states. [2018-11-23 12:45:54,924 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:54,924 INFO L93 Difference]: Finished difference Result 535 states and 792 transitions. [2018-11-23 12:45:54,924 INFO L276 IsEmpty]: Start isEmpty. Operand 535 states and 792 transitions. [2018-11-23 12:45:54,925 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:45:54,925 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:45:54,925 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:45:54,925 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:45:54,925 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 12:45:54,937 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 632 transitions. [2018-11-23 12:45:54,938 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 632 transitions. Word has length 78 [2018-11-23 12:45:54,938 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:45:54,938 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 632 transitions. [2018-11-23 12:45:54,938 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:45:54,938 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 632 transitions. [2018-11-23 12:45:54,939 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2018-11-23 12:45:54,939 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:45:54,940 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:45:54,940 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:45:54,940 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:45:54,940 INFO L82 PathProgramCache]: Analyzing trace with hash -1508472381, now seen corresponding path program 1 times [2018-11-23 12:45:54,940 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:45:54,941 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:45:54,942 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:54,942 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:45:54,942 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:54,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:45:55,157 INFO L256 TraceCheckUtils]: 0: Hoare triple {20871#true} call ULTIMATE.init(); {20871#true} is VALID [2018-11-23 12:45:55,157 INFO L273 TraceCheckUtils]: 1: Hoare triple {20871#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {20871#true} is VALID [2018-11-23 12:45:55,157 INFO L273 TraceCheckUtils]: 2: Hoare triple {20871#true} assume true; {20871#true} is VALID [2018-11-23 12:45:55,158 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {20871#true} {20871#true} #542#return; {20871#true} is VALID [2018-11-23 12:45:55,158 INFO L256 TraceCheckUtils]: 4: Hoare triple {20871#true} call #t~ret139 := main(); {20871#true} is VALID [2018-11-23 12:45:55,158 INFO L273 TraceCheckUtils]: 5: Hoare triple {20871#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {20871#true} is VALID [2018-11-23 12:45:55,158 INFO L256 TraceCheckUtils]: 6: Hoare triple {20871#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {20871#true} is VALID [2018-11-23 12:45:55,158 INFO L273 TraceCheckUtils]: 7: Hoare triple {20871#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 12:45:55,159 INFO L273 TraceCheckUtils]: 8: Hoare triple {20871#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {20871#true} is VALID [2018-11-23 12:45:55,159 INFO L273 TraceCheckUtils]: 9: Hoare triple {20871#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {20871#true} is VALID [2018-11-23 12:45:55,159 INFO L273 TraceCheckUtils]: 10: Hoare triple {20871#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {20871#true} is VALID [2018-11-23 12:45:55,159 INFO L273 TraceCheckUtils]: 11: Hoare triple {20871#true} assume !false; {20871#true} is VALID [2018-11-23 12:45:55,159 INFO L273 TraceCheckUtils]: 12: Hoare triple {20871#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 12:45:55,159 INFO L273 TraceCheckUtils]: 13: Hoare triple {20871#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 12:45:55,160 INFO L273 TraceCheckUtils]: 14: Hoare triple {20871#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 12:45:55,160 INFO L273 TraceCheckUtils]: 15: Hoare triple {20871#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 12:45:55,160 INFO L273 TraceCheckUtils]: 16: Hoare triple {20871#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 12:45:55,160 INFO L273 TraceCheckUtils]: 17: Hoare triple {20871#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 12:45:55,160 INFO L273 TraceCheckUtils]: 18: Hoare triple {20871#true} assume 4368 == #t~mem28;havoc #t~mem28; {20871#true} is VALID [2018-11-23 12:45:55,160 INFO L273 TraceCheckUtils]: 19: Hoare triple {20871#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {20871#true} is VALID [2018-11-23 12:45:55,160 INFO L273 TraceCheckUtils]: 20: Hoare triple {20871#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {20871#true} is VALID [2018-11-23 12:45:55,160 INFO L273 TraceCheckUtils]: 21: Hoare triple {20871#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 12:45:55,161 INFO L273 TraceCheckUtils]: 22: Hoare triple {20871#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {20871#true} is VALID [2018-11-23 12:45:55,161 INFO L273 TraceCheckUtils]: 23: Hoare triple {20871#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {20871#true} is VALID [2018-11-23 12:45:55,161 INFO L273 TraceCheckUtils]: 24: Hoare triple {20871#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {20871#true} is VALID [2018-11-23 12:45:55,161 INFO L273 TraceCheckUtils]: 25: Hoare triple {20871#true} ~skip~0 := 0; {20871#true} is VALID [2018-11-23 12:45:55,161 INFO L273 TraceCheckUtils]: 26: Hoare triple {20871#true} assume !false; {20871#true} is VALID [2018-11-23 12:45:55,161 INFO L273 TraceCheckUtils]: 27: Hoare triple {20871#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 12:45:55,161 INFO L273 TraceCheckUtils]: 28: Hoare triple {20871#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 12:45:55,161 INFO L273 TraceCheckUtils]: 29: Hoare triple {20871#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 12:45:55,162 INFO L273 TraceCheckUtils]: 30: Hoare triple {20871#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 12:45:55,162 INFO L273 TraceCheckUtils]: 31: Hoare triple {20871#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 12:45:55,162 INFO L273 TraceCheckUtils]: 32: Hoare triple {20871#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 12:45:55,162 INFO L273 TraceCheckUtils]: 33: Hoare triple {20871#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 12:45:55,162 INFO L273 TraceCheckUtils]: 34: Hoare triple {20871#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 12:45:55,162 INFO L273 TraceCheckUtils]: 35: Hoare triple {20871#true} assume 4384 == #t~mem30;havoc #t~mem30; {20871#true} is VALID [2018-11-23 12:45:55,162 INFO L273 TraceCheckUtils]: 36: Hoare triple {20871#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {20871#true} is VALID [2018-11-23 12:45:55,162 INFO L273 TraceCheckUtils]: 37: Hoare triple {20871#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {20871#true} is VALID [2018-11-23 12:45:55,163 INFO L273 TraceCheckUtils]: 38: Hoare triple {20871#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 12:45:55,163 INFO L273 TraceCheckUtils]: 39: Hoare triple {20871#true} assume 0 != #t~mem69;havoc #t~mem69;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:55,164 INFO L273 TraceCheckUtils]: 40: Hoare triple {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:55,164 INFO L273 TraceCheckUtils]: 41: Hoare triple {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:55,165 INFO L273 TraceCheckUtils]: 42: Hoare triple {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:55,165 INFO L273 TraceCheckUtils]: 43: Hoare triple {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} ~skip~0 := 0; {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:55,165 INFO L273 TraceCheckUtils]: 44: Hoare triple {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !false; {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:55,166 INFO L273 TraceCheckUtils]: 45: Hoare triple {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:55,166 INFO L273 TraceCheckUtils]: 46: Hoare triple {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:55,167 INFO L273 TraceCheckUtils]: 47: Hoare triple {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:55,167 INFO L273 TraceCheckUtils]: 48: Hoare triple {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:55,168 INFO L273 TraceCheckUtils]: 49: Hoare triple {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:45:55,168 INFO L273 TraceCheckUtils]: 50: Hoare triple {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {20874#(= |ssl3_connect_#t~mem28| 4560)} is VALID [2018-11-23 12:45:55,169 INFO L273 TraceCheckUtils]: 51: Hoare triple {20874#(= |ssl3_connect_#t~mem28| 4560)} assume 4368 == #t~mem28;havoc #t~mem28; {20872#false} is VALID [2018-11-23 12:45:55,169 INFO L273 TraceCheckUtils]: 52: Hoare triple {20872#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {20872#false} is VALID [2018-11-23 12:45:55,169 INFO L273 TraceCheckUtils]: 53: Hoare triple {20872#false} assume !(0 == ~blastFlag~0); {20872#false} is VALID [2018-11-23 12:45:55,170 INFO L273 TraceCheckUtils]: 54: Hoare triple {20872#false} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 12:45:55,170 INFO L273 TraceCheckUtils]: 55: Hoare triple {20872#false} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {20872#false} is VALID [2018-11-23 12:45:55,170 INFO L273 TraceCheckUtils]: 56: Hoare triple {20872#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {20872#false} is VALID [2018-11-23 12:45:55,170 INFO L273 TraceCheckUtils]: 57: Hoare triple {20872#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {20872#false} is VALID [2018-11-23 12:45:55,170 INFO L273 TraceCheckUtils]: 58: Hoare triple {20872#false} ~skip~0 := 0; {20872#false} is VALID [2018-11-23 12:45:55,171 INFO L273 TraceCheckUtils]: 59: Hoare triple {20872#false} assume !false; {20872#false} is VALID [2018-11-23 12:45:55,171 INFO L273 TraceCheckUtils]: 60: Hoare triple {20872#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 12:45:55,171 INFO L273 TraceCheckUtils]: 61: Hoare triple {20872#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 12:45:55,171 INFO L273 TraceCheckUtils]: 62: Hoare triple {20872#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 12:45:55,171 INFO L273 TraceCheckUtils]: 63: Hoare triple {20872#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 12:45:55,172 INFO L273 TraceCheckUtils]: 64: Hoare triple {20872#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 12:45:55,172 INFO L273 TraceCheckUtils]: 65: Hoare triple {20872#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 12:45:55,172 INFO L273 TraceCheckUtils]: 66: Hoare triple {20872#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 12:45:55,172 INFO L273 TraceCheckUtils]: 67: Hoare triple {20872#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 12:45:55,172 INFO L273 TraceCheckUtils]: 68: Hoare triple {20872#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 12:45:55,172 INFO L273 TraceCheckUtils]: 69: Hoare triple {20872#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 12:45:55,173 INFO L273 TraceCheckUtils]: 70: Hoare triple {20872#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 12:45:55,173 INFO L273 TraceCheckUtils]: 71: Hoare triple {20872#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 12:45:55,173 INFO L273 TraceCheckUtils]: 72: Hoare triple {20872#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 12:45:55,173 INFO L273 TraceCheckUtils]: 73: Hoare triple {20872#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 12:45:55,173 INFO L273 TraceCheckUtils]: 74: Hoare triple {20872#false} assume 4432 == #t~mem36;havoc #t~mem36; {20872#false} is VALID [2018-11-23 12:45:55,173 INFO L273 TraceCheckUtils]: 75: Hoare triple {20872#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {20872#false} is VALID [2018-11-23 12:45:55,174 INFO L273 TraceCheckUtils]: 76: Hoare triple {20872#false} assume 5 == ~blastFlag~0; {20872#false} is VALID [2018-11-23 12:45:55,174 INFO L273 TraceCheckUtils]: 77: Hoare triple {20872#false} assume !false; {20872#false} is VALID [2018-11-23 12:45:55,178 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 12:45:55,178 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:45:55,179 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:45:55,179 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 12:45:55,179 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:45:55,179 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:45:55,247 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 71 edges. 71 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:45:55,247 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:45:55,248 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:45:55,248 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:45:55,248 INFO L87 Difference]: Start difference. First operand 421 states and 632 transitions. Second operand 4 states. [2018-11-23 12:45:57,109 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:57,109 INFO L93 Difference]: Finished difference Result 794 states and 1181 transitions. [2018-11-23 12:45:57,109 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:45:57,109 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 12:45:57,109 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:45:57,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:45:57,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 463 transitions. [2018-11-23 12:45:57,112 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:45:57,114 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 463 transitions. [2018-11-23 12:45:57,114 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 463 transitions. [2018-11-23 12:45:57,570 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 463 edges. 463 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:45:57,585 INFO L225 Difference]: With dead ends: 794 [2018-11-23 12:45:57,585 INFO L226 Difference]: Without dead ends: 535 [2018-11-23 12:45:57,586 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:45:57,586 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 535 states. [2018-11-23 12:45:57,768 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 535 to 421. [2018-11-23 12:45:57,768 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:45:57,768 INFO L82 GeneralOperation]: Start isEquivalent. First operand 535 states. Second operand 421 states. [2018-11-23 12:45:57,768 INFO L74 IsIncluded]: Start isIncluded. First operand 535 states. Second operand 421 states. [2018-11-23 12:45:57,768 INFO L87 Difference]: Start difference. First operand 535 states. Second operand 421 states. [2018-11-23 12:45:57,785 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:57,786 INFO L93 Difference]: Finished difference Result 535 states and 790 transitions. [2018-11-23 12:45:57,786 INFO L276 IsEmpty]: Start isEmpty. Operand 535 states and 790 transitions. [2018-11-23 12:45:57,786 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:45:57,787 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:45:57,787 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 535 states. [2018-11-23 12:45:57,787 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 535 states. [2018-11-23 12:45:57,802 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:57,802 INFO L93 Difference]: Finished difference Result 535 states and 790 transitions. [2018-11-23 12:45:57,802 INFO L276 IsEmpty]: Start isEmpty. Operand 535 states and 790 transitions. [2018-11-23 12:45:57,803 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:45:57,803 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:45:57,803 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:45:57,803 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:45:57,803 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 12:45:57,813 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 630 transitions. [2018-11-23 12:45:57,813 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 630 transitions. Word has length 78 [2018-11-23 12:45:57,813 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:45:57,813 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 630 transitions. [2018-11-23 12:45:57,813 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:45:57,813 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 630 transitions. [2018-11-23 12:45:57,814 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2018-11-23 12:45:57,814 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:45:57,814 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:45:57,815 INFO L423 AbstractCegarLoop]: === Iteration 11 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:45:57,815 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:45:57,815 INFO L82 PathProgramCache]: Analyzing trace with hash 1665283844, now seen corresponding path program 1 times [2018-11-23 12:45:57,815 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:45:57,815 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:45:57,816 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:57,816 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:45:57,817 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:57,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:45:57,973 INFO L256 TraceCheckUtils]: 0: Hoare triple {23342#true} call ULTIMATE.init(); {23342#true} is VALID [2018-11-23 12:45:57,973 INFO L273 TraceCheckUtils]: 1: Hoare triple {23342#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {23342#true} is VALID [2018-11-23 12:45:57,974 INFO L273 TraceCheckUtils]: 2: Hoare triple {23342#true} assume true; {23342#true} is VALID [2018-11-23 12:45:57,974 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {23342#true} {23342#true} #542#return; {23342#true} is VALID [2018-11-23 12:45:57,974 INFO L256 TraceCheckUtils]: 4: Hoare triple {23342#true} call #t~ret139 := main(); {23342#true} is VALID [2018-11-23 12:45:57,974 INFO L273 TraceCheckUtils]: 5: Hoare triple {23342#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {23342#true} is VALID [2018-11-23 12:45:57,974 INFO L256 TraceCheckUtils]: 6: Hoare triple {23342#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {23342#true} is VALID [2018-11-23 12:45:57,975 INFO L273 TraceCheckUtils]: 7: Hoare triple {23342#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 12:45:57,975 INFO L273 TraceCheckUtils]: 8: Hoare triple {23342#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {23342#true} is VALID [2018-11-23 12:45:57,975 INFO L273 TraceCheckUtils]: 9: Hoare triple {23342#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {23342#true} is VALID [2018-11-23 12:45:57,975 INFO L273 TraceCheckUtils]: 10: Hoare triple {23342#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {23342#true} is VALID [2018-11-23 12:45:57,975 INFO L273 TraceCheckUtils]: 11: Hoare triple {23342#true} assume !false; {23342#true} is VALID [2018-11-23 12:45:57,976 INFO L273 TraceCheckUtils]: 12: Hoare triple {23342#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 12:45:57,976 INFO L273 TraceCheckUtils]: 13: Hoare triple {23342#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 12:45:57,976 INFO L273 TraceCheckUtils]: 14: Hoare triple {23342#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 12:45:57,976 INFO L273 TraceCheckUtils]: 15: Hoare triple {23342#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 12:45:57,976 INFO L273 TraceCheckUtils]: 16: Hoare triple {23342#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 12:45:57,977 INFO L273 TraceCheckUtils]: 17: Hoare triple {23342#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 12:45:57,977 INFO L273 TraceCheckUtils]: 18: Hoare triple {23342#true} assume 4368 == #t~mem28;havoc #t~mem28; {23342#true} is VALID [2018-11-23 12:45:57,977 INFO L273 TraceCheckUtils]: 19: Hoare triple {23342#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {23342#true} is VALID [2018-11-23 12:45:57,977 INFO L273 TraceCheckUtils]: 20: Hoare triple {23342#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {23342#true} is VALID [2018-11-23 12:45:57,977 INFO L273 TraceCheckUtils]: 21: Hoare triple {23342#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 12:45:57,977 INFO L273 TraceCheckUtils]: 22: Hoare triple {23342#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {23342#true} is VALID [2018-11-23 12:45:57,977 INFO L273 TraceCheckUtils]: 23: Hoare triple {23342#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {23342#true} is VALID [2018-11-23 12:45:57,977 INFO L273 TraceCheckUtils]: 24: Hoare triple {23342#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {23342#true} is VALID [2018-11-23 12:45:57,978 INFO L273 TraceCheckUtils]: 25: Hoare triple {23342#true} ~skip~0 := 0; {23342#true} is VALID [2018-11-23 12:45:57,978 INFO L273 TraceCheckUtils]: 26: Hoare triple {23342#true} assume !false; {23342#true} is VALID [2018-11-23 12:45:57,978 INFO L273 TraceCheckUtils]: 27: Hoare triple {23342#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 12:45:57,978 INFO L273 TraceCheckUtils]: 28: Hoare triple {23342#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 12:45:57,978 INFO L273 TraceCheckUtils]: 29: Hoare triple {23342#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 12:45:57,978 INFO L273 TraceCheckUtils]: 30: Hoare triple {23342#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 12:45:57,978 INFO L273 TraceCheckUtils]: 31: Hoare triple {23342#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 12:45:57,978 INFO L273 TraceCheckUtils]: 32: Hoare triple {23342#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 12:45:57,979 INFO L273 TraceCheckUtils]: 33: Hoare triple {23342#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 12:45:57,979 INFO L273 TraceCheckUtils]: 34: Hoare triple {23342#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 12:45:57,979 INFO L273 TraceCheckUtils]: 35: Hoare triple {23342#true} assume 4384 == #t~mem30;havoc #t~mem30; {23342#true} is VALID [2018-11-23 12:45:57,979 INFO L273 TraceCheckUtils]: 36: Hoare triple {23342#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {23342#true} is VALID [2018-11-23 12:45:57,979 INFO L273 TraceCheckUtils]: 37: Hoare triple {23342#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {23342#true} is VALID [2018-11-23 12:45:57,979 INFO L273 TraceCheckUtils]: 38: Hoare triple {23342#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 12:45:57,980 INFO L273 TraceCheckUtils]: 39: Hoare triple {23342#true} assume !(0 != #t~mem69);havoc #t~mem69;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:45:57,981 INFO L273 TraceCheckUtils]: 40: Hoare triple {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:45:57,981 INFO L273 TraceCheckUtils]: 41: Hoare triple {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:45:57,981 INFO L273 TraceCheckUtils]: 42: Hoare triple {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:45:57,982 INFO L273 TraceCheckUtils]: 43: Hoare triple {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} ~skip~0 := 0; {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:45:57,982 INFO L273 TraceCheckUtils]: 44: Hoare triple {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !false; {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:45:57,983 INFO L273 TraceCheckUtils]: 45: Hoare triple {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {23345#(= |ssl3_connect_#t~mem23| 4400)} is VALID [2018-11-23 12:45:57,984 INFO L273 TraceCheckUtils]: 46: Hoare triple {23345#(= |ssl3_connect_#t~mem23| 4400)} assume 12292 == #t~mem23;havoc #t~mem23; {23343#false} is VALID [2018-11-23 12:45:57,984 INFO L273 TraceCheckUtils]: 47: Hoare triple {23343#false} call write~int(1, ~s.base, 40 + ~s.offset, 4);call write~int(4096, ~s.base, 52 + ~s.offset, 4);call #t~mem56.base, #t~mem56.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem57 := read~int(#t~mem56.base, 64 + #t~mem56.offset, 4);call write~int(1 + #t~mem57, #t~mem56.base, 64 + #t~mem56.offset, 4);havoc #t~mem56.base, #t~mem56.offset;havoc #t~mem57; {23343#false} is VALID [2018-11-23 12:45:57,984 INFO L273 TraceCheckUtils]: 48: Hoare triple {23343#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 12:45:57,984 INFO L273 TraceCheckUtils]: 49: Hoare triple {23343#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {23343#false} is VALID [2018-11-23 12:45:57,984 INFO L273 TraceCheckUtils]: 50: Hoare triple {23343#false} call #t~mem58 := read~int(~s.base, ~s.offset, 4); {23343#false} is VALID [2018-11-23 12:45:57,985 INFO L273 TraceCheckUtils]: 51: Hoare triple {23343#false} assume !(768 != ~bitwiseAnd(#t~mem58, 65280));havoc #t~mem58;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem59.base, #t~mem59.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 12:45:57,985 INFO L273 TraceCheckUtils]: 52: Hoare triple {23343#false} assume !(0 == (#t~mem59.base + #t~mem59.offset) % 4294967296);havoc #t~mem59.base, #t~mem59.offset; {23343#false} is VALID [2018-11-23 12:45:57,985 INFO L273 TraceCheckUtils]: 53: Hoare triple {23343#false} assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___4~0 := #t~nondet61;havoc #t~nondet61; {23343#false} is VALID [2018-11-23 12:45:57,985 INFO L273 TraceCheckUtils]: 54: Hoare triple {23343#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet62 && #t~nondet62 <= 2147483647;~tmp___5~0 := #t~nondet62;havoc #t~nondet62; {23343#false} is VALID [2018-11-23 12:45:57,985 INFO L273 TraceCheckUtils]: 55: Hoare triple {23343#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 60 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 60 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset;call write~int(0, ~s.base, 64 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 12:45:57,986 INFO L273 TraceCheckUtils]: 56: Hoare triple {23343#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {23343#false} is VALID [2018-11-23 12:45:57,986 INFO L273 TraceCheckUtils]: 57: Hoare triple {23343#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {23343#false} is VALID [2018-11-23 12:45:57,986 INFO L273 TraceCheckUtils]: 58: Hoare triple {23343#false} ~skip~0 := 0; {23343#false} is VALID [2018-11-23 12:45:57,986 INFO L273 TraceCheckUtils]: 59: Hoare triple {23343#false} assume !false; {23343#false} is VALID [2018-11-23 12:45:57,987 INFO L273 TraceCheckUtils]: 60: Hoare triple {23343#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 12:45:57,987 INFO L273 TraceCheckUtils]: 61: Hoare triple {23343#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 12:45:57,987 INFO L273 TraceCheckUtils]: 62: Hoare triple {23343#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 12:45:57,987 INFO L273 TraceCheckUtils]: 63: Hoare triple {23343#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 12:45:57,987 INFO L273 TraceCheckUtils]: 64: Hoare triple {23343#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 12:45:57,987 INFO L273 TraceCheckUtils]: 65: Hoare triple {23343#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 12:45:57,988 INFO L273 TraceCheckUtils]: 66: Hoare triple {23343#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 12:45:57,988 INFO L273 TraceCheckUtils]: 67: Hoare triple {23343#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 12:45:57,988 INFO L273 TraceCheckUtils]: 68: Hoare triple {23343#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 12:45:57,988 INFO L273 TraceCheckUtils]: 69: Hoare triple {23343#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 12:45:57,988 INFO L273 TraceCheckUtils]: 70: Hoare triple {23343#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 12:45:57,988 INFO L273 TraceCheckUtils]: 71: Hoare triple {23343#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 12:45:57,989 INFO L273 TraceCheckUtils]: 72: Hoare triple {23343#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 12:45:57,989 INFO L273 TraceCheckUtils]: 73: Hoare triple {23343#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 12:45:57,989 INFO L273 TraceCheckUtils]: 74: Hoare triple {23343#false} assume 4432 == #t~mem36;havoc #t~mem36; {23343#false} is VALID [2018-11-23 12:45:57,989 INFO L273 TraceCheckUtils]: 75: Hoare triple {23343#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {23343#false} is VALID [2018-11-23 12:45:57,989 INFO L273 TraceCheckUtils]: 76: Hoare triple {23343#false} assume 5 == ~blastFlag~0; {23343#false} is VALID [2018-11-23 12:45:57,990 INFO L273 TraceCheckUtils]: 77: Hoare triple {23343#false} assume !false; {23343#false} is VALID [2018-11-23 12:45:57,994 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 12:45:57,994 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:45:57,995 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:45:57,995 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 12:45:57,995 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:45:57,995 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:45:58,082 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 71 edges. 71 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:45:58,083 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:45:58,083 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:45:58,083 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:45:58,083 INFO L87 Difference]: Start difference. First operand 421 states and 630 transitions. Second operand 4 states. [2018-11-23 12:45:59,279 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:59,279 INFO L93 Difference]: Finished difference Result 871 states and 1296 transitions. [2018-11-23 12:45:59,279 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:45:59,279 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 12:45:59,280 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:45:59,280 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:45:59,281 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 400 transitions. [2018-11-23 12:45:59,282 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:45:59,284 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 400 transitions. [2018-11-23 12:45:59,284 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 400 transitions. [2018-11-23 12:45:59,670 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 400 edges. 400 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:45:59,683 INFO L225 Difference]: With dead ends: 871 [2018-11-23 12:45:59,683 INFO L226 Difference]: Without dead ends: 463 [2018-11-23 12:45:59,684 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:45:59,684 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 463 states. [2018-11-23 12:45:59,815 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 463 to 421. [2018-11-23 12:45:59,815 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:45:59,815 INFO L82 GeneralOperation]: Start isEquivalent. First operand 463 states. Second operand 421 states. [2018-11-23 12:45:59,815 INFO L74 IsIncluded]: Start isIncluded. First operand 463 states. Second operand 421 states. [2018-11-23 12:45:59,815 INFO L87 Difference]: Start difference. First operand 463 states. Second operand 421 states. [2018-11-23 12:45:59,828 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:59,828 INFO L93 Difference]: Finished difference Result 463 states and 681 transitions. [2018-11-23 12:45:59,828 INFO L276 IsEmpty]: Start isEmpty. Operand 463 states and 681 transitions. [2018-11-23 12:45:59,829 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:45:59,829 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:45:59,829 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 463 states. [2018-11-23 12:45:59,829 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 463 states. [2018-11-23 12:45:59,842 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:45:59,842 INFO L93 Difference]: Finished difference Result 463 states and 681 transitions. [2018-11-23 12:45:59,842 INFO L276 IsEmpty]: Start isEmpty. Operand 463 states and 681 transitions. [2018-11-23 12:45:59,843 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:45:59,843 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:45:59,843 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:45:59,843 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:45:59,844 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 12:45:59,856 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 628 transitions. [2018-11-23 12:45:59,856 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 628 transitions. Word has length 78 [2018-11-23 12:45:59,856 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:45:59,856 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 628 transitions. [2018-11-23 12:45:59,856 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:45:59,856 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 628 transitions. [2018-11-23 12:45:59,857 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2018-11-23 12:45:59,857 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:45:59,858 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:45:59,858 INFO L423 AbstractCegarLoop]: === Iteration 12 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:45:59,858 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:45:59,858 INFO L82 PathProgramCache]: Analyzing trace with hash 1646628386, now seen corresponding path program 1 times [2018-11-23 12:45:59,858 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:45:59,858 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:45:59,859 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:59,860 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:45:59,860 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:45:59,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:00,069 INFO L256 TraceCheckUtils]: 0: Hoare triple {25747#true} call ULTIMATE.init(); {25747#true} is VALID [2018-11-23 12:46:00,070 INFO L273 TraceCheckUtils]: 1: Hoare triple {25747#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {25747#true} is VALID [2018-11-23 12:46:00,070 INFO L273 TraceCheckUtils]: 2: Hoare triple {25747#true} assume true; {25747#true} is VALID [2018-11-23 12:46:00,070 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {25747#true} {25747#true} #542#return; {25747#true} is VALID [2018-11-23 12:46:00,071 INFO L256 TraceCheckUtils]: 4: Hoare triple {25747#true} call #t~ret139 := main(); {25747#true} is VALID [2018-11-23 12:46:00,071 INFO L273 TraceCheckUtils]: 5: Hoare triple {25747#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {25747#true} is VALID [2018-11-23 12:46:00,071 INFO L256 TraceCheckUtils]: 6: Hoare triple {25747#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {25747#true} is VALID [2018-11-23 12:46:00,071 INFO L273 TraceCheckUtils]: 7: Hoare triple {25747#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 12:46:00,072 INFO L273 TraceCheckUtils]: 8: Hoare triple {25747#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {25747#true} is VALID [2018-11-23 12:46:00,072 INFO L273 TraceCheckUtils]: 9: Hoare triple {25747#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {25747#true} is VALID [2018-11-23 12:46:00,072 INFO L273 TraceCheckUtils]: 10: Hoare triple {25747#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {25747#true} is VALID [2018-11-23 12:46:00,072 INFO L273 TraceCheckUtils]: 11: Hoare triple {25747#true} assume !false; {25747#true} is VALID [2018-11-23 12:46:00,072 INFO L273 TraceCheckUtils]: 12: Hoare triple {25747#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 12:46:00,073 INFO L273 TraceCheckUtils]: 13: Hoare triple {25747#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 12:46:00,073 INFO L273 TraceCheckUtils]: 14: Hoare triple {25747#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 12:46:00,073 INFO L273 TraceCheckUtils]: 15: Hoare triple {25747#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 12:46:00,073 INFO L273 TraceCheckUtils]: 16: Hoare triple {25747#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 12:46:00,073 INFO L273 TraceCheckUtils]: 17: Hoare triple {25747#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 12:46:00,073 INFO L273 TraceCheckUtils]: 18: Hoare triple {25747#true} assume 4368 == #t~mem28;havoc #t~mem28; {25747#true} is VALID [2018-11-23 12:46:00,074 INFO L273 TraceCheckUtils]: 19: Hoare triple {25747#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {25747#true} is VALID [2018-11-23 12:46:00,074 INFO L273 TraceCheckUtils]: 20: Hoare triple {25747#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {25747#true} is VALID [2018-11-23 12:46:00,074 INFO L273 TraceCheckUtils]: 21: Hoare triple {25747#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 12:46:00,074 INFO L273 TraceCheckUtils]: 22: Hoare triple {25747#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {25747#true} is VALID [2018-11-23 12:46:00,074 INFO L273 TraceCheckUtils]: 23: Hoare triple {25747#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {25747#true} is VALID [2018-11-23 12:46:00,074 INFO L273 TraceCheckUtils]: 24: Hoare triple {25747#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {25747#true} is VALID [2018-11-23 12:46:00,075 INFO L273 TraceCheckUtils]: 25: Hoare triple {25747#true} ~skip~0 := 0; {25747#true} is VALID [2018-11-23 12:46:00,075 INFO L273 TraceCheckUtils]: 26: Hoare triple {25747#true} assume !false; {25747#true} is VALID [2018-11-23 12:46:00,075 INFO L273 TraceCheckUtils]: 27: Hoare triple {25747#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 12:46:00,075 INFO L273 TraceCheckUtils]: 28: Hoare triple {25747#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 12:46:00,075 INFO L273 TraceCheckUtils]: 29: Hoare triple {25747#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 12:46:00,075 INFO L273 TraceCheckUtils]: 30: Hoare triple {25747#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 12:46:00,076 INFO L273 TraceCheckUtils]: 31: Hoare triple {25747#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 12:46:00,076 INFO L273 TraceCheckUtils]: 32: Hoare triple {25747#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 12:46:00,076 INFO L273 TraceCheckUtils]: 33: Hoare triple {25747#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 12:46:00,076 INFO L273 TraceCheckUtils]: 34: Hoare triple {25747#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 12:46:00,076 INFO L273 TraceCheckUtils]: 35: Hoare triple {25747#true} assume 4384 == #t~mem30;havoc #t~mem30; {25747#true} is VALID [2018-11-23 12:46:00,076 INFO L273 TraceCheckUtils]: 36: Hoare triple {25747#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {25747#true} is VALID [2018-11-23 12:46:00,077 INFO L273 TraceCheckUtils]: 37: Hoare triple {25747#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {25747#true} is VALID [2018-11-23 12:46:00,077 INFO L273 TraceCheckUtils]: 38: Hoare triple {25747#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 12:46:00,082 INFO L273 TraceCheckUtils]: 39: Hoare triple {25747#true} assume !(0 != #t~mem69);havoc #t~mem69;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:00,083 INFO L273 TraceCheckUtils]: 40: Hoare triple {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:00,084 INFO L273 TraceCheckUtils]: 41: Hoare triple {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:00,084 INFO L273 TraceCheckUtils]: 42: Hoare triple {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:00,086 INFO L273 TraceCheckUtils]: 43: Hoare triple {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} ~skip~0 := 0; {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:00,086 INFO L273 TraceCheckUtils]: 44: Hoare triple {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !false; {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:00,089 INFO L273 TraceCheckUtils]: 45: Hoare triple {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:00,089 INFO L273 TraceCheckUtils]: 46: Hoare triple {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {25750#(= |ssl3_connect_#t~mem24| 4400)} is VALID [2018-11-23 12:46:00,089 INFO L273 TraceCheckUtils]: 47: Hoare triple {25750#(= |ssl3_connect_#t~mem24| 4400)} assume 16384 == #t~mem24;havoc #t~mem24; {25748#false} is VALID [2018-11-23 12:46:00,090 INFO L273 TraceCheckUtils]: 48: Hoare triple {25748#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 12:46:00,090 INFO L273 TraceCheckUtils]: 49: Hoare triple {25748#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {25748#false} is VALID [2018-11-23 12:46:00,090 INFO L273 TraceCheckUtils]: 50: Hoare triple {25748#false} call #t~mem58 := read~int(~s.base, ~s.offset, 4); {25748#false} is VALID [2018-11-23 12:46:00,090 INFO L273 TraceCheckUtils]: 51: Hoare triple {25748#false} assume !(768 != ~bitwiseAnd(#t~mem58, 65280));havoc #t~mem58;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem59.base, #t~mem59.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 12:46:00,090 INFO L273 TraceCheckUtils]: 52: Hoare triple {25748#false} assume !(0 == (#t~mem59.base + #t~mem59.offset) % 4294967296);havoc #t~mem59.base, #t~mem59.offset; {25748#false} is VALID [2018-11-23 12:46:00,090 INFO L273 TraceCheckUtils]: 53: Hoare triple {25748#false} assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___4~0 := #t~nondet61;havoc #t~nondet61; {25748#false} is VALID [2018-11-23 12:46:00,090 INFO L273 TraceCheckUtils]: 54: Hoare triple {25748#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet62 && #t~nondet62 <= 2147483647;~tmp___5~0 := #t~nondet62;havoc #t~nondet62; {25748#false} is VALID [2018-11-23 12:46:00,090 INFO L273 TraceCheckUtils]: 55: Hoare triple {25748#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 60 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 60 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset;call write~int(0, ~s.base, 64 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 12:46:00,091 INFO L273 TraceCheckUtils]: 56: Hoare triple {25748#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {25748#false} is VALID [2018-11-23 12:46:00,091 INFO L273 TraceCheckUtils]: 57: Hoare triple {25748#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {25748#false} is VALID [2018-11-23 12:46:00,091 INFO L273 TraceCheckUtils]: 58: Hoare triple {25748#false} ~skip~0 := 0; {25748#false} is VALID [2018-11-23 12:46:00,091 INFO L273 TraceCheckUtils]: 59: Hoare triple {25748#false} assume !false; {25748#false} is VALID [2018-11-23 12:46:00,091 INFO L273 TraceCheckUtils]: 60: Hoare triple {25748#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 12:46:00,091 INFO L273 TraceCheckUtils]: 61: Hoare triple {25748#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 12:46:00,091 INFO L273 TraceCheckUtils]: 62: Hoare triple {25748#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 12:46:00,091 INFO L273 TraceCheckUtils]: 63: Hoare triple {25748#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 12:46:00,092 INFO L273 TraceCheckUtils]: 64: Hoare triple {25748#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 12:46:00,092 INFO L273 TraceCheckUtils]: 65: Hoare triple {25748#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 12:46:00,092 INFO L273 TraceCheckUtils]: 66: Hoare triple {25748#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 12:46:00,092 INFO L273 TraceCheckUtils]: 67: Hoare triple {25748#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 12:46:00,092 INFO L273 TraceCheckUtils]: 68: Hoare triple {25748#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 12:46:00,092 INFO L273 TraceCheckUtils]: 69: Hoare triple {25748#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 12:46:00,092 INFO L273 TraceCheckUtils]: 70: Hoare triple {25748#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 12:46:00,093 INFO L273 TraceCheckUtils]: 71: Hoare triple {25748#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 12:46:00,093 INFO L273 TraceCheckUtils]: 72: Hoare triple {25748#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 12:46:00,093 INFO L273 TraceCheckUtils]: 73: Hoare triple {25748#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 12:46:00,093 INFO L273 TraceCheckUtils]: 74: Hoare triple {25748#false} assume 4432 == #t~mem36;havoc #t~mem36; {25748#false} is VALID [2018-11-23 12:46:00,093 INFO L273 TraceCheckUtils]: 75: Hoare triple {25748#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {25748#false} is VALID [2018-11-23 12:46:00,093 INFO L273 TraceCheckUtils]: 76: Hoare triple {25748#false} assume 5 == ~blastFlag~0; {25748#false} is VALID [2018-11-23 12:46:00,094 INFO L273 TraceCheckUtils]: 77: Hoare triple {25748#false} assume !false; {25748#false} is VALID [2018-11-23 12:46:00,099 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 12:46:00,099 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:00,099 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:00,099 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 12:46:00,100 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:00,100 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:00,228 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 71 edges. 71 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:00,229 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:00,229 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:00,229 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:00,229 INFO L87 Difference]: Start difference. First operand 421 states and 628 transitions. Second operand 4 states. [2018-11-23 12:46:01,458 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:01,459 INFO L93 Difference]: Finished difference Result 871 states and 1292 transitions. [2018-11-23 12:46:01,459 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:01,459 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 12:46:01,459 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:01,459 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:01,462 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 399 transitions. [2018-11-23 12:46:01,462 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:01,464 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 399 transitions. [2018-11-23 12:46:01,464 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 399 transitions. [2018-11-23 12:46:01,870 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 399 edges. 399 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:01,883 INFO L225 Difference]: With dead ends: 871 [2018-11-23 12:46:01,883 INFO L226 Difference]: Without dead ends: 463 [2018-11-23 12:46:01,884 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:01,884 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 463 states. [2018-11-23 12:46:02,050 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 463 to 421. [2018-11-23 12:46:02,051 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:02,051 INFO L82 GeneralOperation]: Start isEquivalent. First operand 463 states. Second operand 421 states. [2018-11-23 12:46:02,051 INFO L74 IsIncluded]: Start isIncluded. First operand 463 states. Second operand 421 states. [2018-11-23 12:46:02,051 INFO L87 Difference]: Start difference. First operand 463 states. Second operand 421 states. [2018-11-23 12:46:02,064 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:02,064 INFO L93 Difference]: Finished difference Result 463 states and 679 transitions. [2018-11-23 12:46:02,064 INFO L276 IsEmpty]: Start isEmpty. Operand 463 states and 679 transitions. [2018-11-23 12:46:02,065 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:02,065 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:02,065 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 463 states. [2018-11-23 12:46:02,065 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 463 states. [2018-11-23 12:46:02,079 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:02,079 INFO L93 Difference]: Finished difference Result 463 states and 679 transitions. [2018-11-23 12:46:02,079 INFO L276 IsEmpty]: Start isEmpty. Operand 463 states and 679 transitions. [2018-11-23 12:46:02,080 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:02,080 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:02,080 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:02,080 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:02,080 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 12:46:02,092 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 626 transitions. [2018-11-23 12:46:02,092 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 626 transitions. Word has length 78 [2018-11-23 12:46:02,093 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:02,093 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 626 transitions. [2018-11-23 12:46:02,093 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:02,093 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 626 transitions. [2018-11-23 12:46:02,094 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2018-11-23 12:46:02,094 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:02,094 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:02,095 INFO L423 AbstractCegarLoop]: === Iteration 13 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:02,095 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:02,095 INFO L82 PathProgramCache]: Analyzing trace with hash 941127749, now seen corresponding path program 1 times [2018-11-23 12:46:02,095 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:02,095 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:02,096 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:02,096 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:02,096 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:02,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:02,247 INFO L256 TraceCheckUtils]: 0: Hoare triple {28152#true} call ULTIMATE.init(); {28152#true} is VALID [2018-11-23 12:46:02,247 INFO L273 TraceCheckUtils]: 1: Hoare triple {28152#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {28152#true} is VALID [2018-11-23 12:46:02,247 INFO L273 TraceCheckUtils]: 2: Hoare triple {28152#true} assume true; {28152#true} is VALID [2018-11-23 12:46:02,248 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {28152#true} {28152#true} #542#return; {28152#true} is VALID [2018-11-23 12:46:02,248 INFO L256 TraceCheckUtils]: 4: Hoare triple {28152#true} call #t~ret139 := main(); {28152#true} is VALID [2018-11-23 12:46:02,248 INFO L273 TraceCheckUtils]: 5: Hoare triple {28152#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {28152#true} is VALID [2018-11-23 12:46:02,248 INFO L256 TraceCheckUtils]: 6: Hoare triple {28152#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {28152#true} is VALID [2018-11-23 12:46:02,248 INFO L273 TraceCheckUtils]: 7: Hoare triple {28152#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 12:46:02,248 INFO L273 TraceCheckUtils]: 8: Hoare triple {28152#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {28152#true} is VALID [2018-11-23 12:46:02,249 INFO L273 TraceCheckUtils]: 9: Hoare triple {28152#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {28152#true} is VALID [2018-11-23 12:46:02,249 INFO L273 TraceCheckUtils]: 10: Hoare triple {28152#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {28152#true} is VALID [2018-11-23 12:46:02,249 INFO L273 TraceCheckUtils]: 11: Hoare triple {28152#true} assume !false; {28152#true} is VALID [2018-11-23 12:46:02,249 INFO L273 TraceCheckUtils]: 12: Hoare triple {28152#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 12:46:02,249 INFO L273 TraceCheckUtils]: 13: Hoare triple {28152#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 12:46:02,250 INFO L273 TraceCheckUtils]: 14: Hoare triple {28152#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 12:46:02,250 INFO L273 TraceCheckUtils]: 15: Hoare triple {28152#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 12:46:02,250 INFO L273 TraceCheckUtils]: 16: Hoare triple {28152#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 12:46:02,250 INFO L273 TraceCheckUtils]: 17: Hoare triple {28152#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 12:46:02,250 INFO L273 TraceCheckUtils]: 18: Hoare triple {28152#true} assume 4368 == #t~mem28;havoc #t~mem28; {28152#true} is VALID [2018-11-23 12:46:02,250 INFO L273 TraceCheckUtils]: 19: Hoare triple {28152#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {28152#true} is VALID [2018-11-23 12:46:02,251 INFO L273 TraceCheckUtils]: 20: Hoare triple {28152#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {28152#true} is VALID [2018-11-23 12:46:02,251 INFO L273 TraceCheckUtils]: 21: Hoare triple {28152#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 12:46:02,251 INFO L273 TraceCheckUtils]: 22: Hoare triple {28152#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {28152#true} is VALID [2018-11-23 12:46:02,251 INFO L273 TraceCheckUtils]: 23: Hoare triple {28152#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {28152#true} is VALID [2018-11-23 12:46:02,251 INFO L273 TraceCheckUtils]: 24: Hoare triple {28152#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {28152#true} is VALID [2018-11-23 12:46:02,251 INFO L273 TraceCheckUtils]: 25: Hoare triple {28152#true} ~skip~0 := 0; {28152#true} is VALID [2018-11-23 12:46:02,252 INFO L273 TraceCheckUtils]: 26: Hoare triple {28152#true} assume !false; {28152#true} is VALID [2018-11-23 12:46:02,252 INFO L273 TraceCheckUtils]: 27: Hoare triple {28152#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 12:46:02,252 INFO L273 TraceCheckUtils]: 28: Hoare triple {28152#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 12:46:02,252 INFO L273 TraceCheckUtils]: 29: Hoare triple {28152#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 12:46:02,252 INFO L273 TraceCheckUtils]: 30: Hoare triple {28152#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 12:46:02,252 INFO L273 TraceCheckUtils]: 31: Hoare triple {28152#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 12:46:02,253 INFO L273 TraceCheckUtils]: 32: Hoare triple {28152#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 12:46:02,253 INFO L273 TraceCheckUtils]: 33: Hoare triple {28152#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 12:46:02,253 INFO L273 TraceCheckUtils]: 34: Hoare triple {28152#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 12:46:02,253 INFO L273 TraceCheckUtils]: 35: Hoare triple {28152#true} assume 4384 == #t~mem30;havoc #t~mem30; {28152#true} is VALID [2018-11-23 12:46:02,253 INFO L273 TraceCheckUtils]: 36: Hoare triple {28152#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {28152#true} is VALID [2018-11-23 12:46:02,253 INFO L273 TraceCheckUtils]: 37: Hoare triple {28152#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {28152#true} is VALID [2018-11-23 12:46:02,254 INFO L273 TraceCheckUtils]: 38: Hoare triple {28152#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 12:46:02,269 INFO L273 TraceCheckUtils]: 39: Hoare triple {28152#true} assume !(0 != #t~mem69);havoc #t~mem69;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:02,278 INFO L273 TraceCheckUtils]: 40: Hoare triple {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:02,282 INFO L273 TraceCheckUtils]: 41: Hoare triple {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:02,284 INFO L273 TraceCheckUtils]: 42: Hoare triple {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:02,284 INFO L273 TraceCheckUtils]: 43: Hoare triple {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} ~skip~0 := 0; {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:02,286 INFO L273 TraceCheckUtils]: 44: Hoare triple {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !false; {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:02,286 INFO L273 TraceCheckUtils]: 45: Hoare triple {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:02,289 INFO L273 TraceCheckUtils]: 46: Hoare triple {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:02,289 INFO L273 TraceCheckUtils]: 47: Hoare triple {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:02,291 INFO L273 TraceCheckUtils]: 48: Hoare triple {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:02,291 INFO L273 TraceCheckUtils]: 49: Hoare triple {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:02,291 INFO L273 TraceCheckUtils]: 50: Hoare triple {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {28155#(= |ssl3_connect_#t~mem28| 4400)} is VALID [2018-11-23 12:46:02,292 INFO L273 TraceCheckUtils]: 51: Hoare triple {28155#(= |ssl3_connect_#t~mem28| 4400)} assume 4368 == #t~mem28;havoc #t~mem28; {28153#false} is VALID [2018-11-23 12:46:02,292 INFO L273 TraceCheckUtils]: 52: Hoare triple {28153#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {28153#false} is VALID [2018-11-23 12:46:02,292 INFO L273 TraceCheckUtils]: 53: Hoare triple {28153#false} assume !(0 == ~blastFlag~0); {28153#false} is VALID [2018-11-23 12:46:02,292 INFO L273 TraceCheckUtils]: 54: Hoare triple {28153#false} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 12:46:02,292 INFO L273 TraceCheckUtils]: 55: Hoare triple {28153#false} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {28153#false} is VALID [2018-11-23 12:46:02,292 INFO L273 TraceCheckUtils]: 56: Hoare triple {28153#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {28153#false} is VALID [2018-11-23 12:46:02,293 INFO L273 TraceCheckUtils]: 57: Hoare triple {28153#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {28153#false} is VALID [2018-11-23 12:46:02,293 INFO L273 TraceCheckUtils]: 58: Hoare triple {28153#false} ~skip~0 := 0; {28153#false} is VALID [2018-11-23 12:46:02,293 INFO L273 TraceCheckUtils]: 59: Hoare triple {28153#false} assume !false; {28153#false} is VALID [2018-11-23 12:46:02,293 INFO L273 TraceCheckUtils]: 60: Hoare triple {28153#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 12:46:02,293 INFO L273 TraceCheckUtils]: 61: Hoare triple {28153#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 12:46:02,293 INFO L273 TraceCheckUtils]: 62: Hoare triple {28153#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 12:46:02,293 INFO L273 TraceCheckUtils]: 63: Hoare triple {28153#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 12:46:02,293 INFO L273 TraceCheckUtils]: 64: Hoare triple {28153#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 12:46:02,293 INFO L273 TraceCheckUtils]: 65: Hoare triple {28153#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 12:46:02,294 INFO L273 TraceCheckUtils]: 66: Hoare triple {28153#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 12:46:02,294 INFO L273 TraceCheckUtils]: 67: Hoare triple {28153#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 12:46:02,294 INFO L273 TraceCheckUtils]: 68: Hoare triple {28153#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 12:46:02,294 INFO L273 TraceCheckUtils]: 69: Hoare triple {28153#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 12:46:02,294 INFO L273 TraceCheckUtils]: 70: Hoare triple {28153#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 12:46:02,295 INFO L273 TraceCheckUtils]: 71: Hoare triple {28153#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 12:46:02,295 INFO L273 TraceCheckUtils]: 72: Hoare triple {28153#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 12:46:02,295 INFO L273 TraceCheckUtils]: 73: Hoare triple {28153#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 12:46:02,295 INFO L273 TraceCheckUtils]: 74: Hoare triple {28153#false} assume 4432 == #t~mem36;havoc #t~mem36; {28153#false} is VALID [2018-11-23 12:46:02,295 INFO L273 TraceCheckUtils]: 75: Hoare triple {28153#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {28153#false} is VALID [2018-11-23 12:46:02,295 INFO L273 TraceCheckUtils]: 76: Hoare triple {28153#false} assume 5 == ~blastFlag~0; {28153#false} is VALID [2018-11-23 12:46:02,295 INFO L273 TraceCheckUtils]: 77: Hoare triple {28153#false} assume !false; {28153#false} is VALID [2018-11-23 12:46:02,301 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 12:46:02,301 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:02,301 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:02,302 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 12:46:02,302 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:02,302 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:02,377 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 71 edges. 71 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:02,377 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:02,377 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:02,377 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:02,378 INFO L87 Difference]: Start difference. First operand 421 states and 626 transitions. Second operand 4 states. [2018-11-23 12:46:03,490 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:03,491 INFO L93 Difference]: Finished difference Result 722 states and 1065 transitions. [2018-11-23 12:46:03,491 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:03,491 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 12:46:03,491 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:03,492 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:03,494 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 398 transitions. [2018-11-23 12:46:03,494 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:03,497 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 398 transitions. [2018-11-23 12:46:03,497 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 398 transitions. [2018-11-23 12:46:03,945 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 398 edges. 398 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:03,957 INFO L225 Difference]: With dead ends: 722 [2018-11-23 12:46:03,957 INFO L226 Difference]: Without dead ends: 463 [2018-11-23 12:46:03,959 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:03,959 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 463 states. [2018-11-23 12:46:04,131 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 463 to 421. [2018-11-23 12:46:04,131 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:04,131 INFO L82 GeneralOperation]: Start isEquivalent. First operand 463 states. Second operand 421 states. [2018-11-23 12:46:04,131 INFO L74 IsIncluded]: Start isIncluded. First operand 463 states. Second operand 421 states. [2018-11-23 12:46:04,131 INFO L87 Difference]: Start difference. First operand 463 states. Second operand 421 states. [2018-11-23 12:46:04,143 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:04,143 INFO L93 Difference]: Finished difference Result 463 states and 677 transitions. [2018-11-23 12:46:04,143 INFO L276 IsEmpty]: Start isEmpty. Operand 463 states and 677 transitions. [2018-11-23 12:46:04,144 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:04,144 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:04,144 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 463 states. [2018-11-23 12:46:04,144 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 463 states. [2018-11-23 12:46:04,155 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:04,155 INFO L93 Difference]: Finished difference Result 463 states and 677 transitions. [2018-11-23 12:46:04,155 INFO L276 IsEmpty]: Start isEmpty. Operand 463 states and 677 transitions. [2018-11-23 12:46:04,156 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:04,156 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:04,156 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:04,156 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:04,156 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 12:46:04,165 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 624 transitions. [2018-11-23 12:46:04,166 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 624 transitions. Word has length 78 [2018-11-23 12:46:04,166 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:04,166 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 624 transitions. [2018-11-23 12:46:04,166 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:04,166 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 624 transitions. [2018-11-23 12:46:04,167 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2018-11-23 12:46:04,167 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:04,167 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:04,167 INFO L423 AbstractCegarLoop]: === Iteration 14 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:04,167 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:04,167 INFO L82 PathProgramCache]: Analyzing trace with hash -1290131619, now seen corresponding path program 1 times [2018-11-23 12:46:04,167 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:04,167 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:04,168 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:04,168 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:04,168 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:04,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:04,470 INFO L256 TraceCheckUtils]: 0: Hoare triple {30391#true} call ULTIMATE.init(); {30391#true} is VALID [2018-11-23 12:46:04,470 INFO L273 TraceCheckUtils]: 1: Hoare triple {30391#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {30391#true} is VALID [2018-11-23 12:46:04,470 INFO L273 TraceCheckUtils]: 2: Hoare triple {30391#true} assume true; {30391#true} is VALID [2018-11-23 12:46:04,470 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {30391#true} {30391#true} #542#return; {30391#true} is VALID [2018-11-23 12:46:04,471 INFO L256 TraceCheckUtils]: 4: Hoare triple {30391#true} call #t~ret139 := main(); {30391#true} is VALID [2018-11-23 12:46:04,471 INFO L273 TraceCheckUtils]: 5: Hoare triple {30391#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {30391#true} is VALID [2018-11-23 12:46:04,471 INFO L256 TraceCheckUtils]: 6: Hoare triple {30391#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {30391#true} is VALID [2018-11-23 12:46:04,471 INFO L273 TraceCheckUtils]: 7: Hoare triple {30391#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 12:46:04,471 INFO L273 TraceCheckUtils]: 8: Hoare triple {30391#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {30391#true} is VALID [2018-11-23 12:46:04,472 INFO L273 TraceCheckUtils]: 9: Hoare triple {30391#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {30391#true} is VALID [2018-11-23 12:46:04,472 INFO L273 TraceCheckUtils]: 10: Hoare triple {30391#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {30391#true} is VALID [2018-11-23 12:46:04,472 INFO L273 TraceCheckUtils]: 11: Hoare triple {30391#true} assume !false; {30391#true} is VALID [2018-11-23 12:46:04,472 INFO L273 TraceCheckUtils]: 12: Hoare triple {30391#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 12:46:04,472 INFO L273 TraceCheckUtils]: 13: Hoare triple {30391#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 12:46:04,473 INFO L273 TraceCheckUtils]: 14: Hoare triple {30391#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 12:46:04,473 INFO L273 TraceCheckUtils]: 15: Hoare triple {30391#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 12:46:04,473 INFO L273 TraceCheckUtils]: 16: Hoare triple {30391#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 12:46:04,473 INFO L273 TraceCheckUtils]: 17: Hoare triple {30391#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 12:46:04,473 INFO L273 TraceCheckUtils]: 18: Hoare triple {30391#true} assume 4368 == #t~mem28;havoc #t~mem28; {30391#true} is VALID [2018-11-23 12:46:04,473 INFO L273 TraceCheckUtils]: 19: Hoare triple {30391#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {30391#true} is VALID [2018-11-23 12:46:04,473 INFO L273 TraceCheckUtils]: 20: Hoare triple {30391#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {30391#true} is VALID [2018-11-23 12:46:04,473 INFO L273 TraceCheckUtils]: 21: Hoare triple {30391#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 12:46:04,474 INFO L273 TraceCheckUtils]: 22: Hoare triple {30391#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {30391#true} is VALID [2018-11-23 12:46:04,474 INFO L273 TraceCheckUtils]: 23: Hoare triple {30391#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {30391#true} is VALID [2018-11-23 12:46:04,474 INFO L273 TraceCheckUtils]: 24: Hoare triple {30391#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {30391#true} is VALID [2018-11-23 12:46:04,474 INFO L273 TraceCheckUtils]: 25: Hoare triple {30391#true} ~skip~0 := 0; {30391#true} is VALID [2018-11-23 12:46:04,474 INFO L273 TraceCheckUtils]: 26: Hoare triple {30391#true} assume !false; {30391#true} is VALID [2018-11-23 12:46:04,474 INFO L273 TraceCheckUtils]: 27: Hoare triple {30391#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 12:46:04,474 INFO L273 TraceCheckUtils]: 28: Hoare triple {30391#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 12:46:04,474 INFO L273 TraceCheckUtils]: 29: Hoare triple {30391#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 12:46:04,475 INFO L273 TraceCheckUtils]: 30: Hoare triple {30391#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 12:46:04,475 INFO L273 TraceCheckUtils]: 31: Hoare triple {30391#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 12:46:04,475 INFO L273 TraceCheckUtils]: 32: Hoare triple {30391#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 12:46:04,475 INFO L273 TraceCheckUtils]: 33: Hoare triple {30391#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 12:46:04,475 INFO L273 TraceCheckUtils]: 34: Hoare triple {30391#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 12:46:04,475 INFO L273 TraceCheckUtils]: 35: Hoare triple {30391#true} assume 4384 == #t~mem30;havoc #t~mem30; {30391#true} is VALID [2018-11-23 12:46:04,475 INFO L273 TraceCheckUtils]: 36: Hoare triple {30391#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {30391#true} is VALID [2018-11-23 12:46:04,475 INFO L273 TraceCheckUtils]: 37: Hoare triple {30391#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {30391#true} is VALID [2018-11-23 12:46:04,475 INFO L273 TraceCheckUtils]: 38: Hoare triple {30391#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 12:46:04,476 INFO L273 TraceCheckUtils]: 39: Hoare triple {30391#true} assume 0 != #t~mem69;havoc #t~mem69;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:04,477 INFO L273 TraceCheckUtils]: 40: Hoare triple {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:04,477 INFO L273 TraceCheckUtils]: 41: Hoare triple {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:04,478 INFO L273 TraceCheckUtils]: 42: Hoare triple {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:04,478 INFO L273 TraceCheckUtils]: 43: Hoare triple {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} ~skip~0 := 0; {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:04,479 INFO L273 TraceCheckUtils]: 44: Hoare triple {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !false; {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:04,479 INFO L273 TraceCheckUtils]: 45: Hoare triple {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:04,480 INFO L273 TraceCheckUtils]: 46: Hoare triple {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:04,480 INFO L273 TraceCheckUtils]: 47: Hoare triple {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {30394#(= |ssl3_connect_#t~mem25| 4560)} is VALID [2018-11-23 12:46:04,481 INFO L273 TraceCheckUtils]: 48: Hoare triple {30394#(= |ssl3_connect_#t~mem25| 4560)} assume 4096 == #t~mem25;havoc #t~mem25; {30392#false} is VALID [2018-11-23 12:46:04,481 INFO L273 TraceCheckUtils]: 49: Hoare triple {30392#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 12:46:04,481 INFO L273 TraceCheckUtils]: 50: Hoare triple {30392#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {30392#false} is VALID [2018-11-23 12:46:04,482 INFO L273 TraceCheckUtils]: 51: Hoare triple {30392#false} call #t~mem58 := read~int(~s.base, ~s.offset, 4); {30392#false} is VALID [2018-11-23 12:46:04,482 INFO L273 TraceCheckUtils]: 52: Hoare triple {30392#false} assume !(768 != ~bitwiseAnd(#t~mem58, 65280));havoc #t~mem58;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem59.base, #t~mem59.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 12:46:04,482 INFO L273 TraceCheckUtils]: 53: Hoare triple {30392#false} assume !(0 == (#t~mem59.base + #t~mem59.offset) % 4294967296);havoc #t~mem59.base, #t~mem59.offset; {30392#false} is VALID [2018-11-23 12:46:04,482 INFO L273 TraceCheckUtils]: 54: Hoare triple {30392#false} assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___4~0 := #t~nondet61;havoc #t~nondet61; {30392#false} is VALID [2018-11-23 12:46:04,482 INFO L273 TraceCheckUtils]: 55: Hoare triple {30392#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet62 && #t~nondet62 <= 2147483647;~tmp___5~0 := #t~nondet62;havoc #t~nondet62; {30392#false} is VALID [2018-11-23 12:46:04,483 INFO L273 TraceCheckUtils]: 56: Hoare triple {30392#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 60 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 60 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset;call write~int(0, ~s.base, 64 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 12:46:04,483 INFO L273 TraceCheckUtils]: 57: Hoare triple {30392#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {30392#false} is VALID [2018-11-23 12:46:04,483 INFO L273 TraceCheckUtils]: 58: Hoare triple {30392#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {30392#false} is VALID [2018-11-23 12:46:04,483 INFO L273 TraceCheckUtils]: 59: Hoare triple {30392#false} ~skip~0 := 0; {30392#false} is VALID [2018-11-23 12:46:04,483 INFO L273 TraceCheckUtils]: 60: Hoare triple {30392#false} assume !false; {30392#false} is VALID [2018-11-23 12:46:04,484 INFO L273 TraceCheckUtils]: 61: Hoare triple {30392#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 12:46:04,484 INFO L273 TraceCheckUtils]: 62: Hoare triple {30392#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 12:46:04,484 INFO L273 TraceCheckUtils]: 63: Hoare triple {30392#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 12:46:04,484 INFO L273 TraceCheckUtils]: 64: Hoare triple {30392#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 12:46:04,484 INFO L273 TraceCheckUtils]: 65: Hoare triple {30392#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 12:46:04,484 INFO L273 TraceCheckUtils]: 66: Hoare triple {30392#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 12:46:04,484 INFO L273 TraceCheckUtils]: 67: Hoare triple {30392#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 12:46:04,484 INFO L273 TraceCheckUtils]: 68: Hoare triple {30392#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 12:46:04,485 INFO L273 TraceCheckUtils]: 69: Hoare triple {30392#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 12:46:04,485 INFO L273 TraceCheckUtils]: 70: Hoare triple {30392#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 12:46:04,485 INFO L273 TraceCheckUtils]: 71: Hoare triple {30392#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 12:46:04,485 INFO L273 TraceCheckUtils]: 72: Hoare triple {30392#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 12:46:04,485 INFO L273 TraceCheckUtils]: 73: Hoare triple {30392#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 12:46:04,485 INFO L273 TraceCheckUtils]: 74: Hoare triple {30392#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 12:46:04,485 INFO L273 TraceCheckUtils]: 75: Hoare triple {30392#false} assume 4432 == #t~mem36;havoc #t~mem36; {30392#false} is VALID [2018-11-23 12:46:04,485 INFO L273 TraceCheckUtils]: 76: Hoare triple {30392#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {30392#false} is VALID [2018-11-23 12:46:04,485 INFO L273 TraceCheckUtils]: 77: Hoare triple {30392#false} assume 5 == ~blastFlag~0; {30392#false} is VALID [2018-11-23 12:46:04,486 INFO L273 TraceCheckUtils]: 78: Hoare triple {30392#false} assume !false; {30392#false} is VALID [2018-11-23 12:46:04,490 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 12:46:04,490 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:04,490 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:04,490 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 79 [2018-11-23 12:46:04,491 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:04,491 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:04,575 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 72 edges. 72 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:04,575 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:04,575 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:04,576 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:04,576 INFO L87 Difference]: Start difference. First operand 421 states and 624 transitions. Second operand 4 states. [2018-11-23 12:46:06,142 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:06,142 INFO L93 Difference]: Finished difference Result 943 states and 1391 transitions. [2018-11-23 12:46:06,142 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:06,142 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 79 [2018-11-23 12:46:06,142 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:06,143 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:06,145 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 462 transitions. [2018-11-23 12:46:06,145 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:06,147 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 462 transitions. [2018-11-23 12:46:06,147 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 462 transitions. [2018-11-23 12:46:06,605 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 462 edges. 462 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:06,620 INFO L225 Difference]: With dead ends: 943 [2018-11-23 12:46:06,620 INFO L226 Difference]: Without dead ends: 535 [2018-11-23 12:46:06,622 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:06,622 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 535 states. [2018-11-23 12:46:06,816 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 535 to 421. [2018-11-23 12:46:06,816 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:06,816 INFO L82 GeneralOperation]: Start isEquivalent. First operand 535 states. Second operand 421 states. [2018-11-23 12:46:06,816 INFO L74 IsIncluded]: Start isIncluded. First operand 535 states. Second operand 421 states. [2018-11-23 12:46:06,817 INFO L87 Difference]: Start difference. First operand 535 states. Second operand 421 states. [2018-11-23 12:46:06,831 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:06,831 INFO L93 Difference]: Finished difference Result 535 states and 782 transitions. [2018-11-23 12:46:06,831 INFO L276 IsEmpty]: Start isEmpty. Operand 535 states and 782 transitions. [2018-11-23 12:46:06,832 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:06,832 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:06,832 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 535 states. [2018-11-23 12:46:06,832 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 535 states. [2018-11-23 12:46:06,845 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:06,845 INFO L93 Difference]: Finished difference Result 535 states and 782 transitions. [2018-11-23 12:46:06,845 INFO L276 IsEmpty]: Start isEmpty. Operand 535 states and 782 transitions. [2018-11-23 12:46:06,846 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:06,846 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:06,846 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:06,846 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:06,846 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 12:46:06,857 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 622 transitions. [2018-11-23 12:46:06,857 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 622 transitions. Word has length 79 [2018-11-23 12:46:06,858 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:06,858 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 622 transitions. [2018-11-23 12:46:06,858 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:06,858 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 622 transitions. [2018-11-23 12:46:06,859 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2018-11-23 12:46:06,859 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:06,859 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:06,859 INFO L423 AbstractCegarLoop]: === Iteration 15 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:06,860 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:06,860 INFO L82 PathProgramCache]: Analyzing trace with hash 765876928, now seen corresponding path program 1 times [2018-11-23 12:46:06,860 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:06,860 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:06,861 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:06,861 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:06,861 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:06,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:07,003 INFO L256 TraceCheckUtils]: 0: Hoare triple {33028#true} call ULTIMATE.init(); {33028#true} is VALID [2018-11-23 12:46:07,004 INFO L273 TraceCheckUtils]: 1: Hoare triple {33028#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {33028#true} is VALID [2018-11-23 12:46:07,004 INFO L273 TraceCheckUtils]: 2: Hoare triple {33028#true} assume true; {33028#true} is VALID [2018-11-23 12:46:07,004 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {33028#true} {33028#true} #542#return; {33028#true} is VALID [2018-11-23 12:46:07,004 INFO L256 TraceCheckUtils]: 4: Hoare triple {33028#true} call #t~ret139 := main(); {33028#true} is VALID [2018-11-23 12:46:07,005 INFO L273 TraceCheckUtils]: 5: Hoare triple {33028#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {33028#true} is VALID [2018-11-23 12:46:07,005 INFO L256 TraceCheckUtils]: 6: Hoare triple {33028#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {33028#true} is VALID [2018-11-23 12:46:07,005 INFO L273 TraceCheckUtils]: 7: Hoare triple {33028#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 12:46:07,005 INFO L273 TraceCheckUtils]: 8: Hoare triple {33028#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {33028#true} is VALID [2018-11-23 12:46:07,005 INFO L273 TraceCheckUtils]: 9: Hoare triple {33028#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {33028#true} is VALID [2018-11-23 12:46:07,006 INFO L273 TraceCheckUtils]: 10: Hoare triple {33028#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {33028#true} is VALID [2018-11-23 12:46:07,006 INFO L273 TraceCheckUtils]: 11: Hoare triple {33028#true} assume !false; {33028#true} is VALID [2018-11-23 12:46:07,006 INFO L273 TraceCheckUtils]: 12: Hoare triple {33028#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 12:46:07,006 INFO L273 TraceCheckUtils]: 13: Hoare triple {33028#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 12:46:07,006 INFO L273 TraceCheckUtils]: 14: Hoare triple {33028#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 12:46:07,007 INFO L273 TraceCheckUtils]: 15: Hoare triple {33028#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 12:46:07,007 INFO L273 TraceCheckUtils]: 16: Hoare triple {33028#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 12:46:07,007 INFO L273 TraceCheckUtils]: 17: Hoare triple {33028#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 12:46:07,007 INFO L273 TraceCheckUtils]: 18: Hoare triple {33028#true} assume 4368 == #t~mem28;havoc #t~mem28; {33028#true} is VALID [2018-11-23 12:46:07,007 INFO L273 TraceCheckUtils]: 19: Hoare triple {33028#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {33028#true} is VALID [2018-11-23 12:46:07,007 INFO L273 TraceCheckUtils]: 20: Hoare triple {33028#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {33028#true} is VALID [2018-11-23 12:46:07,007 INFO L273 TraceCheckUtils]: 21: Hoare triple {33028#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 12:46:07,007 INFO L273 TraceCheckUtils]: 22: Hoare triple {33028#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {33028#true} is VALID [2018-11-23 12:46:07,008 INFO L273 TraceCheckUtils]: 23: Hoare triple {33028#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {33028#true} is VALID [2018-11-23 12:46:07,008 INFO L273 TraceCheckUtils]: 24: Hoare triple {33028#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {33028#true} is VALID [2018-11-23 12:46:07,008 INFO L273 TraceCheckUtils]: 25: Hoare triple {33028#true} ~skip~0 := 0; {33028#true} is VALID [2018-11-23 12:46:07,008 INFO L273 TraceCheckUtils]: 26: Hoare triple {33028#true} assume !false; {33028#true} is VALID [2018-11-23 12:46:07,008 INFO L273 TraceCheckUtils]: 27: Hoare triple {33028#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 12:46:07,008 INFO L273 TraceCheckUtils]: 28: Hoare triple {33028#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 12:46:07,008 INFO L273 TraceCheckUtils]: 29: Hoare triple {33028#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 12:46:07,009 INFO L273 TraceCheckUtils]: 30: Hoare triple {33028#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 12:46:07,009 INFO L273 TraceCheckUtils]: 31: Hoare triple {33028#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 12:46:07,009 INFO L273 TraceCheckUtils]: 32: Hoare triple {33028#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 12:46:07,009 INFO L273 TraceCheckUtils]: 33: Hoare triple {33028#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 12:46:07,009 INFO L273 TraceCheckUtils]: 34: Hoare triple {33028#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 12:46:07,009 INFO L273 TraceCheckUtils]: 35: Hoare triple {33028#true} assume 4384 == #t~mem30;havoc #t~mem30; {33028#true} is VALID [2018-11-23 12:46:07,009 INFO L273 TraceCheckUtils]: 36: Hoare triple {33028#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {33028#true} is VALID [2018-11-23 12:46:07,009 INFO L273 TraceCheckUtils]: 37: Hoare triple {33028#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {33028#true} is VALID [2018-11-23 12:46:07,009 INFO L273 TraceCheckUtils]: 38: Hoare triple {33028#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 12:46:07,010 INFO L273 TraceCheckUtils]: 39: Hoare triple {33028#true} assume 0 != #t~mem69;havoc #t~mem69;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:07,011 INFO L273 TraceCheckUtils]: 40: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:07,011 INFO L273 TraceCheckUtils]: 41: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:07,012 INFO L273 TraceCheckUtils]: 42: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:07,012 INFO L273 TraceCheckUtils]: 43: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} ~skip~0 := 0; {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:07,013 INFO L273 TraceCheckUtils]: 44: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !false; {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:07,013 INFO L273 TraceCheckUtils]: 45: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:07,014 INFO L273 TraceCheckUtils]: 46: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:07,014 INFO L273 TraceCheckUtils]: 47: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:07,015 INFO L273 TraceCheckUtils]: 48: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:07,015 INFO L273 TraceCheckUtils]: 49: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:07,016 INFO L273 TraceCheckUtils]: 50: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:07,016 INFO L273 TraceCheckUtils]: 51: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {33031#(= |ssl3_connect_#t~mem29| 4560)} is VALID [2018-11-23 12:46:07,017 INFO L273 TraceCheckUtils]: 52: Hoare triple {33031#(= |ssl3_connect_#t~mem29| 4560)} assume 4369 == #t~mem29;havoc #t~mem29; {33029#false} is VALID [2018-11-23 12:46:07,017 INFO L273 TraceCheckUtils]: 53: Hoare triple {33029#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {33029#false} is VALID [2018-11-23 12:46:07,017 INFO L273 TraceCheckUtils]: 54: Hoare triple {33029#false} assume !(0 == ~blastFlag~0); {33029#false} is VALID [2018-11-23 12:46:07,018 INFO L273 TraceCheckUtils]: 55: Hoare triple {33029#false} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 12:46:07,018 INFO L273 TraceCheckUtils]: 56: Hoare triple {33029#false} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {33029#false} is VALID [2018-11-23 12:46:07,018 INFO L273 TraceCheckUtils]: 57: Hoare triple {33029#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {33029#false} is VALID [2018-11-23 12:46:07,018 INFO L273 TraceCheckUtils]: 58: Hoare triple {33029#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {33029#false} is VALID [2018-11-23 12:46:07,018 INFO L273 TraceCheckUtils]: 59: Hoare triple {33029#false} ~skip~0 := 0; {33029#false} is VALID [2018-11-23 12:46:07,019 INFO L273 TraceCheckUtils]: 60: Hoare triple {33029#false} assume !false; {33029#false} is VALID [2018-11-23 12:46:07,019 INFO L273 TraceCheckUtils]: 61: Hoare triple {33029#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 12:46:07,019 INFO L273 TraceCheckUtils]: 62: Hoare triple {33029#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 12:46:07,019 INFO L273 TraceCheckUtils]: 63: Hoare triple {33029#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 12:46:07,019 INFO L273 TraceCheckUtils]: 64: Hoare triple {33029#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 12:46:07,020 INFO L273 TraceCheckUtils]: 65: Hoare triple {33029#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 12:46:07,020 INFO L273 TraceCheckUtils]: 66: Hoare triple {33029#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 12:46:07,020 INFO L273 TraceCheckUtils]: 67: Hoare triple {33029#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 12:46:07,020 INFO L273 TraceCheckUtils]: 68: Hoare triple {33029#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 12:46:07,020 INFO L273 TraceCheckUtils]: 69: Hoare triple {33029#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 12:46:07,020 INFO L273 TraceCheckUtils]: 70: Hoare triple {33029#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 12:46:07,020 INFO L273 TraceCheckUtils]: 71: Hoare triple {33029#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 12:46:07,020 INFO L273 TraceCheckUtils]: 72: Hoare triple {33029#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 12:46:07,020 INFO L273 TraceCheckUtils]: 73: Hoare triple {33029#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 12:46:07,021 INFO L273 TraceCheckUtils]: 74: Hoare triple {33029#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 12:46:07,021 INFO L273 TraceCheckUtils]: 75: Hoare triple {33029#false} assume 4432 == #t~mem36;havoc #t~mem36; {33029#false} is VALID [2018-11-23 12:46:07,021 INFO L273 TraceCheckUtils]: 76: Hoare triple {33029#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {33029#false} is VALID [2018-11-23 12:46:07,021 INFO L273 TraceCheckUtils]: 77: Hoare triple {33029#false} assume 5 == ~blastFlag~0; {33029#false} is VALID [2018-11-23 12:46:07,021 INFO L273 TraceCheckUtils]: 78: Hoare triple {33029#false} assume !false; {33029#false} is VALID [2018-11-23 12:46:07,026 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 57 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 12:46:07,026 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:07,026 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:07,026 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 79 [2018-11-23 12:46:07,027 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:07,027 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:07,095 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 72 edges. 72 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:07,096 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:07,096 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:07,096 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:07,096 INFO L87 Difference]: Start difference. First operand 421 states and 622 transitions. Second operand 4 states. [2018-11-23 12:46:08,530 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:08,530 INFO L93 Difference]: Finished difference Result 788 states and 1159 transitions. [2018-11-23 12:46:08,530 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:08,530 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 79 [2018-11-23 12:46:08,530 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:08,530 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:08,533 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 457 transitions. [2018-11-23 12:46:08,533 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:08,535 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 457 transitions. [2018-11-23 12:46:08,535 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 457 transitions. [2018-11-23 12:46:08,981 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 457 edges. 457 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:08,998 INFO L225 Difference]: With dead ends: 788 [2018-11-23 12:46:08,998 INFO L226 Difference]: Without dead ends: 529 [2018-11-23 12:46:08,999 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:09,003 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 529 states. [2018-11-23 12:46:09,230 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 529 to 421. [2018-11-23 12:46:09,230 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:09,230 INFO L82 GeneralOperation]: Start isEquivalent. First operand 529 states. Second operand 421 states. [2018-11-23 12:46:09,230 INFO L74 IsIncluded]: Start isIncluded. First operand 529 states. Second operand 421 states. [2018-11-23 12:46:09,230 INFO L87 Difference]: Start difference. First operand 529 states. Second operand 421 states. [2018-11-23 12:46:09,243 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:09,244 INFO L93 Difference]: Finished difference Result 529 states and 773 transitions. [2018-11-23 12:46:09,244 INFO L276 IsEmpty]: Start isEmpty. Operand 529 states and 773 transitions. [2018-11-23 12:46:09,244 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:09,244 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:09,244 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 529 states. [2018-11-23 12:46:09,245 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 529 states. [2018-11-23 12:46:09,257 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:09,257 INFO L93 Difference]: Finished difference Result 529 states and 773 transitions. [2018-11-23 12:46:09,257 INFO L276 IsEmpty]: Start isEmpty. Operand 529 states and 773 transitions. [2018-11-23 12:46:09,257 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:09,258 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:09,258 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:09,258 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:09,258 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 12:46:09,265 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 620 transitions. [2018-11-23 12:46:09,265 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 620 transitions. Word has length 79 [2018-11-23 12:46:09,266 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:09,266 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 620 transitions. [2018-11-23 12:46:09,266 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:09,266 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 620 transitions. [2018-11-23 12:46:09,267 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2018-11-23 12:46:09,267 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:09,267 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:09,267 INFO L423 AbstractCegarLoop]: === Iteration 16 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:09,267 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:09,267 INFO L82 PathProgramCache]: Analyzing trace with hash 1633028379, now seen corresponding path program 1 times [2018-11-23 12:46:09,267 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:09,267 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:09,268 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:09,268 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:09,268 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:09,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:09,510 INFO L256 TraceCheckUtils]: 0: Hoare triple {35479#true} call ULTIMATE.init(); {35479#true} is VALID [2018-11-23 12:46:09,510 INFO L273 TraceCheckUtils]: 1: Hoare triple {35479#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {35479#true} is VALID [2018-11-23 12:46:09,510 INFO L273 TraceCheckUtils]: 2: Hoare triple {35479#true} assume true; {35479#true} is VALID [2018-11-23 12:46:09,511 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {35479#true} {35479#true} #542#return; {35479#true} is VALID [2018-11-23 12:46:09,511 INFO L256 TraceCheckUtils]: 4: Hoare triple {35479#true} call #t~ret139 := main(); {35479#true} is VALID [2018-11-23 12:46:09,511 INFO L273 TraceCheckUtils]: 5: Hoare triple {35479#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {35479#true} is VALID [2018-11-23 12:46:09,511 INFO L256 TraceCheckUtils]: 6: Hoare triple {35479#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {35479#true} is VALID [2018-11-23 12:46:09,511 INFO L273 TraceCheckUtils]: 7: Hoare triple {35479#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 12:46:09,511 INFO L273 TraceCheckUtils]: 8: Hoare triple {35479#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {35479#true} is VALID [2018-11-23 12:46:09,512 INFO L273 TraceCheckUtils]: 9: Hoare triple {35479#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {35479#true} is VALID [2018-11-23 12:46:09,512 INFO L273 TraceCheckUtils]: 10: Hoare triple {35479#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {35479#true} is VALID [2018-11-23 12:46:09,512 INFO L273 TraceCheckUtils]: 11: Hoare triple {35479#true} assume !false; {35479#true} is VALID [2018-11-23 12:46:09,512 INFO L273 TraceCheckUtils]: 12: Hoare triple {35479#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 12:46:09,512 INFO L273 TraceCheckUtils]: 13: Hoare triple {35479#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 12:46:09,512 INFO L273 TraceCheckUtils]: 14: Hoare triple {35479#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 12:46:09,512 INFO L273 TraceCheckUtils]: 15: Hoare triple {35479#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 12:46:09,512 INFO L273 TraceCheckUtils]: 16: Hoare triple {35479#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 12:46:09,513 INFO L273 TraceCheckUtils]: 17: Hoare triple {35479#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 12:46:09,513 INFO L273 TraceCheckUtils]: 18: Hoare triple {35479#true} assume 4368 == #t~mem28;havoc #t~mem28; {35479#true} is VALID [2018-11-23 12:46:09,513 INFO L273 TraceCheckUtils]: 19: Hoare triple {35479#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {35479#true} is VALID [2018-11-23 12:46:09,513 INFO L273 TraceCheckUtils]: 20: Hoare triple {35479#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {35479#true} is VALID [2018-11-23 12:46:09,513 INFO L273 TraceCheckUtils]: 21: Hoare triple {35479#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 12:46:09,513 INFO L273 TraceCheckUtils]: 22: Hoare triple {35479#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {35479#true} is VALID [2018-11-23 12:46:09,513 INFO L273 TraceCheckUtils]: 23: Hoare triple {35479#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {35479#true} is VALID [2018-11-23 12:46:09,513 INFO L273 TraceCheckUtils]: 24: Hoare triple {35479#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {35479#true} is VALID [2018-11-23 12:46:09,513 INFO L273 TraceCheckUtils]: 25: Hoare triple {35479#true} ~skip~0 := 0; {35479#true} is VALID [2018-11-23 12:46:09,514 INFO L273 TraceCheckUtils]: 26: Hoare triple {35479#true} assume !false; {35479#true} is VALID [2018-11-23 12:46:09,514 INFO L273 TraceCheckUtils]: 27: Hoare triple {35479#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 12:46:09,514 INFO L273 TraceCheckUtils]: 28: Hoare triple {35479#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 12:46:09,514 INFO L273 TraceCheckUtils]: 29: Hoare triple {35479#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 12:46:09,514 INFO L273 TraceCheckUtils]: 30: Hoare triple {35479#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 12:46:09,514 INFO L273 TraceCheckUtils]: 31: Hoare triple {35479#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 12:46:09,514 INFO L273 TraceCheckUtils]: 32: Hoare triple {35479#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 12:46:09,514 INFO L273 TraceCheckUtils]: 33: Hoare triple {35479#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 12:46:09,515 INFO L273 TraceCheckUtils]: 34: Hoare triple {35479#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 12:46:09,515 INFO L273 TraceCheckUtils]: 35: Hoare triple {35479#true} assume 4384 == #t~mem30;havoc #t~mem30; {35479#true} is VALID [2018-11-23 12:46:09,515 INFO L273 TraceCheckUtils]: 36: Hoare triple {35479#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {35479#true} is VALID [2018-11-23 12:46:09,515 INFO L273 TraceCheckUtils]: 37: Hoare triple {35479#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {35479#true} is VALID [2018-11-23 12:46:09,515 INFO L273 TraceCheckUtils]: 38: Hoare triple {35479#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 12:46:09,516 INFO L273 TraceCheckUtils]: 39: Hoare triple {35479#true} assume !(0 != #t~mem69);havoc #t~mem69;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:09,516 INFO L273 TraceCheckUtils]: 40: Hoare triple {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:09,517 INFO L273 TraceCheckUtils]: 41: Hoare triple {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:09,517 INFO L273 TraceCheckUtils]: 42: Hoare triple {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:09,517 INFO L273 TraceCheckUtils]: 43: Hoare triple {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} ~skip~0 := 0; {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:09,518 INFO L273 TraceCheckUtils]: 44: Hoare triple {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !false; {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:09,518 INFO L273 TraceCheckUtils]: 45: Hoare triple {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:09,519 INFO L273 TraceCheckUtils]: 46: Hoare triple {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:09,519 INFO L273 TraceCheckUtils]: 47: Hoare triple {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {35482#(= |ssl3_connect_#t~mem25| 4400)} is VALID [2018-11-23 12:46:09,520 INFO L273 TraceCheckUtils]: 48: Hoare triple {35482#(= |ssl3_connect_#t~mem25| 4400)} assume 4096 == #t~mem25;havoc #t~mem25; {35480#false} is VALID [2018-11-23 12:46:09,520 INFO L273 TraceCheckUtils]: 49: Hoare triple {35480#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 12:46:09,520 INFO L273 TraceCheckUtils]: 50: Hoare triple {35480#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {35480#false} is VALID [2018-11-23 12:46:09,520 INFO L273 TraceCheckUtils]: 51: Hoare triple {35480#false} call #t~mem58 := read~int(~s.base, ~s.offset, 4); {35480#false} is VALID [2018-11-23 12:46:09,521 INFO L273 TraceCheckUtils]: 52: Hoare triple {35480#false} assume !(768 != ~bitwiseAnd(#t~mem58, 65280));havoc #t~mem58;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem59.base, #t~mem59.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 12:46:09,521 INFO L273 TraceCheckUtils]: 53: Hoare triple {35480#false} assume !(0 == (#t~mem59.base + #t~mem59.offset) % 4294967296);havoc #t~mem59.base, #t~mem59.offset; {35480#false} is VALID [2018-11-23 12:46:09,521 INFO L273 TraceCheckUtils]: 54: Hoare triple {35480#false} assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___4~0 := #t~nondet61;havoc #t~nondet61; {35480#false} is VALID [2018-11-23 12:46:09,521 INFO L273 TraceCheckUtils]: 55: Hoare triple {35480#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet62 && #t~nondet62 <= 2147483647;~tmp___5~0 := #t~nondet62;havoc #t~nondet62; {35480#false} is VALID [2018-11-23 12:46:09,521 INFO L273 TraceCheckUtils]: 56: Hoare triple {35480#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 60 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 60 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset;call write~int(0, ~s.base, 64 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 12:46:09,522 INFO L273 TraceCheckUtils]: 57: Hoare triple {35480#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {35480#false} is VALID [2018-11-23 12:46:09,522 INFO L273 TraceCheckUtils]: 58: Hoare triple {35480#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {35480#false} is VALID [2018-11-23 12:46:09,522 INFO L273 TraceCheckUtils]: 59: Hoare triple {35480#false} ~skip~0 := 0; {35480#false} is VALID [2018-11-23 12:46:09,522 INFO L273 TraceCheckUtils]: 60: Hoare triple {35480#false} assume !false; {35480#false} is VALID [2018-11-23 12:46:09,522 INFO L273 TraceCheckUtils]: 61: Hoare triple {35480#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 12:46:09,522 INFO L273 TraceCheckUtils]: 62: Hoare triple {35480#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 12:46:09,523 INFO L273 TraceCheckUtils]: 63: Hoare triple {35480#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 12:46:09,523 INFO L273 TraceCheckUtils]: 64: Hoare triple {35480#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 12:46:09,523 INFO L273 TraceCheckUtils]: 65: Hoare triple {35480#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 12:46:09,523 INFO L273 TraceCheckUtils]: 66: Hoare triple {35480#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 12:46:09,523 INFO L273 TraceCheckUtils]: 67: Hoare triple {35480#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 12:46:09,523 INFO L273 TraceCheckUtils]: 68: Hoare triple {35480#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 12:46:09,523 INFO L273 TraceCheckUtils]: 69: Hoare triple {35480#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 12:46:09,523 INFO L273 TraceCheckUtils]: 70: Hoare triple {35480#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 12:46:09,523 INFO L273 TraceCheckUtils]: 71: Hoare triple {35480#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 12:46:09,524 INFO L273 TraceCheckUtils]: 72: Hoare triple {35480#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 12:46:09,524 INFO L273 TraceCheckUtils]: 73: Hoare triple {35480#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 12:46:09,524 INFO L273 TraceCheckUtils]: 74: Hoare triple {35480#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 12:46:09,524 INFO L273 TraceCheckUtils]: 75: Hoare triple {35480#false} assume 4432 == #t~mem36;havoc #t~mem36; {35480#false} is VALID [2018-11-23 12:46:09,524 INFO L273 TraceCheckUtils]: 76: Hoare triple {35480#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {35480#false} is VALID [2018-11-23 12:46:09,524 INFO L273 TraceCheckUtils]: 77: Hoare triple {35480#false} assume 5 == ~blastFlag~0; {35480#false} is VALID [2018-11-23 12:46:09,524 INFO L273 TraceCheckUtils]: 78: Hoare triple {35480#false} assume !false; {35480#false} is VALID [2018-11-23 12:46:09,529 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 12:46:09,529 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:09,529 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:09,529 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 79 [2018-11-23 12:46:09,530 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:09,530 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:09,599 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 72 edges. 72 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:09,599 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:09,600 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:09,600 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:09,600 INFO L87 Difference]: Start difference. First operand 421 states and 620 transitions. Second operand 4 states. [2018-11-23 12:46:10,673 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:10,673 INFO L93 Difference]: Finished difference Result 871 states and 1276 transitions. [2018-11-23 12:46:10,673 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:10,673 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 79 [2018-11-23 12:46:10,673 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:10,674 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:10,676 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 397 transitions. [2018-11-23 12:46:10,676 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:10,678 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 397 transitions. [2018-11-23 12:46:10,678 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 397 transitions. [2018-11-23 12:46:11,060 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 397 edges. 397 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:11,072 INFO L225 Difference]: With dead ends: 871 [2018-11-23 12:46:11,072 INFO L226 Difference]: Without dead ends: 463 [2018-11-23 12:46:11,073 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:11,074 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 463 states. [2018-11-23 12:46:11,229 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 463 to 421. [2018-11-23 12:46:11,230 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:11,230 INFO L82 GeneralOperation]: Start isEquivalent. First operand 463 states. Second operand 421 states. [2018-11-23 12:46:11,230 INFO L74 IsIncluded]: Start isIncluded. First operand 463 states. Second operand 421 states. [2018-11-23 12:46:11,230 INFO L87 Difference]: Start difference. First operand 463 states. Second operand 421 states. [2018-11-23 12:46:11,241 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:11,241 INFO L93 Difference]: Finished difference Result 463 states and 671 transitions. [2018-11-23 12:46:11,241 INFO L276 IsEmpty]: Start isEmpty. Operand 463 states and 671 transitions. [2018-11-23 12:46:11,242 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:11,242 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:11,242 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 463 states. [2018-11-23 12:46:11,242 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 463 states. [2018-11-23 12:46:11,253 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:11,253 INFO L93 Difference]: Finished difference Result 463 states and 671 transitions. [2018-11-23 12:46:11,253 INFO L276 IsEmpty]: Start isEmpty. Operand 463 states and 671 transitions. [2018-11-23 12:46:11,254 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:11,254 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:11,254 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:11,254 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:11,254 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 12:46:11,263 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 618 transitions. [2018-11-23 12:46:11,263 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 618 transitions. Word has length 79 [2018-11-23 12:46:11,263 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:11,263 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 618 transitions. [2018-11-23 12:46:11,263 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:11,263 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 618 transitions. [2018-11-23 12:46:11,264 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2018-11-23 12:46:11,264 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:11,264 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:11,264 INFO L423 AbstractCegarLoop]: === Iteration 17 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:11,264 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:11,264 INFO L82 PathProgramCache]: Analyzing trace with hash -605930370, now seen corresponding path program 1 times [2018-11-23 12:46:11,264 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:11,264 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:11,265 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:11,265 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:11,265 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:11,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:12,024 INFO L256 TraceCheckUtils]: 0: Hoare triple {37884#true} call ULTIMATE.init(); {37884#true} is VALID [2018-11-23 12:46:12,025 INFO L273 TraceCheckUtils]: 1: Hoare triple {37884#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {37884#true} is VALID [2018-11-23 12:46:12,025 INFO L273 TraceCheckUtils]: 2: Hoare triple {37884#true} assume true; {37884#true} is VALID [2018-11-23 12:46:12,025 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {37884#true} {37884#true} #542#return; {37884#true} is VALID [2018-11-23 12:46:12,025 INFO L256 TraceCheckUtils]: 4: Hoare triple {37884#true} call #t~ret139 := main(); {37884#true} is VALID [2018-11-23 12:46:12,025 INFO L273 TraceCheckUtils]: 5: Hoare triple {37884#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {37884#true} is VALID [2018-11-23 12:46:12,026 INFO L256 TraceCheckUtils]: 6: Hoare triple {37884#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {37884#true} is VALID [2018-11-23 12:46:12,026 INFO L273 TraceCheckUtils]: 7: Hoare triple {37884#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 12:46:12,026 INFO L273 TraceCheckUtils]: 8: Hoare triple {37884#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {37884#true} is VALID [2018-11-23 12:46:12,026 INFO L273 TraceCheckUtils]: 9: Hoare triple {37884#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {37884#true} is VALID [2018-11-23 12:46:12,026 INFO L273 TraceCheckUtils]: 10: Hoare triple {37884#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {37884#true} is VALID [2018-11-23 12:46:12,026 INFO L273 TraceCheckUtils]: 11: Hoare triple {37884#true} assume !false; {37884#true} is VALID [2018-11-23 12:46:12,027 INFO L273 TraceCheckUtils]: 12: Hoare triple {37884#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 12:46:12,027 INFO L273 TraceCheckUtils]: 13: Hoare triple {37884#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 12:46:12,027 INFO L273 TraceCheckUtils]: 14: Hoare triple {37884#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 12:46:12,027 INFO L273 TraceCheckUtils]: 15: Hoare triple {37884#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 12:46:12,027 INFO L273 TraceCheckUtils]: 16: Hoare triple {37884#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 12:46:12,027 INFO L273 TraceCheckUtils]: 17: Hoare triple {37884#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 12:46:12,027 INFO L273 TraceCheckUtils]: 18: Hoare triple {37884#true} assume 4368 == #t~mem28;havoc #t~mem28; {37884#true} is VALID [2018-11-23 12:46:12,028 INFO L273 TraceCheckUtils]: 19: Hoare triple {37884#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {37884#true} is VALID [2018-11-23 12:46:12,028 INFO L273 TraceCheckUtils]: 20: Hoare triple {37884#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {37884#true} is VALID [2018-11-23 12:46:12,028 INFO L273 TraceCheckUtils]: 21: Hoare triple {37884#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 12:46:12,028 INFO L273 TraceCheckUtils]: 22: Hoare triple {37884#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {37884#true} is VALID [2018-11-23 12:46:12,028 INFO L273 TraceCheckUtils]: 23: Hoare triple {37884#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {37884#true} is VALID [2018-11-23 12:46:12,028 INFO L273 TraceCheckUtils]: 24: Hoare triple {37884#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {37884#true} is VALID [2018-11-23 12:46:12,029 INFO L273 TraceCheckUtils]: 25: Hoare triple {37884#true} ~skip~0 := 0; {37884#true} is VALID [2018-11-23 12:46:12,029 INFO L273 TraceCheckUtils]: 26: Hoare triple {37884#true} assume !false; {37884#true} is VALID [2018-11-23 12:46:12,029 INFO L273 TraceCheckUtils]: 27: Hoare triple {37884#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 12:46:12,029 INFO L273 TraceCheckUtils]: 28: Hoare triple {37884#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 12:46:12,029 INFO L273 TraceCheckUtils]: 29: Hoare triple {37884#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 12:46:12,029 INFO L273 TraceCheckUtils]: 30: Hoare triple {37884#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 12:46:12,030 INFO L273 TraceCheckUtils]: 31: Hoare triple {37884#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 12:46:12,030 INFO L273 TraceCheckUtils]: 32: Hoare triple {37884#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 12:46:12,030 INFO L273 TraceCheckUtils]: 33: Hoare triple {37884#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 12:46:12,030 INFO L273 TraceCheckUtils]: 34: Hoare triple {37884#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 12:46:12,030 INFO L273 TraceCheckUtils]: 35: Hoare triple {37884#true} assume 4384 == #t~mem30;havoc #t~mem30; {37884#true} is VALID [2018-11-23 12:46:12,030 INFO L273 TraceCheckUtils]: 36: Hoare triple {37884#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {37884#true} is VALID [2018-11-23 12:46:12,031 INFO L273 TraceCheckUtils]: 37: Hoare triple {37884#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {37884#true} is VALID [2018-11-23 12:46:12,031 INFO L273 TraceCheckUtils]: 38: Hoare triple {37884#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 12:46:12,043 INFO L273 TraceCheckUtils]: 39: Hoare triple {37884#true} assume !(0 != #t~mem69);havoc #t~mem69;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:12,055 INFO L273 TraceCheckUtils]: 40: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:12,056 INFO L273 TraceCheckUtils]: 41: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:12,056 INFO L273 TraceCheckUtils]: 42: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:12,058 INFO L273 TraceCheckUtils]: 43: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} ~skip~0 := 0; {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:12,058 INFO L273 TraceCheckUtils]: 44: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !false; {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:12,060 INFO L273 TraceCheckUtils]: 45: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:12,060 INFO L273 TraceCheckUtils]: 46: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:12,062 INFO L273 TraceCheckUtils]: 47: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:12,062 INFO L273 TraceCheckUtils]: 48: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:12,064 INFO L273 TraceCheckUtils]: 49: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:12,064 INFO L273 TraceCheckUtils]: 50: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:12,066 INFO L273 TraceCheckUtils]: 51: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {37887#(= |ssl3_connect_#t~mem29| 4400)} is VALID [2018-11-23 12:46:12,066 INFO L273 TraceCheckUtils]: 52: Hoare triple {37887#(= |ssl3_connect_#t~mem29| 4400)} assume 4369 == #t~mem29;havoc #t~mem29; {37885#false} is VALID [2018-11-23 12:46:12,066 INFO L273 TraceCheckUtils]: 53: Hoare triple {37885#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {37885#false} is VALID [2018-11-23 12:46:12,066 INFO L273 TraceCheckUtils]: 54: Hoare triple {37885#false} assume !(0 == ~blastFlag~0); {37885#false} is VALID [2018-11-23 12:46:12,066 INFO L273 TraceCheckUtils]: 55: Hoare triple {37885#false} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 12:46:12,066 INFO L273 TraceCheckUtils]: 56: Hoare triple {37885#false} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {37885#false} is VALID [2018-11-23 12:46:12,067 INFO L273 TraceCheckUtils]: 57: Hoare triple {37885#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {37885#false} is VALID [2018-11-23 12:46:12,067 INFO L273 TraceCheckUtils]: 58: Hoare triple {37885#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {37885#false} is VALID [2018-11-23 12:46:12,067 INFO L273 TraceCheckUtils]: 59: Hoare triple {37885#false} ~skip~0 := 0; {37885#false} is VALID [2018-11-23 12:46:12,067 INFO L273 TraceCheckUtils]: 60: Hoare triple {37885#false} assume !false; {37885#false} is VALID [2018-11-23 12:46:12,067 INFO L273 TraceCheckUtils]: 61: Hoare triple {37885#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 12:46:12,067 INFO L273 TraceCheckUtils]: 62: Hoare triple {37885#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 12:46:12,067 INFO L273 TraceCheckUtils]: 63: Hoare triple {37885#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 12:46:12,067 INFO L273 TraceCheckUtils]: 64: Hoare triple {37885#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 12:46:12,068 INFO L273 TraceCheckUtils]: 65: Hoare triple {37885#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 12:46:12,068 INFO L273 TraceCheckUtils]: 66: Hoare triple {37885#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 12:46:12,068 INFO L273 TraceCheckUtils]: 67: Hoare triple {37885#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 12:46:12,068 INFO L273 TraceCheckUtils]: 68: Hoare triple {37885#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 12:46:12,068 INFO L273 TraceCheckUtils]: 69: Hoare triple {37885#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 12:46:12,068 INFO L273 TraceCheckUtils]: 70: Hoare triple {37885#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 12:46:12,068 INFO L273 TraceCheckUtils]: 71: Hoare triple {37885#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 12:46:12,068 INFO L273 TraceCheckUtils]: 72: Hoare triple {37885#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 12:46:12,068 INFO L273 TraceCheckUtils]: 73: Hoare triple {37885#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 12:46:12,069 INFO L273 TraceCheckUtils]: 74: Hoare triple {37885#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 12:46:12,069 INFO L273 TraceCheckUtils]: 75: Hoare triple {37885#false} assume 4432 == #t~mem36;havoc #t~mem36; {37885#false} is VALID [2018-11-23 12:46:12,069 INFO L273 TraceCheckUtils]: 76: Hoare triple {37885#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {37885#false} is VALID [2018-11-23 12:46:12,069 INFO L273 TraceCheckUtils]: 77: Hoare triple {37885#false} assume 5 == ~blastFlag~0; {37885#false} is VALID [2018-11-23 12:46:12,069 INFO L273 TraceCheckUtils]: 78: Hoare triple {37885#false} assume !false; {37885#false} is VALID [2018-11-23 12:46:12,074 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 57 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 12:46:12,074 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:12,074 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:12,074 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 79 [2018-11-23 12:46:12,075 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:12,075 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:12,148 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 72 edges. 72 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:12,149 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:12,149 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:12,149 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:12,149 INFO L87 Difference]: Start difference. First operand 421 states and 618 transitions. Second operand 4 states. [2018-11-23 12:46:13,252 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:13,253 INFO L93 Difference]: Finished difference Result 716 states and 1046 transitions. [2018-11-23 12:46:13,253 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:13,253 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 79 [2018-11-23 12:46:13,253 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:13,253 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:13,255 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 392 transitions. [2018-11-23 12:46:13,255 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:13,257 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 392 transitions. [2018-11-23 12:46:13,257 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 392 transitions. [2018-11-23 12:46:13,627 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 392 edges. 392 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:13,639 INFO L225 Difference]: With dead ends: 716 [2018-11-23 12:46:13,639 INFO L226 Difference]: Without dead ends: 457 [2018-11-23 12:46:13,640 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:13,641 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 457 states. [2018-11-23 12:46:13,773 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 457 to 421. [2018-11-23 12:46:13,773 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:13,774 INFO L82 GeneralOperation]: Start isEquivalent. First operand 457 states. Second operand 421 states. [2018-11-23 12:46:13,774 INFO L74 IsIncluded]: Start isIncluded. First operand 457 states. Second operand 421 states. [2018-11-23 12:46:13,774 INFO L87 Difference]: Start difference. First operand 457 states. Second operand 421 states. [2018-11-23 12:46:13,785 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:13,785 INFO L93 Difference]: Finished difference Result 457 states and 662 transitions. [2018-11-23 12:46:13,785 INFO L276 IsEmpty]: Start isEmpty. Operand 457 states and 662 transitions. [2018-11-23 12:46:13,786 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:13,786 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:13,786 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 457 states. [2018-11-23 12:46:13,786 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 457 states. [2018-11-23 12:46:13,794 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:13,794 INFO L93 Difference]: Finished difference Result 457 states and 662 transitions. [2018-11-23 12:46:13,794 INFO L276 IsEmpty]: Start isEmpty. Operand 457 states and 662 transitions. [2018-11-23 12:46:13,794 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:13,795 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:13,795 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:13,795 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:13,795 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 12:46:13,802 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 616 transitions. [2018-11-23 12:46:13,802 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 616 transitions. Word has length 79 [2018-11-23 12:46:13,802 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:13,803 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 616 transitions. [2018-11-23 12:46:13,803 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:13,803 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 616 transitions. [2018-11-23 12:46:13,803 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2018-11-23 12:46:13,803 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:13,803 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:13,804 INFO L423 AbstractCegarLoop]: === Iteration 18 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:13,804 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:13,804 INFO L82 PathProgramCache]: Analyzing trace with hash -1753186171, now seen corresponding path program 1 times [2018-11-23 12:46:13,804 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:13,804 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:13,805 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:13,805 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:13,805 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:13,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:13,973 INFO L256 TraceCheckUtils]: 0: Hoare triple {40103#true} call ULTIMATE.init(); {40103#true} is VALID [2018-11-23 12:46:13,974 INFO L273 TraceCheckUtils]: 1: Hoare triple {40103#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {40103#true} is VALID [2018-11-23 12:46:13,974 INFO L273 TraceCheckUtils]: 2: Hoare triple {40103#true} assume true; {40103#true} is VALID [2018-11-23 12:46:13,974 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {40103#true} {40103#true} #542#return; {40103#true} is VALID [2018-11-23 12:46:13,974 INFO L256 TraceCheckUtils]: 4: Hoare triple {40103#true} call #t~ret139 := main(); {40103#true} is VALID [2018-11-23 12:46:13,974 INFO L273 TraceCheckUtils]: 5: Hoare triple {40103#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {40103#true} is VALID [2018-11-23 12:46:13,974 INFO L256 TraceCheckUtils]: 6: Hoare triple {40103#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {40103#true} is VALID [2018-11-23 12:46:13,974 INFO L273 TraceCheckUtils]: 7: Hoare triple {40103#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 12:46:13,974 INFO L273 TraceCheckUtils]: 8: Hoare triple {40103#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {40103#true} is VALID [2018-11-23 12:46:13,975 INFO L273 TraceCheckUtils]: 9: Hoare triple {40103#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {40103#true} is VALID [2018-11-23 12:46:13,975 INFO L273 TraceCheckUtils]: 10: Hoare triple {40103#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {40103#true} is VALID [2018-11-23 12:46:13,975 INFO L273 TraceCheckUtils]: 11: Hoare triple {40103#true} assume !false; {40103#true} is VALID [2018-11-23 12:46:13,975 INFO L273 TraceCheckUtils]: 12: Hoare triple {40103#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 12:46:13,975 INFO L273 TraceCheckUtils]: 13: Hoare triple {40103#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 12:46:13,975 INFO L273 TraceCheckUtils]: 14: Hoare triple {40103#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 12:46:13,975 INFO L273 TraceCheckUtils]: 15: Hoare triple {40103#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 12:46:13,975 INFO L273 TraceCheckUtils]: 16: Hoare triple {40103#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 12:46:13,976 INFO L273 TraceCheckUtils]: 17: Hoare triple {40103#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 12:46:13,976 INFO L273 TraceCheckUtils]: 18: Hoare triple {40103#true} assume 4368 == #t~mem28;havoc #t~mem28; {40103#true} is VALID [2018-11-23 12:46:13,976 INFO L273 TraceCheckUtils]: 19: Hoare triple {40103#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {40103#true} is VALID [2018-11-23 12:46:13,976 INFO L273 TraceCheckUtils]: 20: Hoare triple {40103#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {40103#true} is VALID [2018-11-23 12:46:13,976 INFO L273 TraceCheckUtils]: 21: Hoare triple {40103#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 12:46:13,976 INFO L273 TraceCheckUtils]: 22: Hoare triple {40103#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {40103#true} is VALID [2018-11-23 12:46:13,976 INFO L273 TraceCheckUtils]: 23: Hoare triple {40103#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {40103#true} is VALID [2018-11-23 12:46:13,976 INFO L273 TraceCheckUtils]: 24: Hoare triple {40103#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {40103#true} is VALID [2018-11-23 12:46:13,976 INFO L273 TraceCheckUtils]: 25: Hoare triple {40103#true} ~skip~0 := 0; {40103#true} is VALID [2018-11-23 12:46:13,977 INFO L273 TraceCheckUtils]: 26: Hoare triple {40103#true} assume !false; {40103#true} is VALID [2018-11-23 12:46:13,977 INFO L273 TraceCheckUtils]: 27: Hoare triple {40103#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 12:46:13,977 INFO L273 TraceCheckUtils]: 28: Hoare triple {40103#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 12:46:13,977 INFO L273 TraceCheckUtils]: 29: Hoare triple {40103#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 12:46:13,977 INFO L273 TraceCheckUtils]: 30: Hoare triple {40103#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 12:46:13,977 INFO L273 TraceCheckUtils]: 31: Hoare triple {40103#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 12:46:13,977 INFO L273 TraceCheckUtils]: 32: Hoare triple {40103#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 12:46:13,977 INFO L273 TraceCheckUtils]: 33: Hoare triple {40103#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 12:46:13,977 INFO L273 TraceCheckUtils]: 34: Hoare triple {40103#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 12:46:13,978 INFO L273 TraceCheckUtils]: 35: Hoare triple {40103#true} assume 4384 == #t~mem30;havoc #t~mem30; {40103#true} is VALID [2018-11-23 12:46:13,978 INFO L273 TraceCheckUtils]: 36: Hoare triple {40103#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {40103#true} is VALID [2018-11-23 12:46:13,978 INFO L273 TraceCheckUtils]: 37: Hoare triple {40103#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {40103#true} is VALID [2018-11-23 12:46:13,978 INFO L273 TraceCheckUtils]: 38: Hoare triple {40103#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 12:46:13,979 INFO L273 TraceCheckUtils]: 39: Hoare triple {40103#true} assume 0 != #t~mem69;havoc #t~mem69;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:13,980 INFO L273 TraceCheckUtils]: 40: Hoare triple {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:13,980 INFO L273 TraceCheckUtils]: 41: Hoare triple {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:13,980 INFO L273 TraceCheckUtils]: 42: Hoare triple {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:13,981 INFO L273 TraceCheckUtils]: 43: Hoare triple {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} ~skip~0 := 0; {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:13,981 INFO L273 TraceCheckUtils]: 44: Hoare triple {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !false; {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:13,981 INFO L273 TraceCheckUtils]: 45: Hoare triple {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:13,982 INFO L273 TraceCheckUtils]: 46: Hoare triple {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:13,982 INFO L273 TraceCheckUtils]: 47: Hoare triple {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:13,983 INFO L273 TraceCheckUtils]: 48: Hoare triple {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {40106#(= |ssl3_connect_#t~mem26| 4560)} is VALID [2018-11-23 12:46:13,984 INFO L273 TraceCheckUtils]: 49: Hoare triple {40106#(= |ssl3_connect_#t~mem26| 4560)} assume 20480 == #t~mem26;havoc #t~mem26; {40104#false} is VALID [2018-11-23 12:46:13,984 INFO L273 TraceCheckUtils]: 50: Hoare triple {40104#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 12:46:13,984 INFO L273 TraceCheckUtils]: 51: Hoare triple {40104#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {40104#false} is VALID [2018-11-23 12:46:13,984 INFO L273 TraceCheckUtils]: 52: Hoare triple {40104#false} call #t~mem58 := read~int(~s.base, ~s.offset, 4); {40104#false} is VALID [2018-11-23 12:46:13,985 INFO L273 TraceCheckUtils]: 53: Hoare triple {40104#false} assume !(768 != ~bitwiseAnd(#t~mem58, 65280));havoc #t~mem58;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem59.base, #t~mem59.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 12:46:13,985 INFO L273 TraceCheckUtils]: 54: Hoare triple {40104#false} assume !(0 == (#t~mem59.base + #t~mem59.offset) % 4294967296);havoc #t~mem59.base, #t~mem59.offset; {40104#false} is VALID [2018-11-23 12:46:13,985 INFO L273 TraceCheckUtils]: 55: Hoare triple {40104#false} assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___4~0 := #t~nondet61;havoc #t~nondet61; {40104#false} is VALID [2018-11-23 12:46:13,985 INFO L273 TraceCheckUtils]: 56: Hoare triple {40104#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet62 && #t~nondet62 <= 2147483647;~tmp___5~0 := #t~nondet62;havoc #t~nondet62; {40104#false} is VALID [2018-11-23 12:46:13,985 INFO L273 TraceCheckUtils]: 57: Hoare triple {40104#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 60 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 60 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset;call write~int(0, ~s.base, 64 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 12:46:13,985 INFO L273 TraceCheckUtils]: 58: Hoare triple {40104#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {40104#false} is VALID [2018-11-23 12:46:13,986 INFO L273 TraceCheckUtils]: 59: Hoare triple {40104#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {40104#false} is VALID [2018-11-23 12:46:13,986 INFO L273 TraceCheckUtils]: 60: Hoare triple {40104#false} ~skip~0 := 0; {40104#false} is VALID [2018-11-23 12:46:13,986 INFO L273 TraceCheckUtils]: 61: Hoare triple {40104#false} assume !false; {40104#false} is VALID [2018-11-23 12:46:13,986 INFO L273 TraceCheckUtils]: 62: Hoare triple {40104#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 12:46:13,986 INFO L273 TraceCheckUtils]: 63: Hoare triple {40104#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 12:46:13,987 INFO L273 TraceCheckUtils]: 64: Hoare triple {40104#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 12:46:13,987 INFO L273 TraceCheckUtils]: 65: Hoare triple {40104#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 12:46:13,987 INFO L273 TraceCheckUtils]: 66: Hoare triple {40104#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 12:46:13,987 INFO L273 TraceCheckUtils]: 67: Hoare triple {40104#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 12:46:13,987 INFO L273 TraceCheckUtils]: 68: Hoare triple {40104#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 12:46:13,987 INFO L273 TraceCheckUtils]: 69: Hoare triple {40104#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 12:46:13,987 INFO L273 TraceCheckUtils]: 70: Hoare triple {40104#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 12:46:13,987 INFO L273 TraceCheckUtils]: 71: Hoare triple {40104#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 12:46:13,988 INFO L273 TraceCheckUtils]: 72: Hoare triple {40104#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 12:46:13,988 INFO L273 TraceCheckUtils]: 73: Hoare triple {40104#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 12:46:13,988 INFO L273 TraceCheckUtils]: 74: Hoare triple {40104#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 12:46:13,988 INFO L273 TraceCheckUtils]: 75: Hoare triple {40104#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 12:46:13,988 INFO L273 TraceCheckUtils]: 76: Hoare triple {40104#false} assume 4432 == #t~mem36;havoc #t~mem36; {40104#false} is VALID [2018-11-23 12:46:13,988 INFO L273 TraceCheckUtils]: 77: Hoare triple {40104#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {40104#false} is VALID [2018-11-23 12:46:13,988 INFO L273 TraceCheckUtils]: 78: Hoare triple {40104#false} assume 5 == ~blastFlag~0; {40104#false} is VALID [2018-11-23 12:46:13,988 INFO L273 TraceCheckUtils]: 79: Hoare triple {40104#false} assume !false; {40104#false} is VALID [2018-11-23 12:46:13,993 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 45 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 12:46:13,993 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:13,993 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:13,993 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 80 [2018-11-23 12:46:13,993 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:13,993 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:14,064 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 73 edges. 73 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:14,065 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:14,065 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:14,065 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:14,066 INFO L87 Difference]: Start difference. First operand 421 states and 616 transitions. Second operand 4 states. [2018-11-23 12:46:15,566 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:15,566 INFO L93 Difference]: Finished difference Result 937 states and 1368 transitions. [2018-11-23 12:46:15,566 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:15,566 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 80 [2018-11-23 12:46:15,567 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:15,567 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:15,568 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 456 transitions. [2018-11-23 12:46:15,569 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:15,570 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 456 transitions. [2018-11-23 12:46:15,570 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 456 transitions. [2018-11-23 12:46:16,018 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 456 edges. 456 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:16,034 INFO L225 Difference]: With dead ends: 937 [2018-11-23 12:46:16,034 INFO L226 Difference]: Without dead ends: 529 [2018-11-23 12:46:16,035 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:16,035 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 529 states. [2018-11-23 12:46:16,229 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 529 to 421. [2018-11-23 12:46:16,229 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:16,229 INFO L82 GeneralOperation]: Start isEquivalent. First operand 529 states. Second operand 421 states. [2018-11-23 12:46:16,229 INFO L74 IsIncluded]: Start isIncluded. First operand 529 states. Second operand 421 states. [2018-11-23 12:46:16,229 INFO L87 Difference]: Start difference. First operand 529 states. Second operand 421 states. [2018-11-23 12:46:16,244 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:16,244 INFO L93 Difference]: Finished difference Result 529 states and 767 transitions. [2018-11-23 12:46:16,244 INFO L276 IsEmpty]: Start isEmpty. Operand 529 states and 767 transitions. [2018-11-23 12:46:16,244 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:16,244 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:16,245 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 529 states. [2018-11-23 12:46:16,245 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 529 states. [2018-11-23 12:46:16,255 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:16,255 INFO L93 Difference]: Finished difference Result 529 states and 767 transitions. [2018-11-23 12:46:16,255 INFO L276 IsEmpty]: Start isEmpty. Operand 529 states and 767 transitions. [2018-11-23 12:46:16,255 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:16,256 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:16,256 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:16,256 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:16,256 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 12:46:16,263 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 614 transitions. [2018-11-23 12:46:16,263 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 614 transitions. Word has length 80 [2018-11-23 12:46:16,264 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:16,264 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 614 transitions. [2018-11-23 12:46:16,264 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:16,264 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 614 transitions. [2018-11-23 12:46:16,264 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2018-11-23 12:46:16,264 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:16,265 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:16,265 INFO L423 AbstractCegarLoop]: === Iteration 19 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:16,265 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:16,265 INFO L82 PathProgramCache]: Analyzing trace with hash -1329539449, now seen corresponding path program 1 times [2018-11-23 12:46:16,265 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:16,265 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:16,266 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:16,266 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:16,266 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:16,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:16,777 INFO L256 TraceCheckUtils]: 0: Hoare triple {42720#true} call ULTIMATE.init(); {42720#true} is VALID [2018-11-23 12:46:16,777 INFO L273 TraceCheckUtils]: 1: Hoare triple {42720#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {42720#true} is VALID [2018-11-23 12:46:16,778 INFO L273 TraceCheckUtils]: 2: Hoare triple {42720#true} assume true; {42720#true} is VALID [2018-11-23 12:46:16,778 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {42720#true} {42720#true} #542#return; {42720#true} is VALID [2018-11-23 12:46:16,778 INFO L256 TraceCheckUtils]: 4: Hoare triple {42720#true} call #t~ret139 := main(); {42720#true} is VALID [2018-11-23 12:46:16,778 INFO L273 TraceCheckUtils]: 5: Hoare triple {42720#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {42720#true} is VALID [2018-11-23 12:46:16,778 INFO L256 TraceCheckUtils]: 6: Hoare triple {42720#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {42720#true} is VALID [2018-11-23 12:46:16,778 INFO L273 TraceCheckUtils]: 7: Hoare triple {42720#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 12:46:16,778 INFO L273 TraceCheckUtils]: 8: Hoare triple {42720#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {42720#true} is VALID [2018-11-23 12:46:16,778 INFO L273 TraceCheckUtils]: 9: Hoare triple {42720#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {42720#true} is VALID [2018-11-23 12:46:16,779 INFO L273 TraceCheckUtils]: 10: Hoare triple {42720#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {42720#true} is VALID [2018-11-23 12:46:16,779 INFO L273 TraceCheckUtils]: 11: Hoare triple {42720#true} assume !false; {42720#true} is VALID [2018-11-23 12:46:16,779 INFO L273 TraceCheckUtils]: 12: Hoare triple {42720#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 12:46:16,779 INFO L273 TraceCheckUtils]: 13: Hoare triple {42720#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 12:46:16,779 INFO L273 TraceCheckUtils]: 14: Hoare triple {42720#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 12:46:16,779 INFO L273 TraceCheckUtils]: 15: Hoare triple {42720#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 12:46:16,779 INFO L273 TraceCheckUtils]: 16: Hoare triple {42720#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 12:46:16,779 INFO L273 TraceCheckUtils]: 17: Hoare triple {42720#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 12:46:16,779 INFO L273 TraceCheckUtils]: 18: Hoare triple {42720#true} assume 4368 == #t~mem28;havoc #t~mem28; {42720#true} is VALID [2018-11-23 12:46:16,780 INFO L273 TraceCheckUtils]: 19: Hoare triple {42720#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {42720#true} is VALID [2018-11-23 12:46:16,780 INFO L273 TraceCheckUtils]: 20: Hoare triple {42720#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {42720#true} is VALID [2018-11-23 12:46:16,780 INFO L273 TraceCheckUtils]: 21: Hoare triple {42720#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 12:46:16,780 INFO L273 TraceCheckUtils]: 22: Hoare triple {42720#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {42720#true} is VALID [2018-11-23 12:46:16,780 INFO L273 TraceCheckUtils]: 23: Hoare triple {42720#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {42720#true} is VALID [2018-11-23 12:46:16,780 INFO L273 TraceCheckUtils]: 24: Hoare triple {42720#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {42720#true} is VALID [2018-11-23 12:46:16,780 INFO L273 TraceCheckUtils]: 25: Hoare triple {42720#true} ~skip~0 := 0; {42720#true} is VALID [2018-11-23 12:46:16,780 INFO L273 TraceCheckUtils]: 26: Hoare triple {42720#true} assume !false; {42720#true} is VALID [2018-11-23 12:46:16,781 INFO L273 TraceCheckUtils]: 27: Hoare triple {42720#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 12:46:16,781 INFO L273 TraceCheckUtils]: 28: Hoare triple {42720#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 12:46:16,781 INFO L273 TraceCheckUtils]: 29: Hoare triple {42720#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 12:46:16,781 INFO L273 TraceCheckUtils]: 30: Hoare triple {42720#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 12:46:16,781 INFO L273 TraceCheckUtils]: 31: Hoare triple {42720#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 12:46:16,781 INFO L273 TraceCheckUtils]: 32: Hoare triple {42720#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 12:46:16,781 INFO L273 TraceCheckUtils]: 33: Hoare triple {42720#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 12:46:16,781 INFO L273 TraceCheckUtils]: 34: Hoare triple {42720#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 12:46:16,781 INFO L273 TraceCheckUtils]: 35: Hoare triple {42720#true} assume 4384 == #t~mem30;havoc #t~mem30; {42720#true} is VALID [2018-11-23 12:46:16,782 INFO L273 TraceCheckUtils]: 36: Hoare triple {42720#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {42720#true} is VALID [2018-11-23 12:46:16,782 INFO L273 TraceCheckUtils]: 37: Hoare triple {42720#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {42720#true} is VALID [2018-11-23 12:46:16,782 INFO L273 TraceCheckUtils]: 38: Hoare triple {42720#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 12:46:16,783 INFO L273 TraceCheckUtils]: 39: Hoare triple {42720#true} assume !(0 != #t~mem69);havoc #t~mem69;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:16,783 INFO L273 TraceCheckUtils]: 40: Hoare triple {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:16,784 INFO L273 TraceCheckUtils]: 41: Hoare triple {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:16,784 INFO L273 TraceCheckUtils]: 42: Hoare triple {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:16,785 INFO L273 TraceCheckUtils]: 43: Hoare triple {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} ~skip~0 := 0; {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:16,785 INFO L273 TraceCheckUtils]: 44: Hoare triple {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !false; {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:16,786 INFO L273 TraceCheckUtils]: 45: Hoare triple {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:16,786 INFO L273 TraceCheckUtils]: 46: Hoare triple {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:16,786 INFO L273 TraceCheckUtils]: 47: Hoare triple {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:16,787 INFO L273 TraceCheckUtils]: 48: Hoare triple {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {42723#(= |ssl3_connect_#t~mem26| 4400)} is VALID [2018-11-23 12:46:16,788 INFO L273 TraceCheckUtils]: 49: Hoare triple {42723#(= |ssl3_connect_#t~mem26| 4400)} assume 20480 == #t~mem26;havoc #t~mem26; {42721#false} is VALID [2018-11-23 12:46:16,788 INFO L273 TraceCheckUtils]: 50: Hoare triple {42721#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 12:46:16,788 INFO L273 TraceCheckUtils]: 51: Hoare triple {42721#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {42721#false} is VALID [2018-11-23 12:46:16,788 INFO L273 TraceCheckUtils]: 52: Hoare triple {42721#false} call #t~mem58 := read~int(~s.base, ~s.offset, 4); {42721#false} is VALID [2018-11-23 12:46:16,789 INFO L273 TraceCheckUtils]: 53: Hoare triple {42721#false} assume !(768 != ~bitwiseAnd(#t~mem58, 65280));havoc #t~mem58;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem59.base, #t~mem59.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 12:46:16,789 INFO L273 TraceCheckUtils]: 54: Hoare triple {42721#false} assume !(0 == (#t~mem59.base + #t~mem59.offset) % 4294967296);havoc #t~mem59.base, #t~mem59.offset; {42721#false} is VALID [2018-11-23 12:46:16,789 INFO L273 TraceCheckUtils]: 55: Hoare triple {42721#false} assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___4~0 := #t~nondet61;havoc #t~nondet61; {42721#false} is VALID [2018-11-23 12:46:16,789 INFO L273 TraceCheckUtils]: 56: Hoare triple {42721#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet62 && #t~nondet62 <= 2147483647;~tmp___5~0 := #t~nondet62;havoc #t~nondet62; {42721#false} is VALID [2018-11-23 12:46:16,789 INFO L273 TraceCheckUtils]: 57: Hoare triple {42721#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 60 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 60 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset;call write~int(0, ~s.base, 64 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 12:46:16,790 INFO L273 TraceCheckUtils]: 58: Hoare triple {42721#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {42721#false} is VALID [2018-11-23 12:46:16,790 INFO L273 TraceCheckUtils]: 59: Hoare triple {42721#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {42721#false} is VALID [2018-11-23 12:46:16,790 INFO L273 TraceCheckUtils]: 60: Hoare triple {42721#false} ~skip~0 := 0; {42721#false} is VALID [2018-11-23 12:46:16,790 INFO L273 TraceCheckUtils]: 61: Hoare triple {42721#false} assume !false; {42721#false} is VALID [2018-11-23 12:46:16,790 INFO L273 TraceCheckUtils]: 62: Hoare triple {42721#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 12:46:16,790 INFO L273 TraceCheckUtils]: 63: Hoare triple {42721#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 12:46:16,791 INFO L273 TraceCheckUtils]: 64: Hoare triple {42721#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 12:46:16,791 INFO L273 TraceCheckUtils]: 65: Hoare triple {42721#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 12:46:16,791 INFO L273 TraceCheckUtils]: 66: Hoare triple {42721#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 12:46:16,791 INFO L273 TraceCheckUtils]: 67: Hoare triple {42721#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 12:46:16,792 INFO L273 TraceCheckUtils]: 68: Hoare triple {42721#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 12:46:16,792 INFO L273 TraceCheckUtils]: 69: Hoare triple {42721#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 12:46:16,792 INFO L273 TraceCheckUtils]: 70: Hoare triple {42721#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 12:46:16,792 INFO L273 TraceCheckUtils]: 71: Hoare triple {42721#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 12:46:16,792 INFO L273 TraceCheckUtils]: 72: Hoare triple {42721#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 12:46:16,793 INFO L273 TraceCheckUtils]: 73: Hoare triple {42721#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 12:46:16,793 INFO L273 TraceCheckUtils]: 74: Hoare triple {42721#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 12:46:16,793 INFO L273 TraceCheckUtils]: 75: Hoare triple {42721#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 12:46:16,793 INFO L273 TraceCheckUtils]: 76: Hoare triple {42721#false} assume 4432 == #t~mem36;havoc #t~mem36; {42721#false} is VALID [2018-11-23 12:46:16,793 INFO L273 TraceCheckUtils]: 77: Hoare triple {42721#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {42721#false} is VALID [2018-11-23 12:46:16,793 INFO L273 TraceCheckUtils]: 78: Hoare triple {42721#false} assume 5 == ~blastFlag~0; {42721#false} is VALID [2018-11-23 12:46:16,793 INFO L273 TraceCheckUtils]: 79: Hoare triple {42721#false} assume !false; {42721#false} is VALID [2018-11-23 12:46:16,797 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 45 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 12:46:16,797 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:16,797 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:16,798 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 80 [2018-11-23 12:46:16,798 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:16,798 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:16,870 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 73 edges. 73 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:16,870 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:16,870 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:16,870 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:16,871 INFO L87 Difference]: Start difference. First operand 421 states and 614 transitions. Second operand 4 states. [2018-11-23 12:46:17,994 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:17,994 INFO L93 Difference]: Finished difference Result 865 states and 1257 transitions. [2018-11-23 12:46:17,994 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:17,994 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 80 [2018-11-23 12:46:17,994 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:17,994 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:17,996 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 391 transitions. [2018-11-23 12:46:17,996 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:17,998 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 391 transitions. [2018-11-23 12:46:17,998 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 391 transitions. [2018-11-23 12:46:18,367 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 391 edges. 391 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:18,379 INFO L225 Difference]: With dead ends: 865 [2018-11-23 12:46:18,379 INFO L226 Difference]: Without dead ends: 457 [2018-11-23 12:46:18,380 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:18,380 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 457 states. [2018-11-23 12:46:18,555 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 457 to 421. [2018-11-23 12:46:18,556 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:18,556 INFO L82 GeneralOperation]: Start isEquivalent. First operand 457 states. Second operand 421 states. [2018-11-23 12:46:18,556 INFO L74 IsIncluded]: Start isIncluded. First operand 457 states. Second operand 421 states. [2018-11-23 12:46:18,556 INFO L87 Difference]: Start difference. First operand 457 states. Second operand 421 states. [2018-11-23 12:46:18,566 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:18,567 INFO L93 Difference]: Finished difference Result 457 states and 658 transitions. [2018-11-23 12:46:18,567 INFO L276 IsEmpty]: Start isEmpty. Operand 457 states and 658 transitions. [2018-11-23 12:46:18,567 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:18,567 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:18,567 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 457 states. [2018-11-23 12:46:18,567 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 457 states. [2018-11-23 12:46:18,578 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:18,578 INFO L93 Difference]: Finished difference Result 457 states and 658 transitions. [2018-11-23 12:46:18,578 INFO L276 IsEmpty]: Start isEmpty. Operand 457 states and 658 transitions. [2018-11-23 12:46:18,579 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:18,579 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:18,579 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:18,579 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:18,579 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 12:46:18,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 612 transitions. [2018-11-23 12:46:18,587 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 612 transitions. Word has length 80 [2018-11-23 12:46:18,587 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:18,587 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 612 transitions. [2018-11-23 12:46:18,587 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:18,587 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 612 transitions. [2018-11-23 12:46:18,588 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2018-11-23 12:46:18,588 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:18,588 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:18,588 INFO L423 AbstractCegarLoop]: === Iteration 20 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:18,588 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:18,588 INFO L82 PathProgramCache]: Analyzing trace with hash -1468975710, now seen corresponding path program 1 times [2018-11-23 12:46:18,588 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:18,588 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:18,589 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:18,589 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:18,589 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:18,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:19,316 INFO L256 TraceCheckUtils]: 0: Hoare triple {45105#true} call ULTIMATE.init(); {45105#true} is VALID [2018-11-23 12:46:19,316 INFO L273 TraceCheckUtils]: 1: Hoare triple {45105#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {45105#true} is VALID [2018-11-23 12:46:19,317 INFO L273 TraceCheckUtils]: 2: Hoare triple {45105#true} assume true; {45105#true} is VALID [2018-11-23 12:46:19,317 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {45105#true} {45105#true} #542#return; {45105#true} is VALID [2018-11-23 12:46:19,317 INFO L256 TraceCheckUtils]: 4: Hoare triple {45105#true} call #t~ret139 := main(); {45105#true} is VALID [2018-11-23 12:46:19,317 INFO L273 TraceCheckUtils]: 5: Hoare triple {45105#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {45105#true} is VALID [2018-11-23 12:46:19,317 INFO L256 TraceCheckUtils]: 6: Hoare triple {45105#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {45105#true} is VALID [2018-11-23 12:46:19,317 INFO L273 TraceCheckUtils]: 7: Hoare triple {45105#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 12:46:19,318 INFO L273 TraceCheckUtils]: 8: Hoare triple {45105#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {45105#true} is VALID [2018-11-23 12:46:19,318 INFO L273 TraceCheckUtils]: 9: Hoare triple {45105#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {45105#true} is VALID [2018-11-23 12:46:19,318 INFO L273 TraceCheckUtils]: 10: Hoare triple {45105#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {45105#true} is VALID [2018-11-23 12:46:19,318 INFO L273 TraceCheckUtils]: 11: Hoare triple {45105#true} assume !false; {45105#true} is VALID [2018-11-23 12:46:19,318 INFO L273 TraceCheckUtils]: 12: Hoare triple {45105#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 12:46:19,318 INFO L273 TraceCheckUtils]: 13: Hoare triple {45105#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 12:46:19,319 INFO L273 TraceCheckUtils]: 14: Hoare triple {45105#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 12:46:19,319 INFO L273 TraceCheckUtils]: 15: Hoare triple {45105#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 12:46:19,319 INFO L273 TraceCheckUtils]: 16: Hoare triple {45105#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 12:46:19,319 INFO L273 TraceCheckUtils]: 17: Hoare triple {45105#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 12:46:19,319 INFO L273 TraceCheckUtils]: 18: Hoare triple {45105#true} assume 4368 == #t~mem28;havoc #t~mem28; {45105#true} is VALID [2018-11-23 12:46:19,319 INFO L273 TraceCheckUtils]: 19: Hoare triple {45105#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {45105#true} is VALID [2018-11-23 12:46:19,320 INFO L273 TraceCheckUtils]: 20: Hoare triple {45105#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {45105#true} is VALID [2018-11-23 12:46:19,320 INFO L273 TraceCheckUtils]: 21: Hoare triple {45105#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 12:46:19,320 INFO L273 TraceCheckUtils]: 22: Hoare triple {45105#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {45105#true} is VALID [2018-11-23 12:46:19,320 INFO L273 TraceCheckUtils]: 23: Hoare triple {45105#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {45105#true} is VALID [2018-11-23 12:46:19,320 INFO L273 TraceCheckUtils]: 24: Hoare triple {45105#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {45105#true} is VALID [2018-11-23 12:46:19,320 INFO L273 TraceCheckUtils]: 25: Hoare triple {45105#true} ~skip~0 := 0; {45105#true} is VALID [2018-11-23 12:46:19,320 INFO L273 TraceCheckUtils]: 26: Hoare triple {45105#true} assume !false; {45105#true} is VALID [2018-11-23 12:46:19,321 INFO L273 TraceCheckUtils]: 27: Hoare triple {45105#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 12:46:19,321 INFO L273 TraceCheckUtils]: 28: Hoare triple {45105#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 12:46:19,321 INFO L273 TraceCheckUtils]: 29: Hoare triple {45105#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 12:46:19,321 INFO L273 TraceCheckUtils]: 30: Hoare triple {45105#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 12:46:19,321 INFO L273 TraceCheckUtils]: 31: Hoare triple {45105#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 12:46:19,321 INFO L273 TraceCheckUtils]: 32: Hoare triple {45105#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 12:46:19,322 INFO L273 TraceCheckUtils]: 33: Hoare triple {45105#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 12:46:19,322 INFO L273 TraceCheckUtils]: 34: Hoare triple {45105#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 12:46:19,322 INFO L273 TraceCheckUtils]: 35: Hoare triple {45105#true} assume 4384 == #t~mem30;havoc #t~mem30; {45105#true} is VALID [2018-11-23 12:46:19,322 INFO L273 TraceCheckUtils]: 36: Hoare triple {45105#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {45105#true} is VALID [2018-11-23 12:46:19,322 INFO L273 TraceCheckUtils]: 37: Hoare triple {45105#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {45105#true} is VALID [2018-11-23 12:46:19,322 INFO L273 TraceCheckUtils]: 38: Hoare triple {45105#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 12:46:19,336 INFO L273 TraceCheckUtils]: 39: Hoare triple {45105#true} assume 0 != #t~mem69;havoc #t~mem69;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:19,351 INFO L273 TraceCheckUtils]: 40: Hoare triple {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:19,360 INFO L273 TraceCheckUtils]: 41: Hoare triple {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:19,369 INFO L273 TraceCheckUtils]: 42: Hoare triple {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:19,383 INFO L273 TraceCheckUtils]: 43: Hoare triple {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} ~skip~0 := 0; {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:19,383 INFO L273 TraceCheckUtils]: 44: Hoare triple {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !false; {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:19,389 INFO L273 TraceCheckUtils]: 45: Hoare triple {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:19,389 INFO L273 TraceCheckUtils]: 46: Hoare triple {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:19,389 INFO L273 TraceCheckUtils]: 47: Hoare triple {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:19,390 INFO L273 TraceCheckUtils]: 48: Hoare triple {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:19,390 INFO L273 TraceCheckUtils]: 49: Hoare triple {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {45108#(= |ssl3_connect_#t~mem27| 4560)} is VALID [2018-11-23 12:46:19,391 INFO L273 TraceCheckUtils]: 50: Hoare triple {45108#(= |ssl3_connect_#t~mem27| 4560)} assume 4099 == #t~mem27;havoc #t~mem27; {45106#false} is VALID [2018-11-23 12:46:19,391 INFO L273 TraceCheckUtils]: 51: Hoare triple {45106#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 12:46:19,391 INFO L273 TraceCheckUtils]: 52: Hoare triple {45106#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {45106#false} is VALID [2018-11-23 12:46:19,391 INFO L273 TraceCheckUtils]: 53: Hoare triple {45106#false} call #t~mem58 := read~int(~s.base, ~s.offset, 4); {45106#false} is VALID [2018-11-23 12:46:19,391 INFO L273 TraceCheckUtils]: 54: Hoare triple {45106#false} assume !(768 != ~bitwiseAnd(#t~mem58, 65280));havoc #t~mem58;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem59.base, #t~mem59.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 12:46:19,391 INFO L273 TraceCheckUtils]: 55: Hoare triple {45106#false} assume !(0 == (#t~mem59.base + #t~mem59.offset) % 4294967296);havoc #t~mem59.base, #t~mem59.offset; {45106#false} is VALID [2018-11-23 12:46:19,391 INFO L273 TraceCheckUtils]: 56: Hoare triple {45106#false} assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___4~0 := #t~nondet61;havoc #t~nondet61; {45106#false} is VALID [2018-11-23 12:46:19,391 INFO L273 TraceCheckUtils]: 57: Hoare triple {45106#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet62 && #t~nondet62 <= 2147483647;~tmp___5~0 := #t~nondet62;havoc #t~nondet62; {45106#false} is VALID [2018-11-23 12:46:19,392 INFO L273 TraceCheckUtils]: 58: Hoare triple {45106#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 60 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 60 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset;call write~int(0, ~s.base, 64 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 12:46:19,392 INFO L273 TraceCheckUtils]: 59: Hoare triple {45106#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {45106#false} is VALID [2018-11-23 12:46:19,392 INFO L273 TraceCheckUtils]: 60: Hoare triple {45106#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {45106#false} is VALID [2018-11-23 12:46:19,392 INFO L273 TraceCheckUtils]: 61: Hoare triple {45106#false} ~skip~0 := 0; {45106#false} is VALID [2018-11-23 12:46:19,392 INFO L273 TraceCheckUtils]: 62: Hoare triple {45106#false} assume !false; {45106#false} is VALID [2018-11-23 12:46:19,392 INFO L273 TraceCheckUtils]: 63: Hoare triple {45106#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 12:46:19,392 INFO L273 TraceCheckUtils]: 64: Hoare triple {45106#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 12:46:19,392 INFO L273 TraceCheckUtils]: 65: Hoare triple {45106#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 12:46:19,392 INFO L273 TraceCheckUtils]: 66: Hoare triple {45106#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 12:46:19,393 INFO L273 TraceCheckUtils]: 67: Hoare triple {45106#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 12:46:19,393 INFO L273 TraceCheckUtils]: 68: Hoare triple {45106#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 12:46:19,393 INFO L273 TraceCheckUtils]: 69: Hoare triple {45106#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 12:46:19,393 INFO L273 TraceCheckUtils]: 70: Hoare triple {45106#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 12:46:19,393 INFO L273 TraceCheckUtils]: 71: Hoare triple {45106#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 12:46:19,393 INFO L273 TraceCheckUtils]: 72: Hoare triple {45106#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 12:46:19,393 INFO L273 TraceCheckUtils]: 73: Hoare triple {45106#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 12:46:19,393 INFO L273 TraceCheckUtils]: 74: Hoare triple {45106#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 12:46:19,394 INFO L273 TraceCheckUtils]: 75: Hoare triple {45106#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 12:46:19,394 INFO L273 TraceCheckUtils]: 76: Hoare triple {45106#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 12:46:19,394 INFO L273 TraceCheckUtils]: 77: Hoare triple {45106#false} assume 4432 == #t~mem36;havoc #t~mem36; {45106#false} is VALID [2018-11-23 12:46:19,394 INFO L273 TraceCheckUtils]: 78: Hoare triple {45106#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {45106#false} is VALID [2018-11-23 12:46:19,394 INFO L273 TraceCheckUtils]: 79: Hoare triple {45106#false} assume 5 == ~blastFlag~0; {45106#false} is VALID [2018-11-23 12:46:19,394 INFO L273 TraceCheckUtils]: 80: Hoare triple {45106#false} assume !false; {45106#false} is VALID [2018-11-23 12:46:19,399 INFO L134 CoverageAnalysis]: Checked inductivity of 56 backedges. 48 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 12:46:19,399 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:19,399 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:19,400 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 12:46:19,400 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:19,400 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:19,484 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:19,484 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:19,485 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:19,485 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:19,485 INFO L87 Difference]: Start difference. First operand 421 states and 612 transitions. Second operand 4 states. [2018-11-23 12:46:20,910 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:20,911 INFO L93 Difference]: Finished difference Result 919 states and 1338 transitions. [2018-11-23 12:46:20,911 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:20,911 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 12:46:20,911 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:20,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:20,913 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 444 transitions. [2018-11-23 12:46:20,913 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:20,915 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 444 transitions. [2018-11-23 12:46:20,915 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 444 transitions. [2018-11-23 12:46:21,352 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 444 edges. 444 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:21,367 INFO L225 Difference]: With dead ends: 919 [2018-11-23 12:46:21,367 INFO L226 Difference]: Without dead ends: 511 [2018-11-23 12:46:21,368 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:21,368 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 511 states. [2018-11-23 12:46:21,489 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 511 to 421. [2018-11-23 12:46:21,489 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:21,489 INFO L82 GeneralOperation]: Start isEquivalent. First operand 511 states. Second operand 421 states. [2018-11-23 12:46:21,489 INFO L74 IsIncluded]: Start isIncluded. First operand 511 states. Second operand 421 states. [2018-11-23 12:46:21,489 INFO L87 Difference]: Start difference. First operand 511 states. Second operand 421 states. [2018-11-23 12:46:21,502 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:21,502 INFO L93 Difference]: Finished difference Result 511 states and 741 transitions. [2018-11-23 12:46:21,502 INFO L276 IsEmpty]: Start isEmpty. Operand 511 states and 741 transitions. [2018-11-23 12:46:21,502 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:21,503 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:21,503 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 511 states. [2018-11-23 12:46:21,503 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 511 states. [2018-11-23 12:46:21,512 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:21,512 INFO L93 Difference]: Finished difference Result 511 states and 741 transitions. [2018-11-23 12:46:21,512 INFO L276 IsEmpty]: Start isEmpty. Operand 511 states and 741 transitions. [2018-11-23 12:46:21,513 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:21,513 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:21,513 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:21,513 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:21,513 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 12:46:21,524 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 610 transitions. [2018-11-23 12:46:21,524 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 610 transitions. Word has length 81 [2018-11-23 12:46:21,525 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:21,525 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 610 transitions. [2018-11-23 12:46:21,525 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:21,525 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 610 transitions. [2018-11-23 12:46:21,526 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2018-11-23 12:46:21,526 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:21,526 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:21,526 INFO L423 AbstractCegarLoop]: === Iteration 21 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:21,526 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:21,527 INFO L82 PathProgramCache]: Analyzing trace with hash 1134564595, now seen corresponding path program 1 times [2018-11-23 12:46:21,527 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:21,527 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:21,528 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:21,528 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:21,528 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:21,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:21,946 INFO L256 TraceCheckUtils]: 0: Hoare triple {47666#true} call ULTIMATE.init(); {47666#true} is VALID [2018-11-23 12:46:21,946 INFO L273 TraceCheckUtils]: 1: Hoare triple {47666#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {47666#true} is VALID [2018-11-23 12:46:21,946 INFO L273 TraceCheckUtils]: 2: Hoare triple {47666#true} assume true; {47666#true} is VALID [2018-11-23 12:46:21,947 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {47666#true} {47666#true} #542#return; {47666#true} is VALID [2018-11-23 12:46:21,947 INFO L256 TraceCheckUtils]: 4: Hoare triple {47666#true} call #t~ret139 := main(); {47666#true} is VALID [2018-11-23 12:46:21,947 INFO L273 TraceCheckUtils]: 5: Hoare triple {47666#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {47666#true} is VALID [2018-11-23 12:46:21,947 INFO L256 TraceCheckUtils]: 6: Hoare triple {47666#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {47666#true} is VALID [2018-11-23 12:46:21,947 INFO L273 TraceCheckUtils]: 7: Hoare triple {47666#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 12:46:21,948 INFO L273 TraceCheckUtils]: 8: Hoare triple {47666#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {47666#true} is VALID [2018-11-23 12:46:21,948 INFO L273 TraceCheckUtils]: 9: Hoare triple {47666#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {47666#true} is VALID [2018-11-23 12:46:21,948 INFO L273 TraceCheckUtils]: 10: Hoare triple {47666#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {47666#true} is VALID [2018-11-23 12:46:21,948 INFO L273 TraceCheckUtils]: 11: Hoare triple {47666#true} assume !false; {47666#true} is VALID [2018-11-23 12:46:21,948 INFO L273 TraceCheckUtils]: 12: Hoare triple {47666#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 12:46:21,948 INFO L273 TraceCheckUtils]: 13: Hoare triple {47666#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 12:46:21,948 INFO L273 TraceCheckUtils]: 14: Hoare triple {47666#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 12:46:21,949 INFO L273 TraceCheckUtils]: 15: Hoare triple {47666#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 12:46:21,949 INFO L273 TraceCheckUtils]: 16: Hoare triple {47666#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 12:46:21,949 INFO L273 TraceCheckUtils]: 17: Hoare triple {47666#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 12:46:21,949 INFO L273 TraceCheckUtils]: 18: Hoare triple {47666#true} assume 4368 == #t~mem28;havoc #t~mem28; {47666#true} is VALID [2018-11-23 12:46:21,949 INFO L273 TraceCheckUtils]: 19: Hoare triple {47666#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {47666#true} is VALID [2018-11-23 12:46:21,949 INFO L273 TraceCheckUtils]: 20: Hoare triple {47666#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {47666#true} is VALID [2018-11-23 12:46:21,949 INFO L273 TraceCheckUtils]: 21: Hoare triple {47666#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 12:46:21,949 INFO L273 TraceCheckUtils]: 22: Hoare triple {47666#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {47666#true} is VALID [2018-11-23 12:46:21,949 INFO L273 TraceCheckUtils]: 23: Hoare triple {47666#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {47666#true} is VALID [2018-11-23 12:46:21,950 INFO L273 TraceCheckUtils]: 24: Hoare triple {47666#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {47666#true} is VALID [2018-11-23 12:46:21,950 INFO L273 TraceCheckUtils]: 25: Hoare triple {47666#true} ~skip~0 := 0; {47666#true} is VALID [2018-11-23 12:46:21,950 INFO L273 TraceCheckUtils]: 26: Hoare triple {47666#true} assume !false; {47666#true} is VALID [2018-11-23 12:46:21,950 INFO L273 TraceCheckUtils]: 27: Hoare triple {47666#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 12:46:21,950 INFO L273 TraceCheckUtils]: 28: Hoare triple {47666#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 12:46:21,950 INFO L273 TraceCheckUtils]: 29: Hoare triple {47666#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 12:46:21,950 INFO L273 TraceCheckUtils]: 30: Hoare triple {47666#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 12:46:21,950 INFO L273 TraceCheckUtils]: 31: Hoare triple {47666#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 12:46:21,950 INFO L273 TraceCheckUtils]: 32: Hoare triple {47666#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 12:46:21,951 INFO L273 TraceCheckUtils]: 33: Hoare triple {47666#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 12:46:21,951 INFO L273 TraceCheckUtils]: 34: Hoare triple {47666#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 12:46:21,951 INFO L273 TraceCheckUtils]: 35: Hoare triple {47666#true} assume 4384 == #t~mem30;havoc #t~mem30; {47666#true} is VALID [2018-11-23 12:46:21,951 INFO L273 TraceCheckUtils]: 36: Hoare triple {47666#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {47666#true} is VALID [2018-11-23 12:46:21,951 INFO L273 TraceCheckUtils]: 37: Hoare triple {47666#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {47666#true} is VALID [2018-11-23 12:46:21,951 INFO L273 TraceCheckUtils]: 38: Hoare triple {47666#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 12:46:21,952 INFO L273 TraceCheckUtils]: 39: Hoare triple {47666#true} assume 0 != #t~mem69;havoc #t~mem69;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:21,953 INFO L273 TraceCheckUtils]: 40: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:21,953 INFO L273 TraceCheckUtils]: 41: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:21,953 INFO L273 TraceCheckUtils]: 42: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:21,954 INFO L273 TraceCheckUtils]: 43: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} ~skip~0 := 0; {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:21,954 INFO L273 TraceCheckUtils]: 44: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !false; {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:21,954 INFO L273 TraceCheckUtils]: 45: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:21,955 INFO L273 TraceCheckUtils]: 46: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:21,955 INFO L273 TraceCheckUtils]: 47: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:21,956 INFO L273 TraceCheckUtils]: 48: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:21,956 INFO L273 TraceCheckUtils]: 49: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:21,956 INFO L273 TraceCheckUtils]: 50: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:21,957 INFO L273 TraceCheckUtils]: 51: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:21,957 INFO L273 TraceCheckUtils]: 52: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:21,958 INFO L273 TraceCheckUtils]: 53: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 12:46:21,959 INFO L273 TraceCheckUtils]: 54: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {47669#(= |ssl3_connect_#t~mem32| 4560)} is VALID [2018-11-23 12:46:21,959 INFO L273 TraceCheckUtils]: 55: Hoare triple {47669#(= |ssl3_connect_#t~mem32| 4560)} assume 4400 == #t~mem32;havoc #t~mem32; {47667#false} is VALID [2018-11-23 12:46:21,960 INFO L273 TraceCheckUtils]: 56: Hoare triple {47667#false} call #t~mem70.base, #t~mem70.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem71.base, #t~mem71.offset := read~$Pointer$(#t~mem70.base, 836 + #t~mem70.offset, 4);call #t~mem72 := read~int(#t~mem71.base, 12 + #t~mem71.offset, 4); {47667#false} is VALID [2018-11-23 12:46:21,960 INFO L273 TraceCheckUtils]: 57: Hoare triple {47667#false} assume 0 != ~bitwiseAnd(#t~mem72, 256) % 4294967296;havoc #t~mem70.base, #t~mem70.offset;havoc #t~mem71.base, #t~mem71.offset;havoc #t~mem72;~skip~0 := 1; {47667#false} is VALID [2018-11-23 12:46:21,960 INFO L273 TraceCheckUtils]: 58: Hoare triple {47667#false} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 12:46:21,960 INFO L273 TraceCheckUtils]: 59: Hoare triple {47667#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {47667#false} is VALID [2018-11-23 12:46:21,961 INFO L273 TraceCheckUtils]: 60: Hoare triple {47667#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {47667#false} is VALID [2018-11-23 12:46:21,961 INFO L273 TraceCheckUtils]: 61: Hoare triple {47667#false} ~skip~0 := 0; {47667#false} is VALID [2018-11-23 12:46:21,961 INFO L273 TraceCheckUtils]: 62: Hoare triple {47667#false} assume !false; {47667#false} is VALID [2018-11-23 12:46:21,961 INFO L273 TraceCheckUtils]: 63: Hoare triple {47667#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 12:46:21,962 INFO L273 TraceCheckUtils]: 64: Hoare triple {47667#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 12:46:21,962 INFO L273 TraceCheckUtils]: 65: Hoare triple {47667#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 12:46:21,962 INFO L273 TraceCheckUtils]: 66: Hoare triple {47667#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 12:46:21,962 INFO L273 TraceCheckUtils]: 67: Hoare triple {47667#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 12:46:21,962 INFO L273 TraceCheckUtils]: 68: Hoare triple {47667#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 12:46:21,963 INFO L273 TraceCheckUtils]: 69: Hoare triple {47667#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 12:46:21,963 INFO L273 TraceCheckUtils]: 70: Hoare triple {47667#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 12:46:21,963 INFO L273 TraceCheckUtils]: 71: Hoare triple {47667#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 12:46:21,963 INFO L273 TraceCheckUtils]: 72: Hoare triple {47667#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 12:46:21,963 INFO L273 TraceCheckUtils]: 73: Hoare triple {47667#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 12:46:21,963 INFO L273 TraceCheckUtils]: 74: Hoare triple {47667#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 12:46:21,963 INFO L273 TraceCheckUtils]: 75: Hoare triple {47667#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 12:46:21,964 INFO L273 TraceCheckUtils]: 76: Hoare triple {47667#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 12:46:21,964 INFO L273 TraceCheckUtils]: 77: Hoare triple {47667#false} assume 4432 == #t~mem36;havoc #t~mem36; {47667#false} is VALID [2018-11-23 12:46:21,964 INFO L273 TraceCheckUtils]: 78: Hoare triple {47667#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {47667#false} is VALID [2018-11-23 12:46:21,964 INFO L273 TraceCheckUtils]: 79: Hoare triple {47667#false} assume 5 == ~blastFlag~0; {47667#false} is VALID [2018-11-23 12:46:21,964 INFO L273 TraceCheckUtils]: 80: Hoare triple {47667#false} assume !false; {47667#false} is VALID [2018-11-23 12:46:21,969 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 57 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 12:46:21,970 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:21,970 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:21,970 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 12:46:21,970 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:21,970 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:22,046 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:22,046 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:22,047 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:22,047 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:22,047 INFO L87 Difference]: Start difference. First operand 421 states and 610 transitions. Second operand 4 states. [2018-11-23 12:46:23,345 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:23,345 INFO L93 Difference]: Finished difference Result 919 states and 1334 transitions. [2018-11-23 12:46:23,345 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:23,345 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 12:46:23,345 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:23,345 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:23,347 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 443 transitions. [2018-11-23 12:46:23,347 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:23,348 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 443 transitions. [2018-11-23 12:46:23,348 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 443 transitions. [2018-11-23 12:46:23,780 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 443 edges. 443 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:23,795 INFO L225 Difference]: With dead ends: 919 [2018-11-23 12:46:23,795 INFO L226 Difference]: Without dead ends: 511 [2018-11-23 12:46:23,796 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:23,796 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 511 states. [2018-11-23 12:46:23,895 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 511 to 421. [2018-11-23 12:46:23,895 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:23,895 INFO L82 GeneralOperation]: Start isEquivalent. First operand 511 states. Second operand 421 states. [2018-11-23 12:46:23,895 INFO L74 IsIncluded]: Start isIncluded. First operand 511 states. Second operand 421 states. [2018-11-23 12:46:23,895 INFO L87 Difference]: Start difference. First operand 511 states. Second operand 421 states. [2018-11-23 12:46:23,908 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:23,908 INFO L93 Difference]: Finished difference Result 511 states and 739 transitions. [2018-11-23 12:46:23,908 INFO L276 IsEmpty]: Start isEmpty. Operand 511 states and 739 transitions. [2018-11-23 12:46:23,909 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:23,909 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:23,909 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 511 states. [2018-11-23 12:46:23,909 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 511 states. [2018-11-23 12:46:23,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:23,922 INFO L93 Difference]: Finished difference Result 511 states and 739 transitions. [2018-11-23 12:46:23,922 INFO L276 IsEmpty]: Start isEmpty. Operand 511 states and 739 transitions. [2018-11-23 12:46:23,922 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:23,922 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:23,923 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:23,923 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:23,923 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 12:46:23,930 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 608 transitions. [2018-11-23 12:46:23,930 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 608 transitions. Word has length 81 [2018-11-23 12:46:23,930 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:23,930 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 608 transitions. [2018-11-23 12:46:23,930 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:23,931 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 608 transitions. [2018-11-23 12:46:23,931 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2018-11-23 12:46:23,931 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:23,931 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:23,931 INFO L423 AbstractCegarLoop]: === Iteration 22 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:23,932 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:23,932 INFO L82 PathProgramCache]: Analyzing trace with hash -1220829216, now seen corresponding path program 1 times [2018-11-23 12:46:23,932 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:23,932 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:23,932 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:23,933 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:23,933 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:23,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:24,072 INFO L256 TraceCheckUtils]: 0: Hoare triple {50227#true} call ULTIMATE.init(); {50227#true} is VALID [2018-11-23 12:46:24,072 INFO L273 TraceCheckUtils]: 1: Hoare triple {50227#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {50227#true} is VALID [2018-11-23 12:46:24,072 INFO L273 TraceCheckUtils]: 2: Hoare triple {50227#true} assume true; {50227#true} is VALID [2018-11-23 12:46:24,072 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {50227#true} {50227#true} #542#return; {50227#true} is VALID [2018-11-23 12:46:24,072 INFO L256 TraceCheckUtils]: 4: Hoare triple {50227#true} call #t~ret139 := main(); {50227#true} is VALID [2018-11-23 12:46:24,072 INFO L273 TraceCheckUtils]: 5: Hoare triple {50227#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {50227#true} is VALID [2018-11-23 12:46:24,073 INFO L256 TraceCheckUtils]: 6: Hoare triple {50227#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {50227#true} is VALID [2018-11-23 12:46:24,073 INFO L273 TraceCheckUtils]: 7: Hoare triple {50227#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 12:46:24,073 INFO L273 TraceCheckUtils]: 8: Hoare triple {50227#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {50227#true} is VALID [2018-11-23 12:46:24,073 INFO L273 TraceCheckUtils]: 9: Hoare triple {50227#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {50227#true} is VALID [2018-11-23 12:46:24,073 INFO L273 TraceCheckUtils]: 10: Hoare triple {50227#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {50227#true} is VALID [2018-11-23 12:46:24,073 INFO L273 TraceCheckUtils]: 11: Hoare triple {50227#true} assume !false; {50227#true} is VALID [2018-11-23 12:46:24,073 INFO L273 TraceCheckUtils]: 12: Hoare triple {50227#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 12:46:24,073 INFO L273 TraceCheckUtils]: 13: Hoare triple {50227#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 12:46:24,074 INFO L273 TraceCheckUtils]: 14: Hoare triple {50227#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 12:46:24,074 INFO L273 TraceCheckUtils]: 15: Hoare triple {50227#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 12:46:24,074 INFO L273 TraceCheckUtils]: 16: Hoare triple {50227#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 12:46:24,074 INFO L273 TraceCheckUtils]: 17: Hoare triple {50227#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 12:46:24,074 INFO L273 TraceCheckUtils]: 18: Hoare triple {50227#true} assume 4368 == #t~mem28;havoc #t~mem28; {50227#true} is VALID [2018-11-23 12:46:24,074 INFO L273 TraceCheckUtils]: 19: Hoare triple {50227#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {50227#true} is VALID [2018-11-23 12:46:24,075 INFO L273 TraceCheckUtils]: 20: Hoare triple {50227#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {50227#true} is VALID [2018-11-23 12:46:24,075 INFO L273 TraceCheckUtils]: 21: Hoare triple {50227#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 12:46:24,075 INFO L273 TraceCheckUtils]: 22: Hoare triple {50227#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {50227#true} is VALID [2018-11-23 12:46:24,075 INFO L273 TraceCheckUtils]: 23: Hoare triple {50227#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {50227#true} is VALID [2018-11-23 12:46:24,075 INFO L273 TraceCheckUtils]: 24: Hoare triple {50227#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {50227#true} is VALID [2018-11-23 12:46:24,075 INFO L273 TraceCheckUtils]: 25: Hoare triple {50227#true} ~skip~0 := 0; {50227#true} is VALID [2018-11-23 12:46:24,075 INFO L273 TraceCheckUtils]: 26: Hoare triple {50227#true} assume !false; {50227#true} is VALID [2018-11-23 12:46:24,075 INFO L273 TraceCheckUtils]: 27: Hoare triple {50227#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 12:46:24,076 INFO L273 TraceCheckUtils]: 28: Hoare triple {50227#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 12:46:24,076 INFO L273 TraceCheckUtils]: 29: Hoare triple {50227#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 12:46:24,076 INFO L273 TraceCheckUtils]: 30: Hoare triple {50227#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 12:46:24,076 INFO L273 TraceCheckUtils]: 31: Hoare triple {50227#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 12:46:24,076 INFO L273 TraceCheckUtils]: 32: Hoare triple {50227#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 12:46:24,076 INFO L273 TraceCheckUtils]: 33: Hoare triple {50227#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 12:46:24,076 INFO L273 TraceCheckUtils]: 34: Hoare triple {50227#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 12:46:24,076 INFO L273 TraceCheckUtils]: 35: Hoare triple {50227#true} assume 4384 == #t~mem30;havoc #t~mem30; {50227#true} is VALID [2018-11-23 12:46:24,076 INFO L273 TraceCheckUtils]: 36: Hoare triple {50227#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {50227#true} is VALID [2018-11-23 12:46:24,077 INFO L273 TraceCheckUtils]: 37: Hoare triple {50227#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {50227#true} is VALID [2018-11-23 12:46:24,077 INFO L273 TraceCheckUtils]: 38: Hoare triple {50227#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 12:46:24,077 INFO L273 TraceCheckUtils]: 39: Hoare triple {50227#true} assume !(0 != #t~mem69);havoc #t~mem69;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:24,078 INFO L273 TraceCheckUtils]: 40: Hoare triple {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:24,079 INFO L273 TraceCheckUtils]: 41: Hoare triple {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:24,079 INFO L273 TraceCheckUtils]: 42: Hoare triple {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:24,079 INFO L273 TraceCheckUtils]: 43: Hoare triple {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} ~skip~0 := 0; {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:24,080 INFO L273 TraceCheckUtils]: 44: Hoare triple {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !false; {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:24,080 INFO L273 TraceCheckUtils]: 45: Hoare triple {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:24,081 INFO L273 TraceCheckUtils]: 46: Hoare triple {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:24,081 INFO L273 TraceCheckUtils]: 47: Hoare triple {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:24,082 INFO L273 TraceCheckUtils]: 48: Hoare triple {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 12:46:24,083 INFO L273 TraceCheckUtils]: 49: Hoare triple {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {50230#(= |ssl3_connect_#t~mem27| 4400)} is VALID [2018-11-23 12:46:24,083 INFO L273 TraceCheckUtils]: 50: Hoare triple {50230#(= |ssl3_connect_#t~mem27| 4400)} assume 4099 == #t~mem27;havoc #t~mem27; {50228#false} is VALID [2018-11-23 12:46:24,083 INFO L273 TraceCheckUtils]: 51: Hoare triple {50228#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 12:46:24,084 INFO L273 TraceCheckUtils]: 52: Hoare triple {50228#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {50228#false} is VALID [2018-11-23 12:46:24,084 INFO L273 TraceCheckUtils]: 53: Hoare triple {50228#false} call #t~mem58 := read~int(~s.base, ~s.offset, 4); {50228#false} is VALID [2018-11-23 12:46:24,084 INFO L273 TraceCheckUtils]: 54: Hoare triple {50228#false} assume !(768 != ~bitwiseAnd(#t~mem58, 65280));havoc #t~mem58;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem59.base, #t~mem59.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 12:46:24,084 INFO L273 TraceCheckUtils]: 55: Hoare triple {50228#false} assume !(0 == (#t~mem59.base + #t~mem59.offset) % 4294967296);havoc #t~mem59.base, #t~mem59.offset; {50228#false} is VALID [2018-11-23 12:46:24,084 INFO L273 TraceCheckUtils]: 56: Hoare triple {50228#false} assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___4~0 := #t~nondet61;havoc #t~nondet61; {50228#false} is VALID [2018-11-23 12:46:24,085 INFO L273 TraceCheckUtils]: 57: Hoare triple {50228#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet62 && #t~nondet62 <= 2147483647;~tmp___5~0 := #t~nondet62;havoc #t~nondet62; {50228#false} is VALID [2018-11-23 12:46:24,085 INFO L273 TraceCheckUtils]: 58: Hoare triple {50228#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 60 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 60 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset;call write~int(0, ~s.base, 64 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 12:46:24,085 INFO L273 TraceCheckUtils]: 59: Hoare triple {50228#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {50228#false} is VALID [2018-11-23 12:46:24,085 INFO L273 TraceCheckUtils]: 60: Hoare triple {50228#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {50228#false} is VALID [2018-11-23 12:46:24,085 INFO L273 TraceCheckUtils]: 61: Hoare triple {50228#false} ~skip~0 := 0; {50228#false} is VALID [2018-11-23 12:46:24,085 INFO L273 TraceCheckUtils]: 62: Hoare triple {50228#false} assume !false; {50228#false} is VALID [2018-11-23 12:46:24,086 INFO L273 TraceCheckUtils]: 63: Hoare triple {50228#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 12:46:24,086 INFO L273 TraceCheckUtils]: 64: Hoare triple {50228#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 12:46:24,086 INFO L273 TraceCheckUtils]: 65: Hoare triple {50228#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 12:46:24,086 INFO L273 TraceCheckUtils]: 66: Hoare triple {50228#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 12:46:24,086 INFO L273 TraceCheckUtils]: 67: Hoare triple {50228#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 12:46:24,086 INFO L273 TraceCheckUtils]: 68: Hoare triple {50228#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 12:46:24,086 INFO L273 TraceCheckUtils]: 69: Hoare triple {50228#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 12:46:24,087 INFO L273 TraceCheckUtils]: 70: Hoare triple {50228#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 12:46:24,087 INFO L273 TraceCheckUtils]: 71: Hoare triple {50228#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 12:46:24,087 INFO L273 TraceCheckUtils]: 72: Hoare triple {50228#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 12:46:24,087 INFO L273 TraceCheckUtils]: 73: Hoare triple {50228#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 12:46:24,087 INFO L273 TraceCheckUtils]: 74: Hoare triple {50228#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 12:46:24,087 INFO L273 TraceCheckUtils]: 75: Hoare triple {50228#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 12:46:24,087 INFO L273 TraceCheckUtils]: 76: Hoare triple {50228#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 12:46:24,087 INFO L273 TraceCheckUtils]: 77: Hoare triple {50228#false} assume 4432 == #t~mem36;havoc #t~mem36; {50228#false} is VALID [2018-11-23 12:46:24,087 INFO L273 TraceCheckUtils]: 78: Hoare triple {50228#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {50228#false} is VALID [2018-11-23 12:46:24,088 INFO L273 TraceCheckUtils]: 79: Hoare triple {50228#false} assume 5 == ~blastFlag~0; {50228#false} is VALID [2018-11-23 12:46:24,088 INFO L273 TraceCheckUtils]: 80: Hoare triple {50228#false} assume !false; {50228#false} is VALID [2018-11-23 12:46:24,092 INFO L134 CoverageAnalysis]: Checked inductivity of 56 backedges. 48 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 12:46:24,092 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:24,092 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:24,093 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 12:46:24,093 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:24,093 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:24,164 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:24,164 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:24,164 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:24,164 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:24,165 INFO L87 Difference]: Start difference. First operand 421 states and 608 transitions. Second operand 4 states. [2018-11-23 12:46:25,317 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:25,317 INFO L93 Difference]: Finished difference Result 847 states and 1223 transitions. [2018-11-23 12:46:25,317 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:25,317 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 12:46:25,318 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:25,318 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:25,320 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 379 transitions. [2018-11-23 12:46:25,320 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:25,321 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 379 transitions. [2018-11-23 12:46:25,321 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 379 transitions. [2018-11-23 12:46:25,681 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 379 edges. 379 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:25,694 INFO L225 Difference]: With dead ends: 847 [2018-11-23 12:46:25,694 INFO L226 Difference]: Without dead ends: 439 [2018-11-23 12:46:25,695 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:25,695 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 439 states. [2018-11-23 12:46:25,797 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 439 to 421. [2018-11-23 12:46:25,797 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:25,797 INFO L82 GeneralOperation]: Start isEquivalent. First operand 439 states. Second operand 421 states. [2018-11-23 12:46:25,797 INFO L74 IsIncluded]: Start isIncluded. First operand 439 states. Second operand 421 states. [2018-11-23 12:46:25,797 INFO L87 Difference]: Start difference. First operand 439 states. Second operand 421 states. [2018-11-23 12:46:25,808 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:25,808 INFO L93 Difference]: Finished difference Result 439 states and 630 transitions. [2018-11-23 12:46:25,808 INFO L276 IsEmpty]: Start isEmpty. Operand 439 states and 630 transitions. [2018-11-23 12:46:25,809 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:25,809 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:25,809 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 439 states. [2018-11-23 12:46:25,809 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 439 states. [2018-11-23 12:46:25,819 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:25,819 INFO L93 Difference]: Finished difference Result 439 states and 630 transitions. [2018-11-23 12:46:25,819 INFO L276 IsEmpty]: Start isEmpty. Operand 439 states and 630 transitions. [2018-11-23 12:46:25,819 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:25,819 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:25,820 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:25,820 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:25,820 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 12:46:25,827 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 606 transitions. [2018-11-23 12:46:25,827 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 606 transitions. Word has length 81 [2018-11-23 12:46:25,827 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:25,828 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 606 transitions. [2018-11-23 12:46:25,828 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:25,828 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 606 transitions. [2018-11-23 12:46:25,829 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2018-11-23 12:46:25,829 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:25,829 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:25,829 INFO L423 AbstractCegarLoop]: === Iteration 23 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:25,829 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:25,830 INFO L82 PathProgramCache]: Analyzing trace with hash 1382711089, now seen corresponding path program 1 times [2018-11-23 12:46:25,830 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:25,830 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:25,831 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:25,831 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:25,831 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:25,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:26,079 INFO L256 TraceCheckUtils]: 0: Hoare triple {52556#true} call ULTIMATE.init(); {52556#true} is VALID [2018-11-23 12:46:26,079 INFO L273 TraceCheckUtils]: 1: Hoare triple {52556#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {52556#true} is VALID [2018-11-23 12:46:26,080 INFO L273 TraceCheckUtils]: 2: Hoare triple {52556#true} assume true; {52556#true} is VALID [2018-11-23 12:46:26,080 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {52556#true} {52556#true} #542#return; {52556#true} is VALID [2018-11-23 12:46:26,080 INFO L256 TraceCheckUtils]: 4: Hoare triple {52556#true} call #t~ret139 := main(); {52556#true} is VALID [2018-11-23 12:46:26,080 INFO L273 TraceCheckUtils]: 5: Hoare triple {52556#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {52556#true} is VALID [2018-11-23 12:46:26,080 INFO L256 TraceCheckUtils]: 6: Hoare triple {52556#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {52556#true} is VALID [2018-11-23 12:46:26,081 INFO L273 TraceCheckUtils]: 7: Hoare triple {52556#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 12:46:26,081 INFO L273 TraceCheckUtils]: 8: Hoare triple {52556#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {52556#true} is VALID [2018-11-23 12:46:26,081 INFO L273 TraceCheckUtils]: 9: Hoare triple {52556#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {52556#true} is VALID [2018-11-23 12:46:26,081 INFO L273 TraceCheckUtils]: 10: Hoare triple {52556#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {52556#true} is VALID [2018-11-23 12:46:26,081 INFO L273 TraceCheckUtils]: 11: Hoare triple {52556#true} assume !false; {52556#true} is VALID [2018-11-23 12:46:26,082 INFO L273 TraceCheckUtils]: 12: Hoare triple {52556#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 12:46:26,082 INFO L273 TraceCheckUtils]: 13: Hoare triple {52556#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 12:46:26,082 INFO L273 TraceCheckUtils]: 14: Hoare triple {52556#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 12:46:26,082 INFO L273 TraceCheckUtils]: 15: Hoare triple {52556#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 12:46:26,082 INFO L273 TraceCheckUtils]: 16: Hoare triple {52556#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 12:46:26,082 INFO L273 TraceCheckUtils]: 17: Hoare triple {52556#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 12:46:26,083 INFO L273 TraceCheckUtils]: 18: Hoare triple {52556#true} assume 4368 == #t~mem28;havoc #t~mem28; {52556#true} is VALID [2018-11-23 12:46:26,083 INFO L273 TraceCheckUtils]: 19: Hoare triple {52556#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {52556#true} is VALID [2018-11-23 12:46:26,083 INFO L273 TraceCheckUtils]: 20: Hoare triple {52556#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {52556#true} is VALID [2018-11-23 12:46:26,083 INFO L273 TraceCheckUtils]: 21: Hoare triple {52556#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 12:46:26,083 INFO L273 TraceCheckUtils]: 22: Hoare triple {52556#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {52556#true} is VALID [2018-11-23 12:46:26,084 INFO L273 TraceCheckUtils]: 23: Hoare triple {52556#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {52556#true} is VALID [2018-11-23 12:46:26,084 INFO L273 TraceCheckUtils]: 24: Hoare triple {52556#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {52556#true} is VALID [2018-11-23 12:46:26,084 INFO L273 TraceCheckUtils]: 25: Hoare triple {52556#true} ~skip~0 := 0; {52556#true} is VALID [2018-11-23 12:46:26,084 INFO L273 TraceCheckUtils]: 26: Hoare triple {52556#true} assume !false; {52556#true} is VALID [2018-11-23 12:46:26,084 INFO L273 TraceCheckUtils]: 27: Hoare triple {52556#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 12:46:26,084 INFO L273 TraceCheckUtils]: 28: Hoare triple {52556#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 12:46:26,085 INFO L273 TraceCheckUtils]: 29: Hoare triple {52556#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 12:46:26,085 INFO L273 TraceCheckUtils]: 30: Hoare triple {52556#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 12:46:26,085 INFO L273 TraceCheckUtils]: 31: Hoare triple {52556#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 12:46:26,085 INFO L273 TraceCheckUtils]: 32: Hoare triple {52556#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 12:46:26,085 INFO L273 TraceCheckUtils]: 33: Hoare triple {52556#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 12:46:26,085 INFO L273 TraceCheckUtils]: 34: Hoare triple {52556#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 12:46:26,086 INFO L273 TraceCheckUtils]: 35: Hoare triple {52556#true} assume 4384 == #t~mem30;havoc #t~mem30; {52556#true} is VALID [2018-11-23 12:46:26,086 INFO L273 TraceCheckUtils]: 36: Hoare triple {52556#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {52556#true} is VALID [2018-11-23 12:46:26,098 INFO L273 TraceCheckUtils]: 37: Hoare triple {52556#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,111 INFO L273 TraceCheckUtils]: 38: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,115 INFO L273 TraceCheckUtils]: 39: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(0 != #t~mem69);havoc #t~mem69;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,125 INFO L273 TraceCheckUtils]: 40: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,137 INFO L273 TraceCheckUtils]: 41: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,150 INFO L273 TraceCheckUtils]: 42: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,162 INFO L273 TraceCheckUtils]: 43: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} ~skip~0 := 0; {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,175 INFO L273 TraceCheckUtils]: 44: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !false; {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,187 INFO L273 TraceCheckUtils]: 45: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,200 INFO L273 TraceCheckUtils]: 46: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,217 INFO L273 TraceCheckUtils]: 47: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,226 INFO L273 TraceCheckUtils]: 48: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,238 INFO L273 TraceCheckUtils]: 49: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,251 INFO L273 TraceCheckUtils]: 50: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,263 INFO L273 TraceCheckUtils]: 51: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,281 INFO L273 TraceCheckUtils]: 52: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,290 INFO L273 TraceCheckUtils]: 53: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,302 INFO L273 TraceCheckUtils]: 54: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,315 INFO L273 TraceCheckUtils]: 55: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume 4400 == #t~mem32;havoc #t~mem32; {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,327 INFO L273 TraceCheckUtils]: 56: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} call #t~mem70.base, #t~mem70.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem71.base, #t~mem71.offset := read~$Pointer$(#t~mem70.base, 836 + #t~mem70.offset, 4);call #t~mem72 := read~int(#t~mem71.base, 12 + #t~mem71.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,346 INFO L273 TraceCheckUtils]: 57: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume 0 != ~bitwiseAnd(#t~mem72, 256) % 4294967296;havoc #t~mem70.base, #t~mem70.offset;havoc #t~mem71.base, #t~mem71.offset;havoc #t~mem72;~skip~0 := 1; {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,354 INFO L273 TraceCheckUtils]: 58: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,358 INFO L273 TraceCheckUtils]: 59: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,358 INFO L273 TraceCheckUtils]: 60: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,358 INFO L273 TraceCheckUtils]: 61: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} ~skip~0 := 0; {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,360 INFO L273 TraceCheckUtils]: 62: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !false; {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,360 INFO L273 TraceCheckUtils]: 63: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,362 INFO L273 TraceCheckUtils]: 64: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,362 INFO L273 TraceCheckUtils]: 65: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,362 INFO L273 TraceCheckUtils]: 66: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,363 INFO L273 TraceCheckUtils]: 67: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,363 INFO L273 TraceCheckUtils]: 68: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,363 INFO L273 TraceCheckUtils]: 69: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,363 INFO L273 TraceCheckUtils]: 70: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,364 INFO L273 TraceCheckUtils]: 71: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,364 INFO L273 TraceCheckUtils]: 72: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,364 INFO L273 TraceCheckUtils]: 73: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,365 INFO L273 TraceCheckUtils]: 74: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,365 INFO L273 TraceCheckUtils]: 75: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,365 INFO L273 TraceCheckUtils]: 76: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,366 INFO L273 TraceCheckUtils]: 77: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume 4432 == #t~mem36;havoc #t~mem36; {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,366 INFO L273 TraceCheckUtils]: 78: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 12:46:26,367 INFO L273 TraceCheckUtils]: 79: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume 5 == ~blastFlag~0; {52557#false} is VALID [2018-11-23 12:46:26,367 INFO L273 TraceCheckUtils]: 80: Hoare triple {52557#false} assume !false; {52557#false} is VALID [2018-11-23 12:46:26,371 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2018-11-23 12:46:26,371 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:26,372 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:46:26,372 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 81 [2018-11-23 12:46:26,372 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:26,372 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 12:46:26,431 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 60 edges. 60 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:26,432 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:46:26,432 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:46:26,432 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:46:26,432 INFO L87 Difference]: Start difference. First operand 421 states and 606 transitions. Second operand 3 states. [2018-11-23 12:46:26,973 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:26,973 INFO L93 Difference]: Finished difference Result 831 states and 1204 transitions. [2018-11-23 12:46:26,973 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:46:26,973 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 81 [2018-11-23 12:46:26,974 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:26,974 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:46:26,975 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 496 transitions. [2018-11-23 12:46:26,975 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:46:26,977 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 496 transitions. [2018-11-23 12:46:26,977 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 496 transitions. [2018-11-23 12:46:27,444 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 496 edges. 496 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:27,460 INFO L225 Difference]: With dead ends: 831 [2018-11-23 12:46:27,460 INFO L226 Difference]: Without dead ends: 574 [2018-11-23 12:46:27,461 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:46:27,462 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 574 states. [2018-11-23 12:46:27,608 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 574 to 574. [2018-11-23 12:46:27,608 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:27,608 INFO L82 GeneralOperation]: Start isEquivalent. First operand 574 states. Second operand 574 states. [2018-11-23 12:46:27,609 INFO L74 IsIncluded]: Start isIncluded. First operand 574 states. Second operand 574 states. [2018-11-23 12:46:27,609 INFO L87 Difference]: Start difference. First operand 574 states. Second operand 574 states. [2018-11-23 12:46:27,628 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:27,628 INFO L93 Difference]: Finished difference Result 574 states and 827 transitions. [2018-11-23 12:46:27,628 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 827 transitions. [2018-11-23 12:46:27,629 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:27,629 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:27,629 INFO L74 IsIncluded]: Start isIncluded. First operand 574 states. Second operand 574 states. [2018-11-23 12:46:27,629 INFO L87 Difference]: Start difference. First operand 574 states. Second operand 574 states. [2018-11-23 12:46:27,647 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:27,647 INFO L93 Difference]: Finished difference Result 574 states and 827 transitions. [2018-11-23 12:46:27,647 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 827 transitions. [2018-11-23 12:46:27,648 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:27,648 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:27,648 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:27,648 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:27,649 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 574 states. [2018-11-23 12:46:27,664 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 574 states to 574 states and 827 transitions. [2018-11-23 12:46:27,664 INFO L78 Accepts]: Start accepts. Automaton has 574 states and 827 transitions. Word has length 81 [2018-11-23 12:46:27,664 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:27,664 INFO L480 AbstractCegarLoop]: Abstraction has 574 states and 827 transitions. [2018-11-23 12:46:27,664 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:46:27,664 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 827 transitions. [2018-11-23 12:46:27,665 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2018-11-23 12:46:27,665 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:27,665 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:27,665 INFO L423 AbstractCegarLoop]: === Iteration 24 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:27,666 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:27,666 INFO L82 PathProgramCache]: Analyzing trace with hash 1024261319, now seen corresponding path program 1 times [2018-11-23 12:46:27,666 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:27,666 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:27,667 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:27,667 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:27,667 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:27,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:27,835 INFO L256 TraceCheckUtils]: 0: Hoare triple {55303#true} call ULTIMATE.init(); {55303#true} is VALID [2018-11-23 12:46:27,835 INFO L273 TraceCheckUtils]: 1: Hoare triple {55303#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,835 INFO L273 TraceCheckUtils]: 2: Hoare triple {55303#true} assume true; {55303#true} is VALID [2018-11-23 12:46:27,835 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {55303#true} {55303#true} #542#return; {55303#true} is VALID [2018-11-23 12:46:27,836 INFO L256 TraceCheckUtils]: 4: Hoare triple {55303#true} call #t~ret139 := main(); {55303#true} is VALID [2018-11-23 12:46:27,836 INFO L273 TraceCheckUtils]: 5: Hoare triple {55303#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {55303#true} is VALID [2018-11-23 12:46:27,836 INFO L256 TraceCheckUtils]: 6: Hoare triple {55303#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {55303#true} is VALID [2018-11-23 12:46:27,836 INFO L273 TraceCheckUtils]: 7: Hoare triple {55303#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,836 INFO L273 TraceCheckUtils]: 8: Hoare triple {55303#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {55303#true} is VALID [2018-11-23 12:46:27,836 INFO L273 TraceCheckUtils]: 9: Hoare triple {55303#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {55303#true} is VALID [2018-11-23 12:46:27,836 INFO L273 TraceCheckUtils]: 10: Hoare triple {55303#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {55303#true} is VALID [2018-11-23 12:46:27,836 INFO L273 TraceCheckUtils]: 11: Hoare triple {55303#true} assume !false; {55303#true} is VALID [2018-11-23 12:46:27,837 INFO L273 TraceCheckUtils]: 12: Hoare triple {55303#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,837 INFO L273 TraceCheckUtils]: 13: Hoare triple {55303#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,837 INFO L273 TraceCheckUtils]: 14: Hoare triple {55303#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,837 INFO L273 TraceCheckUtils]: 15: Hoare triple {55303#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,837 INFO L273 TraceCheckUtils]: 16: Hoare triple {55303#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,837 INFO L273 TraceCheckUtils]: 17: Hoare triple {55303#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,837 INFO L273 TraceCheckUtils]: 18: Hoare triple {55303#true} assume 4368 == #t~mem28;havoc #t~mem28; {55303#true} is VALID [2018-11-23 12:46:27,838 INFO L273 TraceCheckUtils]: 19: Hoare triple {55303#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {55303#true} is VALID [2018-11-23 12:46:27,838 INFO L273 TraceCheckUtils]: 20: Hoare triple {55303#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {55303#true} is VALID [2018-11-23 12:46:27,838 INFO L273 TraceCheckUtils]: 21: Hoare triple {55303#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,838 INFO L273 TraceCheckUtils]: 22: Hoare triple {55303#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {55303#true} is VALID [2018-11-23 12:46:27,838 INFO L273 TraceCheckUtils]: 23: Hoare triple {55303#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,839 INFO L273 TraceCheckUtils]: 24: Hoare triple {55303#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {55303#true} is VALID [2018-11-23 12:46:27,839 INFO L273 TraceCheckUtils]: 25: Hoare triple {55303#true} ~skip~0 := 0; {55303#true} is VALID [2018-11-23 12:46:27,839 INFO L273 TraceCheckUtils]: 26: Hoare triple {55303#true} assume !false; {55303#true} is VALID [2018-11-23 12:46:27,839 INFO L273 TraceCheckUtils]: 27: Hoare triple {55303#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,839 INFO L273 TraceCheckUtils]: 28: Hoare triple {55303#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,839 INFO L273 TraceCheckUtils]: 29: Hoare triple {55303#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,839 INFO L273 TraceCheckUtils]: 30: Hoare triple {55303#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,839 INFO L273 TraceCheckUtils]: 31: Hoare triple {55303#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,840 INFO L273 TraceCheckUtils]: 32: Hoare triple {55303#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,840 INFO L273 TraceCheckUtils]: 33: Hoare triple {55303#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,840 INFO L273 TraceCheckUtils]: 34: Hoare triple {55303#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,840 INFO L273 TraceCheckUtils]: 35: Hoare triple {55303#true} assume 4384 == #t~mem30;havoc #t~mem30; {55303#true} is VALID [2018-11-23 12:46:27,840 INFO L273 TraceCheckUtils]: 36: Hoare triple {55303#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {55303#true} is VALID [2018-11-23 12:46:27,840 INFO L273 TraceCheckUtils]: 37: Hoare triple {55303#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {55303#true} is VALID [2018-11-23 12:46:27,840 INFO L273 TraceCheckUtils]: 38: Hoare triple {55303#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,840 INFO L273 TraceCheckUtils]: 39: Hoare triple {55303#true} assume !(0 != #t~mem69);havoc #t~mem69;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,840 INFO L273 TraceCheckUtils]: 40: Hoare triple {55303#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,841 INFO L273 TraceCheckUtils]: 41: Hoare triple {55303#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,841 INFO L273 TraceCheckUtils]: 42: Hoare triple {55303#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {55303#true} is VALID [2018-11-23 12:46:27,841 INFO L273 TraceCheckUtils]: 43: Hoare triple {55303#true} ~skip~0 := 0; {55303#true} is VALID [2018-11-23 12:46:27,841 INFO L273 TraceCheckUtils]: 44: Hoare triple {55303#true} assume !false; {55303#true} is VALID [2018-11-23 12:46:27,841 INFO L273 TraceCheckUtils]: 45: Hoare triple {55303#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,841 INFO L273 TraceCheckUtils]: 46: Hoare triple {55303#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,841 INFO L273 TraceCheckUtils]: 47: Hoare triple {55303#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,841 INFO L273 TraceCheckUtils]: 48: Hoare triple {55303#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,842 INFO L273 TraceCheckUtils]: 49: Hoare triple {55303#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,842 INFO L273 TraceCheckUtils]: 50: Hoare triple {55303#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,842 INFO L273 TraceCheckUtils]: 51: Hoare triple {55303#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,842 INFO L273 TraceCheckUtils]: 52: Hoare triple {55303#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,842 INFO L273 TraceCheckUtils]: 53: Hoare triple {55303#true} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,842 INFO L273 TraceCheckUtils]: 54: Hoare triple {55303#true} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,842 INFO L273 TraceCheckUtils]: 55: Hoare triple {55303#true} assume 4400 == #t~mem32;havoc #t~mem32; {55303#true} is VALID [2018-11-23 12:46:27,842 INFO L273 TraceCheckUtils]: 56: Hoare triple {55303#true} call #t~mem70.base, #t~mem70.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem71.base, #t~mem71.offset := read~$Pointer$(#t~mem70.base, 836 + #t~mem70.offset, 4);call #t~mem72 := read~int(#t~mem71.base, 12 + #t~mem71.offset, 4); {55303#true} is VALID [2018-11-23 12:46:27,842 INFO L273 TraceCheckUtils]: 57: Hoare triple {55303#true} assume !(0 != ~bitwiseAnd(#t~mem72, 256) % 4294967296);havoc #t~mem70.base, #t~mem70.offset;havoc #t~mem71.base, #t~mem71.offset;havoc #t~mem72;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; {55303#true} is VALID [2018-11-23 12:46:27,843 INFO L273 TraceCheckUtils]: 58: Hoare triple {55303#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 12:46:27,844 INFO L273 TraceCheckUtils]: 59: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(~ret~0 <= 0); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 12:46:27,844 INFO L273 TraceCheckUtils]: 60: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 12:46:27,846 INFO L273 TraceCheckUtils]: 61: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 12:46:27,846 INFO L273 TraceCheckUtils]: 62: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 12:46:27,848 INFO L273 TraceCheckUtils]: 63: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} ~skip~0 := 0; {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 12:46:27,848 INFO L273 TraceCheckUtils]: 64: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !false; {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 12:46:27,850 INFO L273 TraceCheckUtils]: 65: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 12:46:27,850 INFO L273 TraceCheckUtils]: 66: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 12:46:27,852 INFO L273 TraceCheckUtils]: 67: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 12:46:27,852 INFO L273 TraceCheckUtils]: 68: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 12:46:27,852 INFO L273 TraceCheckUtils]: 69: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 12:46:27,861 INFO L273 TraceCheckUtils]: 70: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 12:46:27,861 INFO L273 TraceCheckUtils]: 71: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 12:46:27,866 INFO L273 TraceCheckUtils]: 72: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 12:46:27,866 INFO L273 TraceCheckUtils]: 73: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 12:46:27,866 INFO L273 TraceCheckUtils]: 74: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 12:46:27,867 INFO L273 TraceCheckUtils]: 75: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 12:46:27,867 INFO L273 TraceCheckUtils]: 76: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 12:46:27,867 INFO L273 TraceCheckUtils]: 77: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 12:46:27,868 INFO L273 TraceCheckUtils]: 78: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 12:46:27,868 INFO L273 TraceCheckUtils]: 79: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume 4432 == #t~mem36;havoc #t~mem36; {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 12:46:27,868 INFO L273 TraceCheckUtils]: 80: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 12:46:27,868 INFO L273 TraceCheckUtils]: 81: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume 5 == ~blastFlag~0; {55304#false} is VALID [2018-11-23 12:46:27,869 INFO L273 TraceCheckUtils]: 82: Hoare triple {55304#false} assume !false; {55304#false} is VALID [2018-11-23 12:46:27,873 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2018-11-23 12:46:27,873 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:27,873 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:46:27,873 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 83 [2018-11-23 12:46:27,874 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:27,874 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 12:46:27,934 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 64 edges. 64 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:27,935 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:46:27,935 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:46:27,935 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:46:27,936 INFO L87 Difference]: Start difference. First operand 574 states and 827 transitions. Second operand 3 states. [2018-11-23 12:46:28,522 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:28,523 INFO L93 Difference]: Finished difference Result 729 states and 1052 transitions. [2018-11-23 12:46:28,523 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:46:28,523 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 83 [2018-11-23 12:46:28,523 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:28,523 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:46:28,524 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 337 transitions. [2018-11-23 12:46:28,525 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:46:28,526 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 337 transitions. [2018-11-23 12:46:28,526 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 337 transitions. [2018-11-23 12:46:28,851 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 337 edges. 337 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:28,874 INFO L225 Difference]: With dead ends: 729 [2018-11-23 12:46:28,874 INFO L226 Difference]: Without dead ends: 727 [2018-11-23 12:46:28,874 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:46:28,875 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 727 states. [2018-11-23 12:46:29,070 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 727 to 727. [2018-11-23 12:46:29,070 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:29,070 INFO L82 GeneralOperation]: Start isEquivalent. First operand 727 states. Second operand 727 states. [2018-11-23 12:46:29,070 INFO L74 IsIncluded]: Start isIncluded. First operand 727 states. Second operand 727 states. [2018-11-23 12:46:29,071 INFO L87 Difference]: Start difference. First operand 727 states. Second operand 727 states. [2018-11-23 12:46:29,092 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:29,093 INFO L93 Difference]: Finished difference Result 727 states and 1049 transitions. [2018-11-23 12:46:29,093 INFO L276 IsEmpty]: Start isEmpty. Operand 727 states and 1049 transitions. [2018-11-23 12:46:29,093 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:29,094 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:29,094 INFO L74 IsIncluded]: Start isIncluded. First operand 727 states. Second operand 727 states. [2018-11-23 12:46:29,094 INFO L87 Difference]: Start difference. First operand 727 states. Second operand 727 states. [2018-11-23 12:46:29,110 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:29,110 INFO L93 Difference]: Finished difference Result 727 states and 1049 transitions. [2018-11-23 12:46:29,110 INFO L276 IsEmpty]: Start isEmpty. Operand 727 states and 1049 transitions. [2018-11-23 12:46:29,111 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:29,111 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:29,111 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:29,111 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:29,111 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 727 states. [2018-11-23 12:46:29,129 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 727 states to 727 states and 1049 transitions. [2018-11-23 12:46:29,129 INFO L78 Accepts]: Start accepts. Automaton has 727 states and 1049 transitions. Word has length 83 [2018-11-23 12:46:29,129 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:29,129 INFO L480 AbstractCegarLoop]: Abstraction has 727 states and 1049 transitions. [2018-11-23 12:46:29,130 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:46:29,130 INFO L276 IsEmpty]: Start isEmpty. Operand 727 states and 1049 transitions. [2018-11-23 12:46:29,130 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 12:46:29,131 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:29,131 INFO L402 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:29,131 INFO L423 AbstractCegarLoop]: === Iteration 25 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:29,131 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:29,131 INFO L82 PathProgramCache]: Analyzing trace with hash 934069236, now seen corresponding path program 1 times [2018-11-23 12:46:29,131 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:29,131 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:29,132 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:29,132 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:29,133 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:29,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:29,312 INFO L256 TraceCheckUtils]: 0: Hoare triple {58409#true} call ULTIMATE.init(); {58409#true} is VALID [2018-11-23 12:46:29,312 INFO L273 TraceCheckUtils]: 1: Hoare triple {58409#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,312 INFO L273 TraceCheckUtils]: 2: Hoare triple {58409#true} assume true; {58409#true} is VALID [2018-11-23 12:46:29,312 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {58409#true} {58409#true} #542#return; {58409#true} is VALID [2018-11-23 12:46:29,313 INFO L256 TraceCheckUtils]: 4: Hoare triple {58409#true} call #t~ret139 := main(); {58409#true} is VALID [2018-11-23 12:46:29,313 INFO L273 TraceCheckUtils]: 5: Hoare triple {58409#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {58409#true} is VALID [2018-11-23 12:46:29,313 INFO L256 TraceCheckUtils]: 6: Hoare triple {58409#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {58409#true} is VALID [2018-11-23 12:46:29,313 INFO L273 TraceCheckUtils]: 7: Hoare triple {58409#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,313 INFO L273 TraceCheckUtils]: 8: Hoare triple {58409#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {58409#true} is VALID [2018-11-23 12:46:29,313 INFO L273 TraceCheckUtils]: 9: Hoare triple {58409#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {58409#true} is VALID [2018-11-23 12:46:29,313 INFO L273 TraceCheckUtils]: 10: Hoare triple {58409#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {58409#true} is VALID [2018-11-23 12:46:29,313 INFO L273 TraceCheckUtils]: 11: Hoare triple {58409#true} assume !false; {58409#true} is VALID [2018-11-23 12:46:29,314 INFO L273 TraceCheckUtils]: 12: Hoare triple {58409#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,314 INFO L273 TraceCheckUtils]: 13: Hoare triple {58409#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,314 INFO L273 TraceCheckUtils]: 14: Hoare triple {58409#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,314 INFO L273 TraceCheckUtils]: 15: Hoare triple {58409#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,314 INFO L273 TraceCheckUtils]: 16: Hoare triple {58409#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,314 INFO L273 TraceCheckUtils]: 17: Hoare triple {58409#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,314 INFO L273 TraceCheckUtils]: 18: Hoare triple {58409#true} assume 4368 == #t~mem28;havoc #t~mem28; {58409#true} is VALID [2018-11-23 12:46:29,314 INFO L273 TraceCheckUtils]: 19: Hoare triple {58409#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {58409#true} is VALID [2018-11-23 12:46:29,314 INFO L273 TraceCheckUtils]: 20: Hoare triple {58409#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {58409#true} is VALID [2018-11-23 12:46:29,315 INFO L273 TraceCheckUtils]: 21: Hoare triple {58409#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,315 INFO L273 TraceCheckUtils]: 22: Hoare triple {58409#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {58409#true} is VALID [2018-11-23 12:46:29,315 INFO L273 TraceCheckUtils]: 23: Hoare triple {58409#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,315 INFO L273 TraceCheckUtils]: 24: Hoare triple {58409#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {58409#true} is VALID [2018-11-23 12:46:29,315 INFO L273 TraceCheckUtils]: 25: Hoare triple {58409#true} ~skip~0 := 0; {58409#true} is VALID [2018-11-23 12:46:29,315 INFO L273 TraceCheckUtils]: 26: Hoare triple {58409#true} assume !false; {58409#true} is VALID [2018-11-23 12:46:29,315 INFO L273 TraceCheckUtils]: 27: Hoare triple {58409#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,315 INFO L273 TraceCheckUtils]: 28: Hoare triple {58409#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,315 INFO L273 TraceCheckUtils]: 29: Hoare triple {58409#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,316 INFO L273 TraceCheckUtils]: 30: Hoare triple {58409#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,316 INFO L273 TraceCheckUtils]: 31: Hoare triple {58409#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,316 INFO L273 TraceCheckUtils]: 32: Hoare triple {58409#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,316 INFO L273 TraceCheckUtils]: 33: Hoare triple {58409#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,316 INFO L273 TraceCheckUtils]: 34: Hoare triple {58409#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,316 INFO L273 TraceCheckUtils]: 35: Hoare triple {58409#true} assume 4384 == #t~mem30;havoc #t~mem30; {58409#true} is VALID [2018-11-23 12:46:29,316 INFO L273 TraceCheckUtils]: 36: Hoare triple {58409#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {58409#true} is VALID [2018-11-23 12:46:29,316 INFO L273 TraceCheckUtils]: 37: Hoare triple {58409#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {58409#true} is VALID [2018-11-23 12:46:29,316 INFO L273 TraceCheckUtils]: 38: Hoare triple {58409#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,317 INFO L273 TraceCheckUtils]: 39: Hoare triple {58409#true} assume !(0 != #t~mem69);havoc #t~mem69;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,317 INFO L273 TraceCheckUtils]: 40: Hoare triple {58409#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,317 INFO L273 TraceCheckUtils]: 41: Hoare triple {58409#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,317 INFO L273 TraceCheckUtils]: 42: Hoare triple {58409#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {58409#true} is VALID [2018-11-23 12:46:29,317 INFO L273 TraceCheckUtils]: 43: Hoare triple {58409#true} ~skip~0 := 0; {58409#true} is VALID [2018-11-23 12:46:29,317 INFO L273 TraceCheckUtils]: 44: Hoare triple {58409#true} assume !false; {58409#true} is VALID [2018-11-23 12:46:29,317 INFO L273 TraceCheckUtils]: 45: Hoare triple {58409#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,317 INFO L273 TraceCheckUtils]: 46: Hoare triple {58409#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,318 INFO L273 TraceCheckUtils]: 47: Hoare triple {58409#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,318 INFO L273 TraceCheckUtils]: 48: Hoare triple {58409#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,318 INFO L273 TraceCheckUtils]: 49: Hoare triple {58409#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,318 INFO L273 TraceCheckUtils]: 50: Hoare triple {58409#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,318 INFO L273 TraceCheckUtils]: 51: Hoare triple {58409#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,318 INFO L273 TraceCheckUtils]: 52: Hoare triple {58409#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,318 INFO L273 TraceCheckUtils]: 53: Hoare triple {58409#true} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,318 INFO L273 TraceCheckUtils]: 54: Hoare triple {58409#true} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,318 INFO L273 TraceCheckUtils]: 55: Hoare triple {58409#true} assume 4400 == #t~mem32;havoc #t~mem32; {58409#true} is VALID [2018-11-23 12:46:29,319 INFO L273 TraceCheckUtils]: 56: Hoare triple {58409#true} call #t~mem70.base, #t~mem70.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem71.base, #t~mem71.offset := read~$Pointer$(#t~mem70.base, 836 + #t~mem70.offset, 4);call #t~mem72 := read~int(#t~mem71.base, 12 + #t~mem71.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,319 INFO L273 TraceCheckUtils]: 57: Hoare triple {58409#true} assume !(0 != ~bitwiseAnd(#t~mem72, 256) % 4294967296);havoc #t~mem70.base, #t~mem70.offset;havoc #t~mem71.base, #t~mem71.offset;havoc #t~mem72;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; {58409#true} is VALID [2018-11-23 12:46:29,319 INFO L273 TraceCheckUtils]: 58: Hoare triple {58409#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {58409#true} is VALID [2018-11-23 12:46:29,319 INFO L273 TraceCheckUtils]: 59: Hoare triple {58409#true} assume !(~ret~0 <= 0); {58409#true} is VALID [2018-11-23 12:46:29,319 INFO L273 TraceCheckUtils]: 60: Hoare triple {58409#true} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,319 INFO L273 TraceCheckUtils]: 61: Hoare triple {58409#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,319 INFO L273 TraceCheckUtils]: 62: Hoare triple {58409#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {58409#true} is VALID [2018-11-23 12:46:29,319 INFO L273 TraceCheckUtils]: 63: Hoare triple {58409#true} ~skip~0 := 0; {58409#true} is VALID [2018-11-23 12:46:29,319 INFO L273 TraceCheckUtils]: 64: Hoare triple {58409#true} assume !false; {58409#true} is VALID [2018-11-23 12:46:29,320 INFO L273 TraceCheckUtils]: 65: Hoare triple {58409#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,320 INFO L273 TraceCheckUtils]: 66: Hoare triple {58409#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,320 INFO L273 TraceCheckUtils]: 67: Hoare triple {58409#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,320 INFO L273 TraceCheckUtils]: 68: Hoare triple {58409#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,320 INFO L273 TraceCheckUtils]: 69: Hoare triple {58409#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,320 INFO L273 TraceCheckUtils]: 70: Hoare triple {58409#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,320 INFO L273 TraceCheckUtils]: 71: Hoare triple {58409#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,320 INFO L273 TraceCheckUtils]: 72: Hoare triple {58409#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,320 INFO L273 TraceCheckUtils]: 73: Hoare triple {58409#true} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,321 INFO L273 TraceCheckUtils]: 74: Hoare triple {58409#true} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,321 INFO L273 TraceCheckUtils]: 75: Hoare triple {58409#true} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,321 INFO L273 TraceCheckUtils]: 76: Hoare triple {58409#true} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 12:46:29,321 INFO L273 TraceCheckUtils]: 77: Hoare triple {58409#true} assume 4416 == #t~mem34;havoc #t~mem34; {58409#true} is VALID [2018-11-23 12:46:29,321 INFO L273 TraceCheckUtils]: 78: Hoare triple {58409#true} assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~ret~0 := #t~nondet74;havoc #t~nondet74; {58409#true} is VALID [2018-11-23 12:46:29,323 INFO L273 TraceCheckUtils]: 79: Hoare triple {58409#true} assume 3 == ~blastFlag~0;~blastFlag~0 := 4; {58411#(<= ssl3_connect_~blastFlag~0 4)} is VALID [2018-11-23 12:46:29,323 INFO L273 TraceCheckUtils]: 80: Hoare triple {58411#(<= ssl3_connect_~blastFlag~0 4)} assume !(~ret~0 <= 0);call write~int(4432, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~tmp___6~0 := #t~nondet75;havoc #t~nondet75; {58411#(<= ssl3_connect_~blastFlag~0 4)} is VALID [2018-11-23 12:46:29,325 INFO L273 TraceCheckUtils]: 81: Hoare triple {58411#(<= ssl3_connect_~blastFlag~0 4)} assume !(0 == ~tmp___6~0); {58411#(<= ssl3_connect_~blastFlag~0 4)} is VALID [2018-11-23 12:46:29,325 INFO L273 TraceCheckUtils]: 82: Hoare triple {58411#(<= ssl3_connect_~blastFlag~0 4)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {58411#(<= ssl3_connect_~blastFlag~0 4)} is VALID [2018-11-23 12:46:29,327 INFO L273 TraceCheckUtils]: 83: Hoare triple {58411#(<= ssl3_connect_~blastFlag~0 4)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {58411#(<= ssl3_connect_~blastFlag~0 4)} is VALID [2018-11-23 12:46:29,327 INFO L273 TraceCheckUtils]: 84: Hoare triple {58411#(<= ssl3_connect_~blastFlag~0 4)} ~skip~0 := 0; {58411#(<= ssl3_connect_~blastFlag~0 4)} is VALID [2018-11-23 12:46:29,329 INFO L273 TraceCheckUtils]: 85: Hoare triple {58411#(<= ssl3_connect_~blastFlag~0 4)} assume !false; {58411#(<= ssl3_connect_~blastFlag~0 4)} is VALID [2018-11-23 12:46:29,329 INFO L273 TraceCheckUtils]: 86: Hoare triple {58411#(<= ssl3_connect_~blastFlag~0 4)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(<= ssl3_connect_~blastFlag~0 4)} is VALID [2018-11-23 12:46:29,331 INFO L273 TraceCheckUtils]: 87: Hoare triple {58411#(<= ssl3_connect_~blastFlag~0 4)} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(<= ssl3_connect_~blastFlag~0 4)} is VALID [2018-11-23 12:46:29,331 INFO L273 TraceCheckUtils]: 88: Hoare triple {58411#(<= ssl3_connect_~blastFlag~0 4)} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(<= ssl3_connect_~blastFlag~0 4)} is VALID [2018-11-23 12:46:29,333 INFO L273 TraceCheckUtils]: 89: Hoare triple {58411#(<= ssl3_connect_~blastFlag~0 4)} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(<= ssl3_connect_~blastFlag~0 4)} is VALID [2018-11-23 12:46:29,333 INFO L273 TraceCheckUtils]: 90: Hoare triple {58411#(<= ssl3_connect_~blastFlag~0 4)} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(<= ssl3_connect_~blastFlag~0 4)} is VALID [2018-11-23 12:46:29,335 INFO L273 TraceCheckUtils]: 91: Hoare triple {58411#(<= ssl3_connect_~blastFlag~0 4)} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(<= ssl3_connect_~blastFlag~0 4)} is VALID [2018-11-23 12:46:29,335 INFO L273 TraceCheckUtils]: 92: Hoare triple {58411#(<= ssl3_connect_~blastFlag~0 4)} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(<= ssl3_connect_~blastFlag~0 4)} is VALID [2018-11-23 12:46:29,335 INFO L273 TraceCheckUtils]: 93: Hoare triple {58411#(<= ssl3_connect_~blastFlag~0 4)} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(<= ssl3_connect_~blastFlag~0 4)} is VALID [2018-11-23 12:46:29,336 INFO L273 TraceCheckUtils]: 94: Hoare triple {58411#(<= ssl3_connect_~blastFlag~0 4)} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(<= ssl3_connect_~blastFlag~0 4)} is VALID [2018-11-23 12:46:29,336 INFO L273 TraceCheckUtils]: 95: Hoare triple {58411#(<= ssl3_connect_~blastFlag~0 4)} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(<= ssl3_connect_~blastFlag~0 4)} is VALID [2018-11-23 12:46:29,336 INFO L273 TraceCheckUtils]: 96: Hoare triple {58411#(<= ssl3_connect_~blastFlag~0 4)} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(<= ssl3_connect_~blastFlag~0 4)} is VALID [2018-11-23 12:46:29,336 INFO L273 TraceCheckUtils]: 97: Hoare triple {58411#(<= ssl3_connect_~blastFlag~0 4)} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(<= ssl3_connect_~blastFlag~0 4)} is VALID [2018-11-23 12:46:29,337 INFO L273 TraceCheckUtils]: 98: Hoare triple {58411#(<= ssl3_connect_~blastFlag~0 4)} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(<= ssl3_connect_~blastFlag~0 4)} is VALID [2018-11-23 12:46:29,337 INFO L273 TraceCheckUtils]: 99: Hoare triple {58411#(<= ssl3_connect_~blastFlag~0 4)} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(<= ssl3_connect_~blastFlag~0 4)} is VALID [2018-11-23 12:46:29,337 INFO L273 TraceCheckUtils]: 100: Hoare triple {58411#(<= ssl3_connect_~blastFlag~0 4)} assume 4432 == #t~mem36;havoc #t~mem36; {58411#(<= ssl3_connect_~blastFlag~0 4)} is VALID [2018-11-23 12:46:29,338 INFO L273 TraceCheckUtils]: 101: Hoare triple {58411#(<= ssl3_connect_~blastFlag~0 4)} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {58411#(<= ssl3_connect_~blastFlag~0 4)} is VALID [2018-11-23 12:46:29,338 INFO L273 TraceCheckUtils]: 102: Hoare triple {58411#(<= ssl3_connect_~blastFlag~0 4)} assume 5 == ~blastFlag~0; {58410#false} is VALID [2018-11-23 12:46:29,338 INFO L273 TraceCheckUtils]: 103: Hoare triple {58410#false} assume !false; {58410#false} is VALID [2018-11-23 12:46:29,343 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 53 proven. 0 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2018-11-23 12:46:29,343 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:29,344 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:46:29,344 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 104 [2018-11-23 12:46:29,344 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:29,344 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 12:46:29,412 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 71 edges. 71 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:29,412 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:46:29,413 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:46:29,413 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:46:29,413 INFO L87 Difference]: Start difference. First operand 727 states and 1049 transitions. Second operand 3 states. [2018-11-23 12:46:30,081 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:30,081 INFO L93 Difference]: Finished difference Result 729 states and 1050 transitions. [2018-11-23 12:46:30,081 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:46:30,081 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 104 [2018-11-23 12:46:30,081 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:30,081 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:46:30,082 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 178 transitions. [2018-11-23 12:46:30,082 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:46:30,083 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 178 transitions. [2018-11-23 12:46:30,083 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 178 transitions. [2018-11-23 12:46:30,264 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 178 edges. 178 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:30,287 INFO L225 Difference]: With dead ends: 729 [2018-11-23 12:46:30,287 INFO L226 Difference]: Without dead ends: 727 [2018-11-23 12:46:30,288 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:46:30,288 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 727 states. [2018-11-23 12:46:30,787 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 727 to 727. [2018-11-23 12:46:30,787 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:30,787 INFO L82 GeneralOperation]: Start isEquivalent. First operand 727 states. Second operand 727 states. [2018-11-23 12:46:30,788 INFO L74 IsIncluded]: Start isIncluded. First operand 727 states. Second operand 727 states. [2018-11-23 12:46:30,788 INFO L87 Difference]: Start difference. First operand 727 states. Second operand 727 states. [2018-11-23 12:46:30,813 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:30,813 INFO L93 Difference]: Finished difference Result 727 states and 1048 transitions. [2018-11-23 12:46:30,813 INFO L276 IsEmpty]: Start isEmpty. Operand 727 states and 1048 transitions. [2018-11-23 12:46:30,814 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:30,814 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:30,814 INFO L74 IsIncluded]: Start isIncluded. First operand 727 states. Second operand 727 states. [2018-11-23 12:46:30,814 INFO L87 Difference]: Start difference. First operand 727 states. Second operand 727 states. [2018-11-23 12:46:30,831 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:30,831 INFO L93 Difference]: Finished difference Result 727 states and 1048 transitions. [2018-11-23 12:46:30,831 INFO L276 IsEmpty]: Start isEmpty. Operand 727 states and 1048 transitions. [2018-11-23 12:46:30,832 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:30,832 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:30,832 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:30,832 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:30,832 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 727 states. [2018-11-23 12:46:30,850 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 727 states to 727 states and 1048 transitions. [2018-11-23 12:46:30,850 INFO L78 Accepts]: Start accepts. Automaton has 727 states and 1048 transitions. Word has length 104 [2018-11-23 12:46:30,850 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:30,850 INFO L480 AbstractCegarLoop]: Abstraction has 727 states and 1048 transitions. [2018-11-23 12:46:30,850 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:46:30,850 INFO L276 IsEmpty]: Start isEmpty. Operand 727 states and 1048 transitions. [2018-11-23 12:46:30,851 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2018-11-23 12:46:30,851 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:30,851 INFO L402 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:30,852 INFO L423 AbstractCegarLoop]: === Iteration 26 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:30,852 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:30,852 INFO L82 PathProgramCache]: Analyzing trace with hash -148840977, now seen corresponding path program 1 times [2018-11-23 12:46:30,852 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:30,852 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:30,853 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:30,853 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:30,853 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:30,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:31,232 INFO L256 TraceCheckUtils]: 0: Hoare triple {61515#true} call ULTIMATE.init(); {61515#true} is VALID [2018-11-23 12:46:31,232 INFO L273 TraceCheckUtils]: 1: Hoare triple {61515#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,232 INFO L273 TraceCheckUtils]: 2: Hoare triple {61515#true} assume true; {61515#true} is VALID [2018-11-23 12:46:31,232 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {61515#true} {61515#true} #542#return; {61515#true} is VALID [2018-11-23 12:46:31,233 INFO L256 TraceCheckUtils]: 4: Hoare triple {61515#true} call #t~ret139 := main(); {61515#true} is VALID [2018-11-23 12:46:31,233 INFO L273 TraceCheckUtils]: 5: Hoare triple {61515#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {61515#true} is VALID [2018-11-23 12:46:31,233 INFO L256 TraceCheckUtils]: 6: Hoare triple {61515#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {61515#true} is VALID [2018-11-23 12:46:31,234 INFO L273 TraceCheckUtils]: 7: Hoare triple {61515#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,234 INFO L273 TraceCheckUtils]: 8: Hoare triple {61515#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {61515#true} is VALID [2018-11-23 12:46:31,234 INFO L273 TraceCheckUtils]: 9: Hoare triple {61515#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {61515#true} is VALID [2018-11-23 12:46:31,234 INFO L273 TraceCheckUtils]: 10: Hoare triple {61515#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {61515#true} is VALID [2018-11-23 12:46:31,235 INFO L273 TraceCheckUtils]: 11: Hoare triple {61515#true} assume !false; {61515#true} is VALID [2018-11-23 12:46:31,235 INFO L273 TraceCheckUtils]: 12: Hoare triple {61515#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,235 INFO L273 TraceCheckUtils]: 13: Hoare triple {61515#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,235 INFO L273 TraceCheckUtils]: 14: Hoare triple {61515#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,235 INFO L273 TraceCheckUtils]: 15: Hoare triple {61515#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,235 INFO L273 TraceCheckUtils]: 16: Hoare triple {61515#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,236 INFO L273 TraceCheckUtils]: 17: Hoare triple {61515#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,236 INFO L273 TraceCheckUtils]: 18: Hoare triple {61515#true} assume 4368 == #t~mem28;havoc #t~mem28; {61515#true} is VALID [2018-11-23 12:46:31,236 INFO L273 TraceCheckUtils]: 19: Hoare triple {61515#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {61515#true} is VALID [2018-11-23 12:46:31,236 INFO L273 TraceCheckUtils]: 20: Hoare triple {61515#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {61515#true} is VALID [2018-11-23 12:46:31,236 INFO L273 TraceCheckUtils]: 21: Hoare triple {61515#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,236 INFO L273 TraceCheckUtils]: 22: Hoare triple {61515#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {61515#true} is VALID [2018-11-23 12:46:31,237 INFO L273 TraceCheckUtils]: 23: Hoare triple {61515#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,237 INFO L273 TraceCheckUtils]: 24: Hoare triple {61515#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {61515#true} is VALID [2018-11-23 12:46:31,237 INFO L273 TraceCheckUtils]: 25: Hoare triple {61515#true} ~skip~0 := 0; {61515#true} is VALID [2018-11-23 12:46:31,237 INFO L273 TraceCheckUtils]: 26: Hoare triple {61515#true} assume !false; {61515#true} is VALID [2018-11-23 12:46:31,237 INFO L273 TraceCheckUtils]: 27: Hoare triple {61515#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,237 INFO L273 TraceCheckUtils]: 28: Hoare triple {61515#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,238 INFO L273 TraceCheckUtils]: 29: Hoare triple {61515#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,238 INFO L273 TraceCheckUtils]: 30: Hoare triple {61515#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,238 INFO L273 TraceCheckUtils]: 31: Hoare triple {61515#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,238 INFO L273 TraceCheckUtils]: 32: Hoare triple {61515#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,238 INFO L273 TraceCheckUtils]: 33: Hoare triple {61515#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,238 INFO L273 TraceCheckUtils]: 34: Hoare triple {61515#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,238 INFO L273 TraceCheckUtils]: 35: Hoare triple {61515#true} assume 4384 == #t~mem30;havoc #t~mem30; {61515#true} is VALID [2018-11-23 12:46:31,239 INFO L273 TraceCheckUtils]: 36: Hoare triple {61515#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {61515#true} is VALID [2018-11-23 12:46:31,239 INFO L273 TraceCheckUtils]: 37: Hoare triple {61515#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {61515#true} is VALID [2018-11-23 12:46:31,239 INFO L273 TraceCheckUtils]: 38: Hoare triple {61515#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,239 INFO L273 TraceCheckUtils]: 39: Hoare triple {61515#true} assume !(0 != #t~mem69);havoc #t~mem69;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,239 INFO L273 TraceCheckUtils]: 40: Hoare triple {61515#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,239 INFO L273 TraceCheckUtils]: 41: Hoare triple {61515#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,240 INFO L273 TraceCheckUtils]: 42: Hoare triple {61515#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {61515#true} is VALID [2018-11-23 12:46:31,240 INFO L273 TraceCheckUtils]: 43: Hoare triple {61515#true} ~skip~0 := 0; {61515#true} is VALID [2018-11-23 12:46:31,240 INFO L273 TraceCheckUtils]: 44: Hoare triple {61515#true} assume !false; {61515#true} is VALID [2018-11-23 12:46:31,240 INFO L273 TraceCheckUtils]: 45: Hoare triple {61515#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,240 INFO L273 TraceCheckUtils]: 46: Hoare triple {61515#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,240 INFO L273 TraceCheckUtils]: 47: Hoare triple {61515#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,241 INFO L273 TraceCheckUtils]: 48: Hoare triple {61515#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,241 INFO L273 TraceCheckUtils]: 49: Hoare triple {61515#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,241 INFO L273 TraceCheckUtils]: 50: Hoare triple {61515#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,241 INFO L273 TraceCheckUtils]: 51: Hoare triple {61515#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,241 INFO L273 TraceCheckUtils]: 52: Hoare triple {61515#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,241 INFO L273 TraceCheckUtils]: 53: Hoare triple {61515#true} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,241 INFO L273 TraceCheckUtils]: 54: Hoare triple {61515#true} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,242 INFO L273 TraceCheckUtils]: 55: Hoare triple {61515#true} assume 4400 == #t~mem32;havoc #t~mem32; {61515#true} is VALID [2018-11-23 12:46:31,242 INFO L273 TraceCheckUtils]: 56: Hoare triple {61515#true} call #t~mem70.base, #t~mem70.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem71.base, #t~mem71.offset := read~$Pointer$(#t~mem70.base, 836 + #t~mem70.offset, 4);call #t~mem72 := read~int(#t~mem71.base, 12 + #t~mem71.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,242 INFO L273 TraceCheckUtils]: 57: Hoare triple {61515#true} assume !(0 != ~bitwiseAnd(#t~mem72, 256) % 4294967296);havoc #t~mem70.base, #t~mem70.offset;havoc #t~mem71.base, #t~mem71.offset;havoc #t~mem72;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; {61515#true} is VALID [2018-11-23 12:46:31,242 INFO L273 TraceCheckUtils]: 58: Hoare triple {61515#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {61515#true} is VALID [2018-11-23 12:46:31,242 INFO L273 TraceCheckUtils]: 59: Hoare triple {61515#true} assume !(~ret~0 <= 0); {61515#true} is VALID [2018-11-23 12:46:31,242 INFO L273 TraceCheckUtils]: 60: Hoare triple {61515#true} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,243 INFO L273 TraceCheckUtils]: 61: Hoare triple {61515#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,243 INFO L273 TraceCheckUtils]: 62: Hoare triple {61515#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {61515#true} is VALID [2018-11-23 12:46:31,243 INFO L273 TraceCheckUtils]: 63: Hoare triple {61515#true} ~skip~0 := 0; {61515#true} is VALID [2018-11-23 12:46:31,243 INFO L273 TraceCheckUtils]: 64: Hoare triple {61515#true} assume !false; {61515#true} is VALID [2018-11-23 12:46:31,243 INFO L273 TraceCheckUtils]: 65: Hoare triple {61515#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,243 INFO L273 TraceCheckUtils]: 66: Hoare triple {61515#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,244 INFO L273 TraceCheckUtils]: 67: Hoare triple {61515#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,244 INFO L273 TraceCheckUtils]: 68: Hoare triple {61515#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,244 INFO L273 TraceCheckUtils]: 69: Hoare triple {61515#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,244 INFO L273 TraceCheckUtils]: 70: Hoare triple {61515#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,244 INFO L273 TraceCheckUtils]: 71: Hoare triple {61515#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,244 INFO L273 TraceCheckUtils]: 72: Hoare triple {61515#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,245 INFO L273 TraceCheckUtils]: 73: Hoare triple {61515#true} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,245 INFO L273 TraceCheckUtils]: 74: Hoare triple {61515#true} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,245 INFO L273 TraceCheckUtils]: 75: Hoare triple {61515#true} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,245 INFO L273 TraceCheckUtils]: 76: Hoare triple {61515#true} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {61515#true} is VALID [2018-11-23 12:46:31,245 INFO L273 TraceCheckUtils]: 77: Hoare triple {61515#true} assume 4416 == #t~mem34;havoc #t~mem34; {61515#true} is VALID [2018-11-23 12:46:31,245 INFO L273 TraceCheckUtils]: 78: Hoare triple {61515#true} assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~ret~0 := #t~nondet74;havoc #t~nondet74; {61515#true} is VALID [2018-11-23 12:46:31,245 INFO L273 TraceCheckUtils]: 79: Hoare triple {61515#true} assume 3 == ~blastFlag~0;~blastFlag~0 := 4; {61515#true} is VALID [2018-11-23 12:46:31,253 INFO L273 TraceCheckUtils]: 80: Hoare triple {61515#true} assume !(~ret~0 <= 0);call write~int(4432, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~tmp___6~0 := #t~nondet75;havoc #t~nondet75; {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:31,253 INFO L273 TraceCheckUtils]: 81: Hoare triple {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(0 == ~tmp___6~0); {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:31,254 INFO L273 TraceCheckUtils]: 82: Hoare triple {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:31,254 INFO L273 TraceCheckUtils]: 83: Hoare triple {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:31,257 INFO L273 TraceCheckUtils]: 84: Hoare triple {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} ~skip~0 := 0; {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:31,257 INFO L273 TraceCheckUtils]: 85: Hoare triple {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !false; {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:31,260 INFO L273 TraceCheckUtils]: 86: Hoare triple {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:31,260 INFO L273 TraceCheckUtils]: 87: Hoare triple {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:31,263 INFO L273 TraceCheckUtils]: 88: Hoare triple {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:31,263 INFO L273 TraceCheckUtils]: 89: Hoare triple {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:31,265 INFO L273 TraceCheckUtils]: 90: Hoare triple {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:31,265 INFO L273 TraceCheckUtils]: 91: Hoare triple {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:31,268 INFO L273 TraceCheckUtils]: 92: Hoare triple {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:31,268 INFO L273 TraceCheckUtils]: 93: Hoare triple {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:31,268 INFO L273 TraceCheckUtils]: 94: Hoare triple {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:31,269 INFO L273 TraceCheckUtils]: 95: Hoare triple {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:31,269 INFO L273 TraceCheckUtils]: 96: Hoare triple {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:31,269 INFO L273 TraceCheckUtils]: 97: Hoare triple {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:31,269 INFO L273 TraceCheckUtils]: 98: Hoare triple {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:31,270 INFO L273 TraceCheckUtils]: 99: Hoare triple {61517#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {61518#(= |ssl3_connect_#t~mem36| 4432)} is VALID [2018-11-23 12:46:31,270 INFO L273 TraceCheckUtils]: 100: Hoare triple {61518#(= |ssl3_connect_#t~mem36| 4432)} assume !(4432 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {61516#false} is VALID [2018-11-23 12:46:31,270 INFO L273 TraceCheckUtils]: 101: Hoare triple {61516#false} assume !(4433 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {61516#false} is VALID [2018-11-23 12:46:31,271 INFO L273 TraceCheckUtils]: 102: Hoare triple {61516#false} assume 4448 == #t~mem38;havoc #t~mem38; {61516#false} is VALID [2018-11-23 12:46:31,271 INFO L273 TraceCheckUtils]: 103: Hoare triple {61516#false} assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~ret~0 := #t~nondet77;havoc #t~nondet77; {61516#false} is VALID [2018-11-23 12:46:31,271 INFO L273 TraceCheckUtils]: 104: Hoare triple {61516#false} assume 4 == ~blastFlag~0; {61516#false} is VALID [2018-11-23 12:46:31,271 INFO L273 TraceCheckUtils]: 105: Hoare triple {61516#false} assume !false; {61516#false} is VALID [2018-11-23 12:46:31,279 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 53 proven. 0 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2018-11-23 12:46:31,279 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:31,279 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:31,280 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 106 [2018-11-23 12:46:31,280 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:31,280 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:31,352 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 73 edges. 73 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:31,353 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:31,353 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:31,353 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:31,353 INFO L87 Difference]: Start difference. First operand 727 states and 1048 transitions. Second operand 4 states. [2018-11-23 12:46:32,773 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:32,774 INFO L93 Difference]: Finished difference Result 1698 states and 2461 transitions. [2018-11-23 12:46:32,774 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:32,774 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 106 [2018-11-23 12:46:32,774 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:32,774 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:32,776 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 414 transitions. [2018-11-23 12:46:32,776 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:32,778 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 414 transitions. [2018-11-23 12:46:32,778 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 414 transitions. [2018-11-23 12:46:33,190 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 414 edges. 414 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:33,231 INFO L225 Difference]: With dead ends: 1698 [2018-11-23 12:46:33,231 INFO L226 Difference]: Without dead ends: 984 [2018-11-23 12:46:33,232 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:33,233 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 984 states. [2018-11-23 12:46:33,531 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 984 to 847. [2018-11-23 12:46:33,531 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:33,531 INFO L82 GeneralOperation]: Start isEquivalent. First operand 984 states. Second operand 847 states. [2018-11-23 12:46:33,531 INFO L74 IsIncluded]: Start isIncluded. First operand 984 states. Second operand 847 states. [2018-11-23 12:46:33,532 INFO L87 Difference]: Start difference. First operand 984 states. Second operand 847 states. [2018-11-23 12:46:33,568 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:33,568 INFO L93 Difference]: Finished difference Result 984 states and 1425 transitions. [2018-11-23 12:46:33,568 INFO L276 IsEmpty]: Start isEmpty. Operand 984 states and 1425 transitions. [2018-11-23 12:46:33,569 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:33,569 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:33,569 INFO L74 IsIncluded]: Start isIncluded. First operand 847 states. Second operand 984 states. [2018-11-23 12:46:33,569 INFO L87 Difference]: Start difference. First operand 847 states. Second operand 984 states. [2018-11-23 12:46:33,600 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:33,600 INFO L93 Difference]: Finished difference Result 984 states and 1425 transitions. [2018-11-23 12:46:33,600 INFO L276 IsEmpty]: Start isEmpty. Operand 984 states and 1425 transitions. [2018-11-23 12:46:33,601 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:33,601 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:33,602 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:33,602 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:33,602 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 847 states. [2018-11-23 12:46:33,627 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 847 states to 847 states and 1258 transitions. [2018-11-23 12:46:33,627 INFO L78 Accepts]: Start accepts. Automaton has 847 states and 1258 transitions. Word has length 106 [2018-11-23 12:46:33,627 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:33,627 INFO L480 AbstractCegarLoop]: Abstraction has 847 states and 1258 transitions. [2018-11-23 12:46:33,627 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:33,627 INFO L276 IsEmpty]: Start isEmpty. Operand 847 states and 1258 transitions. [2018-11-23 12:46:33,629 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2018-11-23 12:46:33,629 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:33,629 INFO L402 BasicCegarLoop]: trace histogram [6, 6, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:33,629 INFO L423 AbstractCegarLoop]: === Iteration 27 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:33,629 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:33,630 INFO L82 PathProgramCache]: Analyzing trace with hash -1084285646, now seen corresponding path program 1 times [2018-11-23 12:46:33,630 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:33,630 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:33,631 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:33,631 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:33,631 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:33,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:33,791 INFO L256 TraceCheckUtils]: 0: Hoare triple {66360#true} call ULTIMATE.init(); {66360#true} is VALID [2018-11-23 12:46:33,791 INFO L273 TraceCheckUtils]: 1: Hoare triple {66360#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,791 INFO L273 TraceCheckUtils]: 2: Hoare triple {66360#true} assume true; {66360#true} is VALID [2018-11-23 12:46:33,792 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {66360#true} {66360#true} #542#return; {66360#true} is VALID [2018-11-23 12:46:33,792 INFO L256 TraceCheckUtils]: 4: Hoare triple {66360#true} call #t~ret139 := main(); {66360#true} is VALID [2018-11-23 12:46:33,792 INFO L273 TraceCheckUtils]: 5: Hoare triple {66360#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {66360#true} is VALID [2018-11-23 12:46:33,793 INFO L256 TraceCheckUtils]: 6: Hoare triple {66360#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {66360#true} is VALID [2018-11-23 12:46:33,793 INFO L273 TraceCheckUtils]: 7: Hoare triple {66360#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,793 INFO L273 TraceCheckUtils]: 8: Hoare triple {66360#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {66360#true} is VALID [2018-11-23 12:46:33,793 INFO L273 TraceCheckUtils]: 9: Hoare triple {66360#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {66360#true} is VALID [2018-11-23 12:46:33,793 INFO L273 TraceCheckUtils]: 10: Hoare triple {66360#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {66360#true} is VALID [2018-11-23 12:46:33,793 INFO L273 TraceCheckUtils]: 11: Hoare triple {66360#true} assume !false; {66360#true} is VALID [2018-11-23 12:46:33,794 INFO L273 TraceCheckUtils]: 12: Hoare triple {66360#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,794 INFO L273 TraceCheckUtils]: 13: Hoare triple {66360#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,794 INFO L273 TraceCheckUtils]: 14: Hoare triple {66360#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,794 INFO L273 TraceCheckUtils]: 15: Hoare triple {66360#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,794 INFO L273 TraceCheckUtils]: 16: Hoare triple {66360#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,794 INFO L273 TraceCheckUtils]: 17: Hoare triple {66360#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,794 INFO L273 TraceCheckUtils]: 18: Hoare triple {66360#true} assume 4368 == #t~mem28;havoc #t~mem28; {66360#true} is VALID [2018-11-23 12:46:33,794 INFO L273 TraceCheckUtils]: 19: Hoare triple {66360#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {66360#true} is VALID [2018-11-23 12:46:33,794 INFO L273 TraceCheckUtils]: 20: Hoare triple {66360#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {66360#true} is VALID [2018-11-23 12:46:33,795 INFO L273 TraceCheckUtils]: 21: Hoare triple {66360#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,795 INFO L273 TraceCheckUtils]: 22: Hoare triple {66360#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {66360#true} is VALID [2018-11-23 12:46:33,795 INFO L273 TraceCheckUtils]: 23: Hoare triple {66360#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,795 INFO L273 TraceCheckUtils]: 24: Hoare triple {66360#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {66360#true} is VALID [2018-11-23 12:46:33,795 INFO L273 TraceCheckUtils]: 25: Hoare triple {66360#true} ~skip~0 := 0; {66360#true} is VALID [2018-11-23 12:46:33,795 INFO L273 TraceCheckUtils]: 26: Hoare triple {66360#true} assume !false; {66360#true} is VALID [2018-11-23 12:46:33,795 INFO L273 TraceCheckUtils]: 27: Hoare triple {66360#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,795 INFO L273 TraceCheckUtils]: 28: Hoare triple {66360#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,795 INFO L273 TraceCheckUtils]: 29: Hoare triple {66360#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,796 INFO L273 TraceCheckUtils]: 30: Hoare triple {66360#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,796 INFO L273 TraceCheckUtils]: 31: Hoare triple {66360#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,796 INFO L273 TraceCheckUtils]: 32: Hoare triple {66360#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,796 INFO L273 TraceCheckUtils]: 33: Hoare triple {66360#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,796 INFO L273 TraceCheckUtils]: 34: Hoare triple {66360#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,796 INFO L273 TraceCheckUtils]: 35: Hoare triple {66360#true} assume 4384 == #t~mem30;havoc #t~mem30; {66360#true} is VALID [2018-11-23 12:46:33,796 INFO L273 TraceCheckUtils]: 36: Hoare triple {66360#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {66360#true} is VALID [2018-11-23 12:46:33,796 INFO L273 TraceCheckUtils]: 37: Hoare triple {66360#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {66360#true} is VALID [2018-11-23 12:46:33,797 INFO L273 TraceCheckUtils]: 38: Hoare triple {66360#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,797 INFO L273 TraceCheckUtils]: 39: Hoare triple {66360#true} assume !(0 != #t~mem69);havoc #t~mem69;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,797 INFO L273 TraceCheckUtils]: 40: Hoare triple {66360#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,797 INFO L273 TraceCheckUtils]: 41: Hoare triple {66360#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,797 INFO L273 TraceCheckUtils]: 42: Hoare triple {66360#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {66360#true} is VALID [2018-11-23 12:46:33,797 INFO L273 TraceCheckUtils]: 43: Hoare triple {66360#true} ~skip~0 := 0; {66360#true} is VALID [2018-11-23 12:46:33,797 INFO L273 TraceCheckUtils]: 44: Hoare triple {66360#true} assume !false; {66360#true} is VALID [2018-11-23 12:46:33,797 INFO L273 TraceCheckUtils]: 45: Hoare triple {66360#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,797 INFO L273 TraceCheckUtils]: 46: Hoare triple {66360#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,798 INFO L273 TraceCheckUtils]: 47: Hoare triple {66360#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,798 INFO L273 TraceCheckUtils]: 48: Hoare triple {66360#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,798 INFO L273 TraceCheckUtils]: 49: Hoare triple {66360#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,798 INFO L273 TraceCheckUtils]: 50: Hoare triple {66360#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,798 INFO L273 TraceCheckUtils]: 51: Hoare triple {66360#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,798 INFO L273 TraceCheckUtils]: 52: Hoare triple {66360#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,798 INFO L273 TraceCheckUtils]: 53: Hoare triple {66360#true} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,798 INFO L273 TraceCheckUtils]: 54: Hoare triple {66360#true} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,798 INFO L273 TraceCheckUtils]: 55: Hoare triple {66360#true} assume 4400 == #t~mem32;havoc #t~mem32; {66360#true} is VALID [2018-11-23 12:46:33,799 INFO L273 TraceCheckUtils]: 56: Hoare triple {66360#true} call #t~mem70.base, #t~mem70.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem71.base, #t~mem71.offset := read~$Pointer$(#t~mem70.base, 836 + #t~mem70.offset, 4);call #t~mem72 := read~int(#t~mem71.base, 12 + #t~mem71.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,799 INFO L273 TraceCheckUtils]: 57: Hoare triple {66360#true} assume !(0 != ~bitwiseAnd(#t~mem72, 256) % 4294967296);havoc #t~mem70.base, #t~mem70.offset;havoc #t~mem71.base, #t~mem71.offset;havoc #t~mem72;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; {66360#true} is VALID [2018-11-23 12:46:33,799 INFO L273 TraceCheckUtils]: 58: Hoare triple {66360#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {66360#true} is VALID [2018-11-23 12:46:33,799 INFO L273 TraceCheckUtils]: 59: Hoare triple {66360#true} assume !(~ret~0 <= 0); {66360#true} is VALID [2018-11-23 12:46:33,799 INFO L273 TraceCheckUtils]: 60: Hoare triple {66360#true} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,799 INFO L273 TraceCheckUtils]: 61: Hoare triple {66360#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,799 INFO L273 TraceCheckUtils]: 62: Hoare triple {66360#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {66360#true} is VALID [2018-11-23 12:46:33,799 INFO L273 TraceCheckUtils]: 63: Hoare triple {66360#true} ~skip~0 := 0; {66360#true} is VALID [2018-11-23 12:46:33,800 INFO L273 TraceCheckUtils]: 64: Hoare triple {66360#true} assume !false; {66360#true} is VALID [2018-11-23 12:46:33,800 INFO L273 TraceCheckUtils]: 65: Hoare triple {66360#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,800 INFO L273 TraceCheckUtils]: 66: Hoare triple {66360#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,800 INFO L273 TraceCheckUtils]: 67: Hoare triple {66360#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,800 INFO L273 TraceCheckUtils]: 68: Hoare triple {66360#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,800 INFO L273 TraceCheckUtils]: 69: Hoare triple {66360#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,800 INFO L273 TraceCheckUtils]: 70: Hoare triple {66360#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,800 INFO L273 TraceCheckUtils]: 71: Hoare triple {66360#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,800 INFO L273 TraceCheckUtils]: 72: Hoare triple {66360#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,801 INFO L273 TraceCheckUtils]: 73: Hoare triple {66360#true} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,801 INFO L273 TraceCheckUtils]: 74: Hoare triple {66360#true} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,801 INFO L273 TraceCheckUtils]: 75: Hoare triple {66360#true} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,801 INFO L273 TraceCheckUtils]: 76: Hoare triple {66360#true} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {66360#true} is VALID [2018-11-23 12:46:33,801 INFO L273 TraceCheckUtils]: 77: Hoare triple {66360#true} assume 4416 == #t~mem34;havoc #t~mem34; {66360#true} is VALID [2018-11-23 12:46:33,801 INFO L273 TraceCheckUtils]: 78: Hoare triple {66360#true} assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~ret~0 := #t~nondet74;havoc #t~nondet74; {66360#true} is VALID [2018-11-23 12:46:33,801 INFO L273 TraceCheckUtils]: 79: Hoare triple {66360#true} assume 3 == ~blastFlag~0;~blastFlag~0 := 4; {66360#true} is VALID [2018-11-23 12:46:33,802 INFO L273 TraceCheckUtils]: 80: Hoare triple {66360#true} assume !(~ret~0 <= 0);call write~int(4432, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~tmp___6~0 := #t~nondet75;havoc #t~nondet75; {66362#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:33,803 INFO L273 TraceCheckUtils]: 81: Hoare triple {66362#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(0 == ~tmp___6~0); {66362#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:33,803 INFO L273 TraceCheckUtils]: 82: Hoare triple {66362#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {66362#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:33,803 INFO L273 TraceCheckUtils]: 83: Hoare triple {66362#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {66362#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:33,804 INFO L273 TraceCheckUtils]: 84: Hoare triple {66362#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} ~skip~0 := 0; {66362#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:33,804 INFO L273 TraceCheckUtils]: 85: Hoare triple {66362#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !false; {66362#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:33,804 INFO L273 TraceCheckUtils]: 86: Hoare triple {66362#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {66363#(= |ssl3_connect_#t~mem23| 4432)} is VALID [2018-11-23 12:46:33,805 INFO L273 TraceCheckUtils]: 87: Hoare triple {66363#(= |ssl3_connect_#t~mem23| 4432)} assume 12292 == #t~mem23;havoc #t~mem23; {66361#false} is VALID [2018-11-23 12:46:33,805 INFO L273 TraceCheckUtils]: 88: Hoare triple {66361#false} call write~int(1, ~s.base, 40 + ~s.offset, 4);call write~int(4096, ~s.base, 52 + ~s.offset, 4);call #t~mem56.base, #t~mem56.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem57 := read~int(#t~mem56.base, 64 + #t~mem56.offset, 4);call write~int(1 + #t~mem57, #t~mem56.base, 64 + #t~mem56.offset, 4);havoc #t~mem56.base, #t~mem56.offset;havoc #t~mem57; {66361#false} is VALID [2018-11-23 12:46:33,805 INFO L273 TraceCheckUtils]: 89: Hoare triple {66361#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {66361#false} is VALID [2018-11-23 12:46:33,805 INFO L273 TraceCheckUtils]: 90: Hoare triple {66361#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {66361#false} is VALID [2018-11-23 12:46:33,805 INFO L273 TraceCheckUtils]: 91: Hoare triple {66361#false} call #t~mem58 := read~int(~s.base, ~s.offset, 4); {66361#false} is VALID [2018-11-23 12:46:33,805 INFO L273 TraceCheckUtils]: 92: Hoare triple {66361#false} assume !(768 != ~bitwiseAnd(#t~mem58, 65280));havoc #t~mem58;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem59.base, #t~mem59.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {66361#false} is VALID [2018-11-23 12:46:33,806 INFO L273 TraceCheckUtils]: 93: Hoare triple {66361#false} assume !(0 == (#t~mem59.base + #t~mem59.offset) % 4294967296);havoc #t~mem59.base, #t~mem59.offset; {66361#false} is VALID [2018-11-23 12:46:33,806 INFO L273 TraceCheckUtils]: 94: Hoare triple {66361#false} assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___4~0 := #t~nondet61;havoc #t~nondet61; {66361#false} is VALID [2018-11-23 12:46:33,806 INFO L273 TraceCheckUtils]: 95: Hoare triple {66361#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet62 && #t~nondet62 <= 2147483647;~tmp___5~0 := #t~nondet62;havoc #t~nondet62; {66361#false} is VALID [2018-11-23 12:46:33,806 INFO L273 TraceCheckUtils]: 96: Hoare triple {66361#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 60 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 60 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset;call write~int(0, ~s.base, 64 + ~s.offset, 4); {66361#false} is VALID [2018-11-23 12:46:33,806 INFO L273 TraceCheckUtils]: 97: Hoare triple {66361#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {66361#false} is VALID [2018-11-23 12:46:33,807 INFO L273 TraceCheckUtils]: 98: Hoare triple {66361#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {66361#false} is VALID [2018-11-23 12:46:33,807 INFO L273 TraceCheckUtils]: 99: Hoare triple {66361#false} ~skip~0 := 0; {66361#false} is VALID [2018-11-23 12:46:33,807 INFO L273 TraceCheckUtils]: 100: Hoare triple {66361#false} assume !false; {66361#false} is VALID [2018-11-23 12:46:33,807 INFO L273 TraceCheckUtils]: 101: Hoare triple {66361#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {66361#false} is VALID [2018-11-23 12:46:33,807 INFO L273 TraceCheckUtils]: 102: Hoare triple {66361#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {66361#false} is VALID [2018-11-23 12:46:33,807 INFO L273 TraceCheckUtils]: 103: Hoare triple {66361#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {66361#false} is VALID [2018-11-23 12:46:33,808 INFO L273 TraceCheckUtils]: 104: Hoare triple {66361#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {66361#false} is VALID [2018-11-23 12:46:33,808 INFO L273 TraceCheckUtils]: 105: Hoare triple {66361#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {66361#false} is VALID [2018-11-23 12:46:33,808 INFO L273 TraceCheckUtils]: 106: Hoare triple {66361#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {66361#false} is VALID [2018-11-23 12:46:33,808 INFO L273 TraceCheckUtils]: 107: Hoare triple {66361#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {66361#false} is VALID [2018-11-23 12:46:33,808 INFO L273 TraceCheckUtils]: 108: Hoare triple {66361#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {66361#false} is VALID [2018-11-23 12:46:33,809 INFO L273 TraceCheckUtils]: 109: Hoare triple {66361#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {66361#false} is VALID [2018-11-23 12:46:33,809 INFO L273 TraceCheckUtils]: 110: Hoare triple {66361#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {66361#false} is VALID [2018-11-23 12:46:33,809 INFO L273 TraceCheckUtils]: 111: Hoare triple {66361#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {66361#false} is VALID [2018-11-23 12:46:33,809 INFO L273 TraceCheckUtils]: 112: Hoare triple {66361#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {66361#false} is VALID [2018-11-23 12:46:33,809 INFO L273 TraceCheckUtils]: 113: Hoare triple {66361#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {66361#false} is VALID [2018-11-23 12:46:33,809 INFO L273 TraceCheckUtils]: 114: Hoare triple {66361#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {66361#false} is VALID [2018-11-23 12:46:33,810 INFO L273 TraceCheckUtils]: 115: Hoare triple {66361#false} assume !(4432 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {66361#false} is VALID [2018-11-23 12:46:33,810 INFO L273 TraceCheckUtils]: 116: Hoare triple {66361#false} assume !(4433 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {66361#false} is VALID [2018-11-23 12:46:33,810 INFO L273 TraceCheckUtils]: 117: Hoare triple {66361#false} assume 4448 == #t~mem38;havoc #t~mem38; {66361#false} is VALID [2018-11-23 12:46:33,810 INFO L273 TraceCheckUtils]: 118: Hoare triple {66361#false} assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~ret~0 := #t~nondet77;havoc #t~nondet77; {66361#false} is VALID [2018-11-23 12:46:33,810 INFO L273 TraceCheckUtils]: 119: Hoare triple {66361#false} assume 4 == ~blastFlag~0; {66361#false} is VALID [2018-11-23 12:46:33,810 INFO L273 TraceCheckUtils]: 120: Hoare triple {66361#false} assume !false; {66361#false} is VALID [2018-11-23 12:46:33,816 INFO L134 CoverageAnalysis]: Checked inductivity of 145 backedges. 80 proven. 0 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2018-11-23 12:46:33,816 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:33,816 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:33,817 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 121 [2018-11-23 12:46:33,817 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:33,817 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:33,902 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 88 edges. 88 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:33,902 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:33,902 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:33,902 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:33,902 INFO L87 Difference]: Start difference. First operand 847 states and 1258 transitions. Second operand 4 states. [2018-11-23 12:46:35,634 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:35,634 INFO L93 Difference]: Finished difference Result 1813 states and 2661 transitions. [2018-11-23 12:46:35,634 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:35,634 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 121 [2018-11-23 12:46:35,634 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:35,634 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:35,636 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 412 transitions. [2018-11-23 12:46:35,636 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:35,638 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 412 transitions. [2018-11-23 12:46:35,638 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 412 transitions. [2018-11-23 12:46:36,050 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 412 edges. 412 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:36,093 INFO L225 Difference]: With dead ends: 1813 [2018-11-23 12:46:36,093 INFO L226 Difference]: Without dead ends: 979 [2018-11-23 12:46:36,094 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:36,094 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 979 states. [2018-11-23 12:46:36,624 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 979 to 847. [2018-11-23 12:46:36,624 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:36,624 INFO L82 GeneralOperation]: Start isEquivalent. First operand 979 states. Second operand 847 states. [2018-11-23 12:46:36,624 INFO L74 IsIncluded]: Start isIncluded. First operand 979 states. Second operand 847 states. [2018-11-23 12:46:36,624 INFO L87 Difference]: Start difference. First operand 979 states. Second operand 847 states. [2018-11-23 12:46:36,657 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:36,657 INFO L93 Difference]: Finished difference Result 979 states and 1415 transitions. [2018-11-23 12:46:36,658 INFO L276 IsEmpty]: Start isEmpty. Operand 979 states and 1415 transitions. [2018-11-23 12:46:36,659 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:36,659 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:36,659 INFO L74 IsIncluded]: Start isIncluded. First operand 847 states. Second operand 979 states. [2018-11-23 12:46:36,659 INFO L87 Difference]: Start difference. First operand 847 states. Second operand 979 states. [2018-11-23 12:46:36,696 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:36,697 INFO L93 Difference]: Finished difference Result 979 states and 1415 transitions. [2018-11-23 12:46:36,697 INFO L276 IsEmpty]: Start isEmpty. Operand 979 states and 1415 transitions. [2018-11-23 12:46:36,698 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:36,698 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:36,698 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:36,698 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:36,698 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 847 states. [2018-11-23 12:46:36,723 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 847 states to 847 states and 1253 transitions. [2018-11-23 12:46:36,723 INFO L78 Accepts]: Start accepts. Automaton has 847 states and 1253 transitions. Word has length 121 [2018-11-23 12:46:36,723 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:36,723 INFO L480 AbstractCegarLoop]: Abstraction has 847 states and 1253 transitions. [2018-11-23 12:46:36,723 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:36,723 INFO L276 IsEmpty]: Start isEmpty. Operand 847 states and 1253 transitions. [2018-11-23 12:46:36,724 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2018-11-23 12:46:36,725 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:36,725 INFO L402 BasicCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 5, 5, 5, 5, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:36,725 INFO L423 AbstractCegarLoop]: === Iteration 28 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:36,725 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:36,725 INFO L82 PathProgramCache]: Analyzing trace with hash -1832311600, now seen corresponding path program 1 times [2018-11-23 12:46:36,725 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:36,725 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:36,726 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:36,726 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:36,726 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:36,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:37,003 WARN L180 SmtUtils]: Spent 101.00 ms on a formula simplification. DAG size of input: 12 DAG size of output: 9 [2018-11-23 12:46:37,334 INFO L256 TraceCheckUtils]: 0: Hoare triple {71310#true} call ULTIMATE.init(); {71310#true} is VALID [2018-11-23 12:46:37,335 INFO L273 TraceCheckUtils]: 1: Hoare triple {71310#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,335 INFO L273 TraceCheckUtils]: 2: Hoare triple {71310#true} assume true; {71310#true} is VALID [2018-11-23 12:46:37,335 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {71310#true} {71310#true} #542#return; {71310#true} is VALID [2018-11-23 12:46:37,335 INFO L256 TraceCheckUtils]: 4: Hoare triple {71310#true} call #t~ret139 := main(); {71310#true} is VALID [2018-11-23 12:46:37,335 INFO L273 TraceCheckUtils]: 5: Hoare triple {71310#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {71310#true} is VALID [2018-11-23 12:46:37,336 INFO L256 TraceCheckUtils]: 6: Hoare triple {71310#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {71310#true} is VALID [2018-11-23 12:46:37,336 INFO L273 TraceCheckUtils]: 7: Hoare triple {71310#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,336 INFO L273 TraceCheckUtils]: 8: Hoare triple {71310#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {71310#true} is VALID [2018-11-23 12:46:37,336 INFO L273 TraceCheckUtils]: 9: Hoare triple {71310#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {71310#true} is VALID [2018-11-23 12:46:37,336 INFO L273 TraceCheckUtils]: 10: Hoare triple {71310#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {71310#true} is VALID [2018-11-23 12:46:37,336 INFO L273 TraceCheckUtils]: 11: Hoare triple {71310#true} assume !false; {71310#true} is VALID [2018-11-23 12:46:37,337 INFO L273 TraceCheckUtils]: 12: Hoare triple {71310#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,337 INFO L273 TraceCheckUtils]: 13: Hoare triple {71310#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,337 INFO L273 TraceCheckUtils]: 14: Hoare triple {71310#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,337 INFO L273 TraceCheckUtils]: 15: Hoare triple {71310#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,337 INFO L273 TraceCheckUtils]: 16: Hoare triple {71310#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,337 INFO L273 TraceCheckUtils]: 17: Hoare triple {71310#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,338 INFO L273 TraceCheckUtils]: 18: Hoare triple {71310#true} assume 4368 == #t~mem28;havoc #t~mem28; {71310#true} is VALID [2018-11-23 12:46:37,338 INFO L273 TraceCheckUtils]: 19: Hoare triple {71310#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {71310#true} is VALID [2018-11-23 12:46:37,338 INFO L273 TraceCheckUtils]: 20: Hoare triple {71310#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {71310#true} is VALID [2018-11-23 12:46:37,338 INFO L273 TraceCheckUtils]: 21: Hoare triple {71310#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,338 INFO L273 TraceCheckUtils]: 22: Hoare triple {71310#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {71310#true} is VALID [2018-11-23 12:46:37,338 INFO L273 TraceCheckUtils]: 23: Hoare triple {71310#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,339 INFO L273 TraceCheckUtils]: 24: Hoare triple {71310#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {71310#true} is VALID [2018-11-23 12:46:37,339 INFO L273 TraceCheckUtils]: 25: Hoare triple {71310#true} ~skip~0 := 0; {71310#true} is VALID [2018-11-23 12:46:37,339 INFO L273 TraceCheckUtils]: 26: Hoare triple {71310#true} assume !false; {71310#true} is VALID [2018-11-23 12:46:37,339 INFO L273 TraceCheckUtils]: 27: Hoare triple {71310#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,339 INFO L273 TraceCheckUtils]: 28: Hoare triple {71310#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,340 INFO L273 TraceCheckUtils]: 29: Hoare triple {71310#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,340 INFO L273 TraceCheckUtils]: 30: Hoare triple {71310#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,340 INFO L273 TraceCheckUtils]: 31: Hoare triple {71310#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,340 INFO L273 TraceCheckUtils]: 32: Hoare triple {71310#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,340 INFO L273 TraceCheckUtils]: 33: Hoare triple {71310#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,340 INFO L273 TraceCheckUtils]: 34: Hoare triple {71310#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,341 INFO L273 TraceCheckUtils]: 35: Hoare triple {71310#true} assume 4384 == #t~mem30;havoc #t~mem30; {71310#true} is VALID [2018-11-23 12:46:37,341 INFO L273 TraceCheckUtils]: 36: Hoare triple {71310#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {71310#true} is VALID [2018-11-23 12:46:37,341 INFO L273 TraceCheckUtils]: 37: Hoare triple {71310#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {71310#true} is VALID [2018-11-23 12:46:37,341 INFO L273 TraceCheckUtils]: 38: Hoare triple {71310#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,341 INFO L273 TraceCheckUtils]: 39: Hoare triple {71310#true} assume !(0 != #t~mem69);havoc #t~mem69;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,342 INFO L273 TraceCheckUtils]: 40: Hoare triple {71310#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,342 INFO L273 TraceCheckUtils]: 41: Hoare triple {71310#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,342 INFO L273 TraceCheckUtils]: 42: Hoare triple {71310#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {71310#true} is VALID [2018-11-23 12:46:37,342 INFO L273 TraceCheckUtils]: 43: Hoare triple {71310#true} ~skip~0 := 0; {71310#true} is VALID [2018-11-23 12:46:37,342 INFO L273 TraceCheckUtils]: 44: Hoare triple {71310#true} assume !false; {71310#true} is VALID [2018-11-23 12:46:37,342 INFO L273 TraceCheckUtils]: 45: Hoare triple {71310#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,343 INFO L273 TraceCheckUtils]: 46: Hoare triple {71310#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,343 INFO L273 TraceCheckUtils]: 47: Hoare triple {71310#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,343 INFO L273 TraceCheckUtils]: 48: Hoare triple {71310#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,343 INFO L273 TraceCheckUtils]: 49: Hoare triple {71310#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,343 INFO L273 TraceCheckUtils]: 50: Hoare triple {71310#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,344 INFO L273 TraceCheckUtils]: 51: Hoare triple {71310#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,344 INFO L273 TraceCheckUtils]: 52: Hoare triple {71310#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,344 INFO L273 TraceCheckUtils]: 53: Hoare triple {71310#true} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,344 INFO L273 TraceCheckUtils]: 54: Hoare triple {71310#true} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,344 INFO L273 TraceCheckUtils]: 55: Hoare triple {71310#true} assume 4400 == #t~mem32;havoc #t~mem32; {71310#true} is VALID [2018-11-23 12:46:37,345 INFO L273 TraceCheckUtils]: 56: Hoare triple {71310#true} call #t~mem70.base, #t~mem70.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem71.base, #t~mem71.offset := read~$Pointer$(#t~mem70.base, 836 + #t~mem70.offset, 4);call #t~mem72 := read~int(#t~mem71.base, 12 + #t~mem71.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,345 INFO L273 TraceCheckUtils]: 57: Hoare triple {71310#true} assume !(0 != ~bitwiseAnd(#t~mem72, 256) % 4294967296);havoc #t~mem70.base, #t~mem70.offset;havoc #t~mem71.base, #t~mem71.offset;havoc #t~mem72;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; {71310#true} is VALID [2018-11-23 12:46:37,345 INFO L273 TraceCheckUtils]: 58: Hoare triple {71310#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {71310#true} is VALID [2018-11-23 12:46:37,345 INFO L273 TraceCheckUtils]: 59: Hoare triple {71310#true} assume !(~ret~0 <= 0); {71310#true} is VALID [2018-11-23 12:46:37,345 INFO L273 TraceCheckUtils]: 60: Hoare triple {71310#true} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,345 INFO L273 TraceCheckUtils]: 61: Hoare triple {71310#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,346 INFO L273 TraceCheckUtils]: 62: Hoare triple {71310#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {71310#true} is VALID [2018-11-23 12:46:37,346 INFO L273 TraceCheckUtils]: 63: Hoare triple {71310#true} ~skip~0 := 0; {71310#true} is VALID [2018-11-23 12:46:37,346 INFO L273 TraceCheckUtils]: 64: Hoare triple {71310#true} assume !false; {71310#true} is VALID [2018-11-23 12:46:37,346 INFO L273 TraceCheckUtils]: 65: Hoare triple {71310#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,346 INFO L273 TraceCheckUtils]: 66: Hoare triple {71310#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,347 INFO L273 TraceCheckUtils]: 67: Hoare triple {71310#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,347 INFO L273 TraceCheckUtils]: 68: Hoare triple {71310#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,347 INFO L273 TraceCheckUtils]: 69: Hoare triple {71310#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,347 INFO L273 TraceCheckUtils]: 70: Hoare triple {71310#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,347 INFO L273 TraceCheckUtils]: 71: Hoare triple {71310#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,347 INFO L273 TraceCheckUtils]: 72: Hoare triple {71310#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,348 INFO L273 TraceCheckUtils]: 73: Hoare triple {71310#true} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,348 INFO L273 TraceCheckUtils]: 74: Hoare triple {71310#true} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,348 INFO L273 TraceCheckUtils]: 75: Hoare triple {71310#true} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,348 INFO L273 TraceCheckUtils]: 76: Hoare triple {71310#true} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {71310#true} is VALID [2018-11-23 12:46:37,348 INFO L273 TraceCheckUtils]: 77: Hoare triple {71310#true} assume 4416 == #t~mem34;havoc #t~mem34; {71310#true} is VALID [2018-11-23 12:46:37,349 INFO L273 TraceCheckUtils]: 78: Hoare triple {71310#true} assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~ret~0 := #t~nondet74;havoc #t~nondet74; {71310#true} is VALID [2018-11-23 12:46:37,349 INFO L273 TraceCheckUtils]: 79: Hoare triple {71310#true} assume 3 == ~blastFlag~0;~blastFlag~0 := 4; {71310#true} is VALID [2018-11-23 12:46:37,362 INFO L273 TraceCheckUtils]: 80: Hoare triple {71310#true} assume !(~ret~0 <= 0);call write~int(4432, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~tmp___6~0 := #t~nondet75;havoc #t~nondet75; {71312#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:37,381 INFO L273 TraceCheckUtils]: 81: Hoare triple {71312#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(0 == ~tmp___6~0); {71312#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:37,389 INFO L273 TraceCheckUtils]: 82: Hoare triple {71312#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {71312#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:37,402 INFO L273 TraceCheckUtils]: 83: Hoare triple {71312#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {71312#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:37,414 INFO L273 TraceCheckUtils]: 84: Hoare triple {71312#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} ~skip~0 := 0; {71312#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:37,427 INFO L273 TraceCheckUtils]: 85: Hoare triple {71312#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !false; {71312#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:37,445 INFO L273 TraceCheckUtils]: 86: Hoare triple {71312#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {71312#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:37,454 INFO L273 TraceCheckUtils]: 87: Hoare triple {71312#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {71313#(= |ssl3_connect_#t~mem24| 4432)} is VALID [2018-11-23 12:46:37,466 INFO L273 TraceCheckUtils]: 88: Hoare triple {71313#(= |ssl3_connect_#t~mem24| 4432)} assume 16384 == #t~mem24;havoc #t~mem24; {71311#false} is VALID [2018-11-23 12:46:37,466 INFO L273 TraceCheckUtils]: 89: Hoare triple {71311#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {71311#false} is VALID [2018-11-23 12:46:37,467 INFO L273 TraceCheckUtils]: 90: Hoare triple {71311#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {71311#false} is VALID [2018-11-23 12:46:37,467 INFO L273 TraceCheckUtils]: 91: Hoare triple {71311#false} call #t~mem58 := read~int(~s.base, ~s.offset, 4); {71311#false} is VALID [2018-11-23 12:46:37,467 INFO L273 TraceCheckUtils]: 92: Hoare triple {71311#false} assume !(768 != ~bitwiseAnd(#t~mem58, 65280));havoc #t~mem58;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem59.base, #t~mem59.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {71311#false} is VALID [2018-11-23 12:46:37,467 INFO L273 TraceCheckUtils]: 93: Hoare triple {71311#false} assume !(0 == (#t~mem59.base + #t~mem59.offset) % 4294967296);havoc #t~mem59.base, #t~mem59.offset; {71311#false} is VALID [2018-11-23 12:46:37,467 INFO L273 TraceCheckUtils]: 94: Hoare triple {71311#false} assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___4~0 := #t~nondet61;havoc #t~nondet61; {71311#false} is VALID [2018-11-23 12:46:37,468 INFO L273 TraceCheckUtils]: 95: Hoare triple {71311#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet62 && #t~nondet62 <= 2147483647;~tmp___5~0 := #t~nondet62;havoc #t~nondet62; {71311#false} is VALID [2018-11-23 12:46:37,468 INFO L273 TraceCheckUtils]: 96: Hoare triple {71311#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 60 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 60 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset;call write~int(0, ~s.base, 64 + ~s.offset, 4); {71311#false} is VALID [2018-11-23 12:46:37,468 INFO L273 TraceCheckUtils]: 97: Hoare triple {71311#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {71311#false} is VALID [2018-11-23 12:46:37,468 INFO L273 TraceCheckUtils]: 98: Hoare triple {71311#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {71311#false} is VALID [2018-11-23 12:46:37,468 INFO L273 TraceCheckUtils]: 99: Hoare triple {71311#false} ~skip~0 := 0; {71311#false} is VALID [2018-11-23 12:46:37,468 INFO L273 TraceCheckUtils]: 100: Hoare triple {71311#false} assume !false; {71311#false} is VALID [2018-11-23 12:46:37,469 INFO L273 TraceCheckUtils]: 101: Hoare triple {71311#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {71311#false} is VALID [2018-11-23 12:46:37,469 INFO L273 TraceCheckUtils]: 102: Hoare triple {71311#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {71311#false} is VALID [2018-11-23 12:46:37,469 INFO L273 TraceCheckUtils]: 103: Hoare triple {71311#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {71311#false} is VALID [2018-11-23 12:46:37,469 INFO L273 TraceCheckUtils]: 104: Hoare triple {71311#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {71311#false} is VALID [2018-11-23 12:46:37,469 INFO L273 TraceCheckUtils]: 105: Hoare triple {71311#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {71311#false} is VALID [2018-11-23 12:46:37,469 INFO L273 TraceCheckUtils]: 106: Hoare triple {71311#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {71311#false} is VALID [2018-11-23 12:46:37,470 INFO L273 TraceCheckUtils]: 107: Hoare triple {71311#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {71311#false} is VALID [2018-11-23 12:46:37,470 INFO L273 TraceCheckUtils]: 108: Hoare triple {71311#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {71311#false} is VALID [2018-11-23 12:46:37,470 INFO L273 TraceCheckUtils]: 109: Hoare triple {71311#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {71311#false} is VALID [2018-11-23 12:46:37,470 INFO L273 TraceCheckUtils]: 110: Hoare triple {71311#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {71311#false} is VALID [2018-11-23 12:46:37,470 INFO L273 TraceCheckUtils]: 111: Hoare triple {71311#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {71311#false} is VALID [2018-11-23 12:46:37,470 INFO L273 TraceCheckUtils]: 112: Hoare triple {71311#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {71311#false} is VALID [2018-11-23 12:46:37,471 INFO L273 TraceCheckUtils]: 113: Hoare triple {71311#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {71311#false} is VALID [2018-11-23 12:46:37,471 INFO L273 TraceCheckUtils]: 114: Hoare triple {71311#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {71311#false} is VALID [2018-11-23 12:46:37,471 INFO L273 TraceCheckUtils]: 115: Hoare triple {71311#false} assume !(4432 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {71311#false} is VALID [2018-11-23 12:46:37,471 INFO L273 TraceCheckUtils]: 116: Hoare triple {71311#false} assume !(4433 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {71311#false} is VALID [2018-11-23 12:46:37,471 INFO L273 TraceCheckUtils]: 117: Hoare triple {71311#false} assume 4448 == #t~mem38;havoc #t~mem38; {71311#false} is VALID [2018-11-23 12:46:37,471 INFO L273 TraceCheckUtils]: 118: Hoare triple {71311#false} assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~ret~0 := #t~nondet77;havoc #t~nondet77; {71311#false} is VALID [2018-11-23 12:46:37,472 INFO L273 TraceCheckUtils]: 119: Hoare triple {71311#false} assume 4 == ~blastFlag~0; {71311#false} is VALID [2018-11-23 12:46:37,472 INFO L273 TraceCheckUtils]: 120: Hoare triple {71311#false} assume !false; {71311#false} is VALID [2018-11-23 12:46:37,481 INFO L134 CoverageAnalysis]: Checked inductivity of 150 backedges. 85 proven. 0 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2018-11-23 12:46:37,481 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:37,482 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:37,482 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 121 [2018-11-23 12:46:37,482 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:37,482 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:37,779 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 88 edges. 88 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:37,780 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:37,780 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:37,780 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:37,780 INFO L87 Difference]: Start difference. First operand 847 states and 1253 transitions. Second operand 4 states. [2018-11-23 12:46:39,235 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:39,235 INFO L93 Difference]: Finished difference Result 1813 states and 2651 transitions. [2018-11-23 12:46:39,235 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:39,235 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 121 [2018-11-23 12:46:39,235 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:39,235 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:39,237 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 411 transitions. [2018-11-23 12:46:39,237 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:39,238 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 411 transitions. [2018-11-23 12:46:39,238 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 411 transitions. [2018-11-23 12:46:39,646 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 411 edges. 411 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:39,689 INFO L225 Difference]: With dead ends: 1813 [2018-11-23 12:46:39,690 INFO L226 Difference]: Without dead ends: 979 [2018-11-23 12:46:39,691 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:39,692 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 979 states. [2018-11-23 12:46:40,240 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 979 to 847. [2018-11-23 12:46:40,241 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:40,241 INFO L82 GeneralOperation]: Start isEquivalent. First operand 979 states. Second operand 847 states. [2018-11-23 12:46:40,241 INFO L74 IsIncluded]: Start isIncluded. First operand 979 states. Second operand 847 states. [2018-11-23 12:46:40,241 INFO L87 Difference]: Start difference. First operand 979 states. Second operand 847 states. [2018-11-23 12:46:40,273 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:40,273 INFO L93 Difference]: Finished difference Result 979 states and 1410 transitions. [2018-11-23 12:46:40,273 INFO L276 IsEmpty]: Start isEmpty. Operand 979 states and 1410 transitions. [2018-11-23 12:46:40,275 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:40,275 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:40,275 INFO L74 IsIncluded]: Start isIncluded. First operand 847 states. Second operand 979 states. [2018-11-23 12:46:40,275 INFO L87 Difference]: Start difference. First operand 847 states. Second operand 979 states. [2018-11-23 12:46:40,305 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:40,305 INFO L93 Difference]: Finished difference Result 979 states and 1410 transitions. [2018-11-23 12:46:40,305 INFO L276 IsEmpty]: Start isEmpty. Operand 979 states and 1410 transitions. [2018-11-23 12:46:40,306 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:40,306 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:40,306 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:40,306 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:40,306 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 847 states. [2018-11-23 12:46:40,333 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 847 states to 847 states and 1248 transitions. [2018-11-23 12:46:40,333 INFO L78 Accepts]: Start accepts. Automaton has 847 states and 1248 transitions. Word has length 121 [2018-11-23 12:46:40,333 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:40,333 INFO L480 AbstractCegarLoop]: Abstraction has 847 states and 1248 transitions. [2018-11-23 12:46:40,334 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:40,334 INFO L276 IsEmpty]: Start isEmpty. Operand 847 states and 1248 transitions. [2018-11-23 12:46:40,335 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2018-11-23 12:46:40,335 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:40,335 INFO L402 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 5, 5, 5, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:40,335 INFO L423 AbstractCegarLoop]: === Iteration 29 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:40,335 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:40,335 INFO L82 PathProgramCache]: Analyzing trace with hash -1213590989, now seen corresponding path program 1 times [2018-11-23 12:46:40,335 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:40,335 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:40,336 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:40,336 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:40,336 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:40,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:40,464 INFO L256 TraceCheckUtils]: 0: Hoare triple {76260#true} call ULTIMATE.init(); {76260#true} is VALID [2018-11-23 12:46:40,465 INFO L273 TraceCheckUtils]: 1: Hoare triple {76260#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,465 INFO L273 TraceCheckUtils]: 2: Hoare triple {76260#true} assume true; {76260#true} is VALID [2018-11-23 12:46:40,465 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {76260#true} {76260#true} #542#return; {76260#true} is VALID [2018-11-23 12:46:40,465 INFO L256 TraceCheckUtils]: 4: Hoare triple {76260#true} call #t~ret139 := main(); {76260#true} is VALID [2018-11-23 12:46:40,466 INFO L273 TraceCheckUtils]: 5: Hoare triple {76260#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {76260#true} is VALID [2018-11-23 12:46:40,466 INFO L256 TraceCheckUtils]: 6: Hoare triple {76260#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {76260#true} is VALID [2018-11-23 12:46:40,466 INFO L273 TraceCheckUtils]: 7: Hoare triple {76260#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,466 INFO L273 TraceCheckUtils]: 8: Hoare triple {76260#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {76260#true} is VALID [2018-11-23 12:46:40,466 INFO L273 TraceCheckUtils]: 9: Hoare triple {76260#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {76260#true} is VALID [2018-11-23 12:46:40,466 INFO L273 TraceCheckUtils]: 10: Hoare triple {76260#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {76260#true} is VALID [2018-11-23 12:46:40,467 INFO L273 TraceCheckUtils]: 11: Hoare triple {76260#true} assume !false; {76260#true} is VALID [2018-11-23 12:46:40,467 INFO L273 TraceCheckUtils]: 12: Hoare triple {76260#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,467 INFO L273 TraceCheckUtils]: 13: Hoare triple {76260#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,467 INFO L273 TraceCheckUtils]: 14: Hoare triple {76260#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,467 INFO L273 TraceCheckUtils]: 15: Hoare triple {76260#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,468 INFO L273 TraceCheckUtils]: 16: Hoare triple {76260#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,468 INFO L273 TraceCheckUtils]: 17: Hoare triple {76260#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,468 INFO L273 TraceCheckUtils]: 18: Hoare triple {76260#true} assume 4368 == #t~mem28;havoc #t~mem28; {76260#true} is VALID [2018-11-23 12:46:40,468 INFO L273 TraceCheckUtils]: 19: Hoare triple {76260#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {76260#true} is VALID [2018-11-23 12:46:40,468 INFO L273 TraceCheckUtils]: 20: Hoare triple {76260#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {76260#true} is VALID [2018-11-23 12:46:40,469 INFO L273 TraceCheckUtils]: 21: Hoare triple {76260#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,469 INFO L273 TraceCheckUtils]: 22: Hoare triple {76260#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {76260#true} is VALID [2018-11-23 12:46:40,469 INFO L273 TraceCheckUtils]: 23: Hoare triple {76260#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,469 INFO L273 TraceCheckUtils]: 24: Hoare triple {76260#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {76260#true} is VALID [2018-11-23 12:46:40,469 INFO L273 TraceCheckUtils]: 25: Hoare triple {76260#true} ~skip~0 := 0; {76260#true} is VALID [2018-11-23 12:46:40,469 INFO L273 TraceCheckUtils]: 26: Hoare triple {76260#true} assume !false; {76260#true} is VALID [2018-11-23 12:46:40,469 INFO L273 TraceCheckUtils]: 27: Hoare triple {76260#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,469 INFO L273 TraceCheckUtils]: 28: Hoare triple {76260#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,470 INFO L273 TraceCheckUtils]: 29: Hoare triple {76260#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,470 INFO L273 TraceCheckUtils]: 30: Hoare triple {76260#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,470 INFO L273 TraceCheckUtils]: 31: Hoare triple {76260#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,470 INFO L273 TraceCheckUtils]: 32: Hoare triple {76260#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,470 INFO L273 TraceCheckUtils]: 33: Hoare triple {76260#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,470 INFO L273 TraceCheckUtils]: 34: Hoare triple {76260#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,470 INFO L273 TraceCheckUtils]: 35: Hoare triple {76260#true} assume 4384 == #t~mem30;havoc #t~mem30; {76260#true} is VALID [2018-11-23 12:46:40,470 INFO L273 TraceCheckUtils]: 36: Hoare triple {76260#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {76260#true} is VALID [2018-11-23 12:46:40,470 INFO L273 TraceCheckUtils]: 37: Hoare triple {76260#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {76260#true} is VALID [2018-11-23 12:46:40,471 INFO L273 TraceCheckUtils]: 38: Hoare triple {76260#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,471 INFO L273 TraceCheckUtils]: 39: Hoare triple {76260#true} assume !(0 != #t~mem69);havoc #t~mem69;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,471 INFO L273 TraceCheckUtils]: 40: Hoare triple {76260#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,471 INFO L273 TraceCheckUtils]: 41: Hoare triple {76260#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,471 INFO L273 TraceCheckUtils]: 42: Hoare triple {76260#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {76260#true} is VALID [2018-11-23 12:46:40,471 INFO L273 TraceCheckUtils]: 43: Hoare triple {76260#true} ~skip~0 := 0; {76260#true} is VALID [2018-11-23 12:46:40,471 INFO L273 TraceCheckUtils]: 44: Hoare triple {76260#true} assume !false; {76260#true} is VALID [2018-11-23 12:46:40,471 INFO L273 TraceCheckUtils]: 45: Hoare triple {76260#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,471 INFO L273 TraceCheckUtils]: 46: Hoare triple {76260#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,472 INFO L273 TraceCheckUtils]: 47: Hoare triple {76260#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,472 INFO L273 TraceCheckUtils]: 48: Hoare triple {76260#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,472 INFO L273 TraceCheckUtils]: 49: Hoare triple {76260#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,472 INFO L273 TraceCheckUtils]: 50: Hoare triple {76260#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,472 INFO L273 TraceCheckUtils]: 51: Hoare triple {76260#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,472 INFO L273 TraceCheckUtils]: 52: Hoare triple {76260#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,472 INFO L273 TraceCheckUtils]: 53: Hoare triple {76260#true} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,472 INFO L273 TraceCheckUtils]: 54: Hoare triple {76260#true} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,473 INFO L273 TraceCheckUtils]: 55: Hoare triple {76260#true} assume 4400 == #t~mem32;havoc #t~mem32; {76260#true} is VALID [2018-11-23 12:46:40,473 INFO L273 TraceCheckUtils]: 56: Hoare triple {76260#true} call #t~mem70.base, #t~mem70.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem71.base, #t~mem71.offset := read~$Pointer$(#t~mem70.base, 836 + #t~mem70.offset, 4);call #t~mem72 := read~int(#t~mem71.base, 12 + #t~mem71.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,473 INFO L273 TraceCheckUtils]: 57: Hoare triple {76260#true} assume !(0 != ~bitwiseAnd(#t~mem72, 256) % 4294967296);havoc #t~mem70.base, #t~mem70.offset;havoc #t~mem71.base, #t~mem71.offset;havoc #t~mem72;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; {76260#true} is VALID [2018-11-23 12:46:40,473 INFO L273 TraceCheckUtils]: 58: Hoare triple {76260#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {76260#true} is VALID [2018-11-23 12:46:40,473 INFO L273 TraceCheckUtils]: 59: Hoare triple {76260#true} assume !(~ret~0 <= 0); {76260#true} is VALID [2018-11-23 12:46:40,473 INFO L273 TraceCheckUtils]: 60: Hoare triple {76260#true} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,473 INFO L273 TraceCheckUtils]: 61: Hoare triple {76260#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,473 INFO L273 TraceCheckUtils]: 62: Hoare triple {76260#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {76260#true} is VALID [2018-11-23 12:46:40,473 INFO L273 TraceCheckUtils]: 63: Hoare triple {76260#true} ~skip~0 := 0; {76260#true} is VALID [2018-11-23 12:46:40,474 INFO L273 TraceCheckUtils]: 64: Hoare triple {76260#true} assume !false; {76260#true} is VALID [2018-11-23 12:46:40,474 INFO L273 TraceCheckUtils]: 65: Hoare triple {76260#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,474 INFO L273 TraceCheckUtils]: 66: Hoare triple {76260#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,474 INFO L273 TraceCheckUtils]: 67: Hoare triple {76260#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,474 INFO L273 TraceCheckUtils]: 68: Hoare triple {76260#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,474 INFO L273 TraceCheckUtils]: 69: Hoare triple {76260#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,474 INFO L273 TraceCheckUtils]: 70: Hoare triple {76260#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,474 INFO L273 TraceCheckUtils]: 71: Hoare triple {76260#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,474 INFO L273 TraceCheckUtils]: 72: Hoare triple {76260#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,475 INFO L273 TraceCheckUtils]: 73: Hoare triple {76260#true} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,475 INFO L273 TraceCheckUtils]: 74: Hoare triple {76260#true} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,475 INFO L273 TraceCheckUtils]: 75: Hoare triple {76260#true} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,475 INFO L273 TraceCheckUtils]: 76: Hoare triple {76260#true} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,475 INFO L273 TraceCheckUtils]: 77: Hoare triple {76260#true} assume 4416 == #t~mem34;havoc #t~mem34; {76260#true} is VALID [2018-11-23 12:46:40,475 INFO L273 TraceCheckUtils]: 78: Hoare triple {76260#true} assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~ret~0 := #t~nondet74;havoc #t~nondet74; {76260#true} is VALID [2018-11-23 12:46:40,475 INFO L273 TraceCheckUtils]: 79: Hoare triple {76260#true} assume 3 == ~blastFlag~0;~blastFlag~0 := 4; {76260#true} is VALID [2018-11-23 12:46:40,475 INFO L273 TraceCheckUtils]: 80: Hoare triple {76260#true} assume !(~ret~0 <= 0);call write~int(4432, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~tmp___6~0 := #t~nondet75;havoc #t~nondet75; {76260#true} is VALID [2018-11-23 12:46:40,475 INFO L273 TraceCheckUtils]: 81: Hoare triple {76260#true} assume !(0 == ~tmp___6~0); {76260#true} is VALID [2018-11-23 12:46:40,476 INFO L273 TraceCheckUtils]: 82: Hoare triple {76260#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,476 INFO L273 TraceCheckUtils]: 83: Hoare triple {76260#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {76260#true} is VALID [2018-11-23 12:46:40,476 INFO L273 TraceCheckUtils]: 84: Hoare triple {76260#true} ~skip~0 := 0; {76260#true} is VALID [2018-11-23 12:46:40,476 INFO L273 TraceCheckUtils]: 85: Hoare triple {76260#true} assume !false; {76260#true} is VALID [2018-11-23 12:46:40,476 INFO L273 TraceCheckUtils]: 86: Hoare triple {76260#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,476 INFO L273 TraceCheckUtils]: 87: Hoare triple {76260#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,476 INFO L273 TraceCheckUtils]: 88: Hoare triple {76260#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,476 INFO L273 TraceCheckUtils]: 89: Hoare triple {76260#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,476 INFO L273 TraceCheckUtils]: 90: Hoare triple {76260#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,477 INFO L273 TraceCheckUtils]: 91: Hoare triple {76260#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {76260#true} is VALID [2018-11-23 12:46:40,477 INFO L273 TraceCheckUtils]: 92: Hoare triple {76260#true} assume 4368 == #t~mem28;havoc #t~mem28; {76260#true} is VALID [2018-11-23 12:46:40,477 INFO L273 TraceCheckUtils]: 93: Hoare triple {76260#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {76260#true} is VALID [2018-11-23 12:46:40,477 INFO L273 TraceCheckUtils]: 94: Hoare triple {76260#true} assume !(0 == ~blastFlag~0); {76260#true} is VALID [2018-11-23 12:46:40,478 INFO L273 TraceCheckUtils]: 95: Hoare triple {76260#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:40,478 INFO L273 TraceCheckUtils]: 96: Hoare triple {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:40,479 INFO L273 TraceCheckUtils]: 97: Hoare triple {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:40,479 INFO L273 TraceCheckUtils]: 98: Hoare triple {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:40,480 INFO L273 TraceCheckUtils]: 99: Hoare triple {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} ~skip~0 := 0; {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:40,480 INFO L273 TraceCheckUtils]: 100: Hoare triple {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !false; {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:40,481 INFO L273 TraceCheckUtils]: 101: Hoare triple {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:40,481 INFO L273 TraceCheckUtils]: 102: Hoare triple {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:40,482 INFO L273 TraceCheckUtils]: 103: Hoare triple {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:40,482 INFO L273 TraceCheckUtils]: 104: Hoare triple {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:40,483 INFO L273 TraceCheckUtils]: 105: Hoare triple {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:40,483 INFO L273 TraceCheckUtils]: 106: Hoare triple {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:40,484 INFO L273 TraceCheckUtils]: 107: Hoare triple {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:40,484 INFO L273 TraceCheckUtils]: 108: Hoare triple {76262#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {76263#(= |ssl3_connect_#t~mem30| 4384)} is VALID [2018-11-23 12:46:40,485 INFO L273 TraceCheckUtils]: 109: Hoare triple {76263#(= |ssl3_connect_#t~mem30| 4384)} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {76261#false} is VALID [2018-11-23 12:46:40,485 INFO L273 TraceCheckUtils]: 110: Hoare triple {76261#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {76261#false} is VALID [2018-11-23 12:46:40,485 INFO L273 TraceCheckUtils]: 111: Hoare triple {76261#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {76261#false} is VALID [2018-11-23 12:46:40,485 INFO L273 TraceCheckUtils]: 112: Hoare triple {76261#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {76261#false} is VALID [2018-11-23 12:46:40,485 INFO L273 TraceCheckUtils]: 113: Hoare triple {76261#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {76261#false} is VALID [2018-11-23 12:46:40,486 INFO L273 TraceCheckUtils]: 114: Hoare triple {76261#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {76261#false} is VALID [2018-11-23 12:46:40,486 INFO L273 TraceCheckUtils]: 115: Hoare triple {76261#false} assume !(4432 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {76261#false} is VALID [2018-11-23 12:46:40,486 INFO L273 TraceCheckUtils]: 116: Hoare triple {76261#false} assume !(4433 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {76261#false} is VALID [2018-11-23 12:46:40,486 INFO L273 TraceCheckUtils]: 117: Hoare triple {76261#false} assume 4448 == #t~mem38;havoc #t~mem38; {76261#false} is VALID [2018-11-23 12:46:40,486 INFO L273 TraceCheckUtils]: 118: Hoare triple {76261#false} assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~ret~0 := #t~nondet77;havoc #t~nondet77; {76261#false} is VALID [2018-11-23 12:46:40,487 INFO L273 TraceCheckUtils]: 119: Hoare triple {76261#false} assume 4 == ~blastFlag~0; {76261#false} is VALID [2018-11-23 12:46:40,487 INFO L273 TraceCheckUtils]: 120: Hoare triple {76261#false} assume !false; {76261#false} is VALID [2018-11-23 12:46:40,495 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 65 proven. 0 refuted. 0 times theorem prover too weak. 109 trivial. 0 not checked. [2018-11-23 12:46:40,495 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:40,495 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:40,495 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 121 [2018-11-23 12:46:40,496 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:40,496 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:40,572 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 76 edges. 76 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:40,572 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:40,572 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:40,572 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:40,573 INFO L87 Difference]: Start difference. First operand 847 states and 1248 transitions. Second operand 4 states. [2018-11-23 12:46:41,960 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:41,961 INFO L93 Difference]: Finished difference Result 1644 states and 2431 transitions. [2018-11-23 12:46:41,961 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:41,961 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 121 [2018-11-23 12:46:41,961 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:41,961 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:41,963 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 388 transitions. [2018-11-23 12:46:41,963 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:41,965 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 388 transitions. [2018-11-23 12:46:41,965 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 388 transitions. [2018-11-23 12:46:42,358 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 388 edges. 388 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:42,407 INFO L225 Difference]: With dead ends: 1644 [2018-11-23 12:46:42,407 INFO L226 Difference]: Without dead ends: 985 [2018-11-23 12:46:42,408 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:42,409 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 985 states. [2018-11-23 12:46:42,796 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 985 to 919. [2018-11-23 12:46:42,797 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:42,797 INFO L82 GeneralOperation]: Start isEquivalent. First operand 985 states. Second operand 919 states. [2018-11-23 12:46:42,797 INFO L74 IsIncluded]: Start isIncluded. First operand 985 states. Second operand 919 states. [2018-11-23 12:46:42,797 INFO L87 Difference]: Start difference. First operand 985 states. Second operand 919 states. [2018-11-23 12:46:42,834 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:42,834 INFO L93 Difference]: Finished difference Result 985 states and 1451 transitions. [2018-11-23 12:46:42,834 INFO L276 IsEmpty]: Start isEmpty. Operand 985 states and 1451 transitions. [2018-11-23 12:46:42,835 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:42,835 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:42,836 INFO L74 IsIncluded]: Start isIncluded. First operand 919 states. Second operand 985 states. [2018-11-23 12:46:42,836 INFO L87 Difference]: Start difference. First operand 919 states. Second operand 985 states. [2018-11-23 12:46:42,867 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:42,867 INFO L93 Difference]: Finished difference Result 985 states and 1451 transitions. [2018-11-23 12:46:42,868 INFO L276 IsEmpty]: Start isEmpty. Operand 985 states and 1451 transitions. [2018-11-23 12:46:42,868 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:42,869 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:42,869 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:42,869 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:42,869 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 919 states. [2018-11-23 12:46:42,898 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 919 states to 919 states and 1368 transitions. [2018-11-23 12:46:42,898 INFO L78 Accepts]: Start accepts. Automaton has 919 states and 1368 transitions. Word has length 121 [2018-11-23 12:46:42,898 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:42,898 INFO L480 AbstractCegarLoop]: Abstraction has 919 states and 1368 transitions. [2018-11-23 12:46:42,898 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:42,898 INFO L276 IsEmpty]: Start isEmpty. Operand 919 states and 1368 transitions. [2018-11-23 12:46:42,900 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 123 [2018-11-23 12:46:42,900 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:42,900 INFO L402 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 5, 5, 5, 5, 5, 5, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:42,900 INFO L423 AbstractCegarLoop]: === Iteration 30 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:42,900 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:42,900 INFO L82 PathProgramCache]: Analyzing trace with hash -1233245309, now seen corresponding path program 1 times [2018-11-23 12:46:42,900 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:42,900 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:42,901 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:42,901 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:42,901 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:42,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:43,063 INFO L256 TraceCheckUtils]: 0: Hoare triple {81100#true} call ULTIMATE.init(); {81100#true} is VALID [2018-11-23 12:46:43,063 INFO L273 TraceCheckUtils]: 1: Hoare triple {81100#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,063 INFO L273 TraceCheckUtils]: 2: Hoare triple {81100#true} assume true; {81100#true} is VALID [2018-11-23 12:46:43,063 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {81100#true} {81100#true} #542#return; {81100#true} is VALID [2018-11-23 12:46:43,063 INFO L256 TraceCheckUtils]: 4: Hoare triple {81100#true} call #t~ret139 := main(); {81100#true} is VALID [2018-11-23 12:46:43,063 INFO L273 TraceCheckUtils]: 5: Hoare triple {81100#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {81100#true} is VALID [2018-11-23 12:46:43,064 INFO L256 TraceCheckUtils]: 6: Hoare triple {81100#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {81100#true} is VALID [2018-11-23 12:46:43,064 INFO L273 TraceCheckUtils]: 7: Hoare triple {81100#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,064 INFO L273 TraceCheckUtils]: 8: Hoare triple {81100#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {81100#true} is VALID [2018-11-23 12:46:43,064 INFO L273 TraceCheckUtils]: 9: Hoare triple {81100#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {81100#true} is VALID [2018-11-23 12:46:43,064 INFO L273 TraceCheckUtils]: 10: Hoare triple {81100#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {81100#true} is VALID [2018-11-23 12:46:43,064 INFO L273 TraceCheckUtils]: 11: Hoare triple {81100#true} assume !false; {81100#true} is VALID [2018-11-23 12:46:43,064 INFO L273 TraceCheckUtils]: 12: Hoare triple {81100#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,064 INFO L273 TraceCheckUtils]: 13: Hoare triple {81100#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,064 INFO L273 TraceCheckUtils]: 14: Hoare triple {81100#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,065 INFO L273 TraceCheckUtils]: 15: Hoare triple {81100#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,065 INFO L273 TraceCheckUtils]: 16: Hoare triple {81100#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,065 INFO L273 TraceCheckUtils]: 17: Hoare triple {81100#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,065 INFO L273 TraceCheckUtils]: 18: Hoare triple {81100#true} assume 4368 == #t~mem28;havoc #t~mem28; {81100#true} is VALID [2018-11-23 12:46:43,065 INFO L273 TraceCheckUtils]: 19: Hoare triple {81100#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {81100#true} is VALID [2018-11-23 12:46:43,065 INFO L273 TraceCheckUtils]: 20: Hoare triple {81100#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {81100#true} is VALID [2018-11-23 12:46:43,065 INFO L273 TraceCheckUtils]: 21: Hoare triple {81100#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,065 INFO L273 TraceCheckUtils]: 22: Hoare triple {81100#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {81100#true} is VALID [2018-11-23 12:46:43,065 INFO L273 TraceCheckUtils]: 23: Hoare triple {81100#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,066 INFO L273 TraceCheckUtils]: 24: Hoare triple {81100#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {81100#true} is VALID [2018-11-23 12:46:43,066 INFO L273 TraceCheckUtils]: 25: Hoare triple {81100#true} ~skip~0 := 0; {81100#true} is VALID [2018-11-23 12:46:43,066 INFO L273 TraceCheckUtils]: 26: Hoare triple {81100#true} assume !false; {81100#true} is VALID [2018-11-23 12:46:43,066 INFO L273 TraceCheckUtils]: 27: Hoare triple {81100#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,066 INFO L273 TraceCheckUtils]: 28: Hoare triple {81100#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,066 INFO L273 TraceCheckUtils]: 29: Hoare triple {81100#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,066 INFO L273 TraceCheckUtils]: 30: Hoare triple {81100#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,066 INFO L273 TraceCheckUtils]: 31: Hoare triple {81100#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,066 INFO L273 TraceCheckUtils]: 32: Hoare triple {81100#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,067 INFO L273 TraceCheckUtils]: 33: Hoare triple {81100#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,067 INFO L273 TraceCheckUtils]: 34: Hoare triple {81100#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,067 INFO L273 TraceCheckUtils]: 35: Hoare triple {81100#true} assume 4384 == #t~mem30;havoc #t~mem30; {81100#true} is VALID [2018-11-23 12:46:43,067 INFO L273 TraceCheckUtils]: 36: Hoare triple {81100#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {81100#true} is VALID [2018-11-23 12:46:43,067 INFO L273 TraceCheckUtils]: 37: Hoare triple {81100#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {81100#true} is VALID [2018-11-23 12:46:43,067 INFO L273 TraceCheckUtils]: 38: Hoare triple {81100#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,067 INFO L273 TraceCheckUtils]: 39: Hoare triple {81100#true} assume !(0 != #t~mem69);havoc #t~mem69;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,067 INFO L273 TraceCheckUtils]: 40: Hoare triple {81100#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,068 INFO L273 TraceCheckUtils]: 41: Hoare triple {81100#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,068 INFO L273 TraceCheckUtils]: 42: Hoare triple {81100#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {81100#true} is VALID [2018-11-23 12:46:43,068 INFO L273 TraceCheckUtils]: 43: Hoare triple {81100#true} ~skip~0 := 0; {81100#true} is VALID [2018-11-23 12:46:43,068 INFO L273 TraceCheckUtils]: 44: Hoare triple {81100#true} assume !false; {81100#true} is VALID [2018-11-23 12:46:43,068 INFO L273 TraceCheckUtils]: 45: Hoare triple {81100#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,068 INFO L273 TraceCheckUtils]: 46: Hoare triple {81100#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,068 INFO L273 TraceCheckUtils]: 47: Hoare triple {81100#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,068 INFO L273 TraceCheckUtils]: 48: Hoare triple {81100#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,068 INFO L273 TraceCheckUtils]: 49: Hoare triple {81100#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,069 INFO L273 TraceCheckUtils]: 50: Hoare triple {81100#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,069 INFO L273 TraceCheckUtils]: 51: Hoare triple {81100#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,069 INFO L273 TraceCheckUtils]: 52: Hoare triple {81100#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,069 INFO L273 TraceCheckUtils]: 53: Hoare triple {81100#true} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,069 INFO L273 TraceCheckUtils]: 54: Hoare triple {81100#true} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,069 INFO L273 TraceCheckUtils]: 55: Hoare triple {81100#true} assume 4400 == #t~mem32;havoc #t~mem32; {81100#true} is VALID [2018-11-23 12:46:43,069 INFO L273 TraceCheckUtils]: 56: Hoare triple {81100#true} call #t~mem70.base, #t~mem70.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem71.base, #t~mem71.offset := read~$Pointer$(#t~mem70.base, 836 + #t~mem70.offset, 4);call #t~mem72 := read~int(#t~mem71.base, 12 + #t~mem71.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,069 INFO L273 TraceCheckUtils]: 57: Hoare triple {81100#true} assume !(0 != ~bitwiseAnd(#t~mem72, 256) % 4294967296);havoc #t~mem70.base, #t~mem70.offset;havoc #t~mem71.base, #t~mem71.offset;havoc #t~mem72;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; {81100#true} is VALID [2018-11-23 12:46:43,069 INFO L273 TraceCheckUtils]: 58: Hoare triple {81100#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {81100#true} is VALID [2018-11-23 12:46:43,070 INFO L273 TraceCheckUtils]: 59: Hoare triple {81100#true} assume !(~ret~0 <= 0); {81100#true} is VALID [2018-11-23 12:46:43,070 INFO L273 TraceCheckUtils]: 60: Hoare triple {81100#true} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,070 INFO L273 TraceCheckUtils]: 61: Hoare triple {81100#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,070 INFO L273 TraceCheckUtils]: 62: Hoare triple {81100#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {81100#true} is VALID [2018-11-23 12:46:43,070 INFO L273 TraceCheckUtils]: 63: Hoare triple {81100#true} ~skip~0 := 0; {81100#true} is VALID [2018-11-23 12:46:43,070 INFO L273 TraceCheckUtils]: 64: Hoare triple {81100#true} assume !false; {81100#true} is VALID [2018-11-23 12:46:43,070 INFO L273 TraceCheckUtils]: 65: Hoare triple {81100#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,070 INFO L273 TraceCheckUtils]: 66: Hoare triple {81100#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,070 INFO L273 TraceCheckUtils]: 67: Hoare triple {81100#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,071 INFO L273 TraceCheckUtils]: 68: Hoare triple {81100#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,071 INFO L273 TraceCheckUtils]: 69: Hoare triple {81100#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,071 INFO L273 TraceCheckUtils]: 70: Hoare triple {81100#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,071 INFO L273 TraceCheckUtils]: 71: Hoare triple {81100#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,071 INFO L273 TraceCheckUtils]: 72: Hoare triple {81100#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,071 INFO L273 TraceCheckUtils]: 73: Hoare triple {81100#true} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,071 INFO L273 TraceCheckUtils]: 74: Hoare triple {81100#true} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,071 INFO L273 TraceCheckUtils]: 75: Hoare triple {81100#true} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,071 INFO L273 TraceCheckUtils]: 76: Hoare triple {81100#true} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {81100#true} is VALID [2018-11-23 12:46:43,072 INFO L273 TraceCheckUtils]: 77: Hoare triple {81100#true} assume 4416 == #t~mem34;havoc #t~mem34; {81100#true} is VALID [2018-11-23 12:46:43,072 INFO L273 TraceCheckUtils]: 78: Hoare triple {81100#true} assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~ret~0 := #t~nondet74;havoc #t~nondet74; {81100#true} is VALID [2018-11-23 12:46:43,072 INFO L273 TraceCheckUtils]: 79: Hoare triple {81100#true} assume 3 == ~blastFlag~0;~blastFlag~0 := 4; {81100#true} is VALID [2018-11-23 12:46:43,073 INFO L273 TraceCheckUtils]: 80: Hoare triple {81100#true} assume !(~ret~0 <= 0);call write~int(4432, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~tmp___6~0 := #t~nondet75;havoc #t~nondet75; {81102#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:43,074 INFO L273 TraceCheckUtils]: 81: Hoare triple {81102#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(0 == ~tmp___6~0); {81102#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:43,074 INFO L273 TraceCheckUtils]: 82: Hoare triple {81102#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {81102#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:43,076 INFO L273 TraceCheckUtils]: 83: Hoare triple {81102#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {81102#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:43,076 INFO L273 TraceCheckUtils]: 84: Hoare triple {81102#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} ~skip~0 := 0; {81102#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:43,079 INFO L273 TraceCheckUtils]: 85: Hoare triple {81102#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !false; {81102#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:43,079 INFO L273 TraceCheckUtils]: 86: Hoare triple {81102#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {81102#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:43,079 INFO L273 TraceCheckUtils]: 87: Hoare triple {81102#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {81102#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:43,080 INFO L273 TraceCheckUtils]: 88: Hoare triple {81102#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {81103#(= |ssl3_connect_#t~mem25| 4432)} is VALID [2018-11-23 12:46:43,080 INFO L273 TraceCheckUtils]: 89: Hoare triple {81103#(= |ssl3_connect_#t~mem25| 4432)} assume 4096 == #t~mem25;havoc #t~mem25; {81101#false} is VALID [2018-11-23 12:46:43,080 INFO L273 TraceCheckUtils]: 90: Hoare triple {81101#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {81101#false} is VALID [2018-11-23 12:46:43,080 INFO L273 TraceCheckUtils]: 91: Hoare triple {81101#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {81101#false} is VALID [2018-11-23 12:46:43,080 INFO L273 TraceCheckUtils]: 92: Hoare triple {81101#false} call #t~mem58 := read~int(~s.base, ~s.offset, 4); {81101#false} is VALID [2018-11-23 12:46:43,081 INFO L273 TraceCheckUtils]: 93: Hoare triple {81101#false} assume !(768 != ~bitwiseAnd(#t~mem58, 65280));havoc #t~mem58;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem59.base, #t~mem59.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {81101#false} is VALID [2018-11-23 12:46:43,081 INFO L273 TraceCheckUtils]: 94: Hoare triple {81101#false} assume !(0 == (#t~mem59.base + #t~mem59.offset) % 4294967296);havoc #t~mem59.base, #t~mem59.offset; {81101#false} is VALID [2018-11-23 12:46:43,081 INFO L273 TraceCheckUtils]: 95: Hoare triple {81101#false} assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___4~0 := #t~nondet61;havoc #t~nondet61; {81101#false} is VALID [2018-11-23 12:46:43,081 INFO L273 TraceCheckUtils]: 96: Hoare triple {81101#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet62 && #t~nondet62 <= 2147483647;~tmp___5~0 := #t~nondet62;havoc #t~nondet62; {81101#false} is VALID [2018-11-23 12:46:43,081 INFO L273 TraceCheckUtils]: 97: Hoare triple {81101#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 60 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 60 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset;call write~int(0, ~s.base, 64 + ~s.offset, 4); {81101#false} is VALID [2018-11-23 12:46:43,081 INFO L273 TraceCheckUtils]: 98: Hoare triple {81101#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {81101#false} is VALID [2018-11-23 12:46:43,081 INFO L273 TraceCheckUtils]: 99: Hoare triple {81101#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {81101#false} is VALID [2018-11-23 12:46:43,081 INFO L273 TraceCheckUtils]: 100: Hoare triple {81101#false} ~skip~0 := 0; {81101#false} is VALID [2018-11-23 12:46:43,081 INFO L273 TraceCheckUtils]: 101: Hoare triple {81101#false} assume !false; {81101#false} is VALID [2018-11-23 12:46:43,082 INFO L273 TraceCheckUtils]: 102: Hoare triple {81101#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {81101#false} is VALID [2018-11-23 12:46:43,082 INFO L273 TraceCheckUtils]: 103: Hoare triple {81101#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {81101#false} is VALID [2018-11-23 12:46:43,082 INFO L273 TraceCheckUtils]: 104: Hoare triple {81101#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {81101#false} is VALID [2018-11-23 12:46:43,082 INFO L273 TraceCheckUtils]: 105: Hoare triple {81101#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {81101#false} is VALID [2018-11-23 12:46:43,082 INFO L273 TraceCheckUtils]: 106: Hoare triple {81101#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {81101#false} is VALID [2018-11-23 12:46:43,082 INFO L273 TraceCheckUtils]: 107: Hoare triple {81101#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {81101#false} is VALID [2018-11-23 12:46:43,083 INFO L273 TraceCheckUtils]: 108: Hoare triple {81101#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {81101#false} is VALID [2018-11-23 12:46:43,083 INFO L273 TraceCheckUtils]: 109: Hoare triple {81101#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {81101#false} is VALID [2018-11-23 12:46:43,083 INFO L273 TraceCheckUtils]: 110: Hoare triple {81101#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {81101#false} is VALID [2018-11-23 12:46:43,083 INFO L273 TraceCheckUtils]: 111: Hoare triple {81101#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {81101#false} is VALID [2018-11-23 12:46:43,083 INFO L273 TraceCheckUtils]: 112: Hoare triple {81101#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {81101#false} is VALID [2018-11-23 12:46:43,084 INFO L273 TraceCheckUtils]: 113: Hoare triple {81101#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {81101#false} is VALID [2018-11-23 12:46:43,084 INFO L273 TraceCheckUtils]: 114: Hoare triple {81101#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {81101#false} is VALID [2018-11-23 12:46:43,084 INFO L273 TraceCheckUtils]: 115: Hoare triple {81101#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {81101#false} is VALID [2018-11-23 12:46:43,084 INFO L273 TraceCheckUtils]: 116: Hoare triple {81101#false} assume !(4432 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {81101#false} is VALID [2018-11-23 12:46:43,084 INFO L273 TraceCheckUtils]: 117: Hoare triple {81101#false} assume !(4433 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {81101#false} is VALID [2018-11-23 12:46:43,084 INFO L273 TraceCheckUtils]: 118: Hoare triple {81101#false} assume 4448 == #t~mem38;havoc #t~mem38; {81101#false} is VALID [2018-11-23 12:46:43,084 INFO L273 TraceCheckUtils]: 119: Hoare triple {81101#false} assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~ret~0 := #t~nondet77;havoc #t~nondet77; {81101#false} is VALID [2018-11-23 12:46:43,084 INFO L273 TraceCheckUtils]: 120: Hoare triple {81101#false} assume 4 == ~blastFlag~0; {81101#false} is VALID [2018-11-23 12:46:43,085 INFO L273 TraceCheckUtils]: 121: Hoare triple {81101#false} assume !false; {81101#false} is VALID [2018-11-23 12:46:43,091 INFO L134 CoverageAnalysis]: Checked inductivity of 155 backedges. 90 proven. 0 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2018-11-23 12:46:43,091 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:43,091 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:43,092 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 122 [2018-11-23 12:46:43,092 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:43,092 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:43,177 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 89 edges. 89 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:43,177 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:43,178 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:43,178 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:43,178 INFO L87 Difference]: Start difference. First operand 919 states and 1368 transitions. Second operand 4 states. [2018-11-23 12:46:44,945 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:44,946 INFO L93 Difference]: Finished difference Result 1957 states and 2881 transitions. [2018-11-23 12:46:44,946 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:44,946 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 122 [2018-11-23 12:46:44,946 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:44,946 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:44,948 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 410 transitions. [2018-11-23 12:46:44,948 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:44,949 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 410 transitions. [2018-11-23 12:46:44,949 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 410 transitions. [2018-11-23 12:46:45,567 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 410 edges. 410 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:45,615 INFO L225 Difference]: With dead ends: 1957 [2018-11-23 12:46:45,615 INFO L226 Difference]: Without dead ends: 1051 [2018-11-23 12:46:45,616 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:45,617 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1051 states. [2018-11-23 12:46:45,902 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1051 to 919. [2018-11-23 12:46:45,902 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:45,902 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1051 states. Second operand 919 states. [2018-11-23 12:46:45,902 INFO L74 IsIncluded]: Start isIncluded. First operand 1051 states. Second operand 919 states. [2018-11-23 12:46:45,902 INFO L87 Difference]: Start difference. First operand 1051 states. Second operand 919 states. [2018-11-23 12:46:45,937 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:45,937 INFO L93 Difference]: Finished difference Result 1051 states and 1525 transitions. [2018-11-23 12:46:45,938 INFO L276 IsEmpty]: Start isEmpty. Operand 1051 states and 1525 transitions. [2018-11-23 12:46:45,939 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:45,939 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:45,939 INFO L74 IsIncluded]: Start isIncluded. First operand 919 states. Second operand 1051 states. [2018-11-23 12:46:45,939 INFO L87 Difference]: Start difference. First operand 919 states. Second operand 1051 states. [2018-11-23 12:46:45,975 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:45,975 INFO L93 Difference]: Finished difference Result 1051 states and 1525 transitions. [2018-11-23 12:46:45,975 INFO L276 IsEmpty]: Start isEmpty. Operand 1051 states and 1525 transitions. [2018-11-23 12:46:45,976 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:45,977 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:45,977 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:45,977 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:45,977 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 919 states. [2018-11-23 12:46:46,006 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 919 states to 919 states and 1363 transitions. [2018-11-23 12:46:46,006 INFO L78 Accepts]: Start accepts. Automaton has 919 states and 1363 transitions. Word has length 122 [2018-11-23 12:46:46,006 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:46,006 INFO L480 AbstractCegarLoop]: Abstraction has 919 states and 1363 transitions. [2018-11-23 12:46:46,006 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:46,006 INFO L276 IsEmpty]: Start isEmpty. Operand 919 states and 1363 transitions. [2018-11-23 12:46:46,007 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 124 [2018-11-23 12:46:46,008 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:46,008 INFO L402 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 5, 5, 5, 5, 5, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:46,008 INFO L423 AbstractCegarLoop]: === Iteration 31 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:46,008 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:46,008 INFO L82 PathProgramCache]: Analyzing trace with hash 2124457781, now seen corresponding path program 1 times [2018-11-23 12:46:46,008 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:46,009 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:46,009 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:46,009 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:46,010 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:46,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:46,544 INFO L256 TraceCheckUtils]: 0: Hoare triple {86422#true} call ULTIMATE.init(); {86422#true} is VALID [2018-11-23 12:46:46,544 INFO L273 TraceCheckUtils]: 1: Hoare triple {86422#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,544 INFO L273 TraceCheckUtils]: 2: Hoare triple {86422#true} assume true; {86422#true} is VALID [2018-11-23 12:46:46,544 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {86422#true} {86422#true} #542#return; {86422#true} is VALID [2018-11-23 12:46:46,544 INFO L256 TraceCheckUtils]: 4: Hoare triple {86422#true} call #t~ret139 := main(); {86422#true} is VALID [2018-11-23 12:46:46,545 INFO L273 TraceCheckUtils]: 5: Hoare triple {86422#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {86422#true} is VALID [2018-11-23 12:46:46,545 INFO L256 TraceCheckUtils]: 6: Hoare triple {86422#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {86422#true} is VALID [2018-11-23 12:46:46,545 INFO L273 TraceCheckUtils]: 7: Hoare triple {86422#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,545 INFO L273 TraceCheckUtils]: 8: Hoare triple {86422#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {86422#true} is VALID [2018-11-23 12:46:46,545 INFO L273 TraceCheckUtils]: 9: Hoare triple {86422#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {86422#true} is VALID [2018-11-23 12:46:46,545 INFO L273 TraceCheckUtils]: 10: Hoare triple {86422#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {86422#true} is VALID [2018-11-23 12:46:46,545 INFO L273 TraceCheckUtils]: 11: Hoare triple {86422#true} assume !false; {86422#true} is VALID [2018-11-23 12:46:46,545 INFO L273 TraceCheckUtils]: 12: Hoare triple {86422#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,545 INFO L273 TraceCheckUtils]: 13: Hoare triple {86422#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,546 INFO L273 TraceCheckUtils]: 14: Hoare triple {86422#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,546 INFO L273 TraceCheckUtils]: 15: Hoare triple {86422#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,546 INFO L273 TraceCheckUtils]: 16: Hoare triple {86422#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,546 INFO L273 TraceCheckUtils]: 17: Hoare triple {86422#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,546 INFO L273 TraceCheckUtils]: 18: Hoare triple {86422#true} assume 4368 == #t~mem28;havoc #t~mem28; {86422#true} is VALID [2018-11-23 12:46:46,546 INFO L273 TraceCheckUtils]: 19: Hoare triple {86422#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {86422#true} is VALID [2018-11-23 12:46:46,546 INFO L273 TraceCheckUtils]: 20: Hoare triple {86422#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {86422#true} is VALID [2018-11-23 12:46:46,546 INFO L273 TraceCheckUtils]: 21: Hoare triple {86422#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,546 INFO L273 TraceCheckUtils]: 22: Hoare triple {86422#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {86422#true} is VALID [2018-11-23 12:46:46,547 INFO L273 TraceCheckUtils]: 23: Hoare triple {86422#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,547 INFO L273 TraceCheckUtils]: 24: Hoare triple {86422#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {86422#true} is VALID [2018-11-23 12:46:46,547 INFO L273 TraceCheckUtils]: 25: Hoare triple {86422#true} ~skip~0 := 0; {86422#true} is VALID [2018-11-23 12:46:46,547 INFO L273 TraceCheckUtils]: 26: Hoare triple {86422#true} assume !false; {86422#true} is VALID [2018-11-23 12:46:46,547 INFO L273 TraceCheckUtils]: 27: Hoare triple {86422#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,547 INFO L273 TraceCheckUtils]: 28: Hoare triple {86422#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,547 INFO L273 TraceCheckUtils]: 29: Hoare triple {86422#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,547 INFO L273 TraceCheckUtils]: 30: Hoare triple {86422#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,547 INFO L273 TraceCheckUtils]: 31: Hoare triple {86422#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,548 INFO L273 TraceCheckUtils]: 32: Hoare triple {86422#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,548 INFO L273 TraceCheckUtils]: 33: Hoare triple {86422#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,548 INFO L273 TraceCheckUtils]: 34: Hoare triple {86422#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,548 INFO L273 TraceCheckUtils]: 35: Hoare triple {86422#true} assume 4384 == #t~mem30;havoc #t~mem30; {86422#true} is VALID [2018-11-23 12:46:46,548 INFO L273 TraceCheckUtils]: 36: Hoare triple {86422#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {86422#true} is VALID [2018-11-23 12:46:46,548 INFO L273 TraceCheckUtils]: 37: Hoare triple {86422#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {86422#true} is VALID [2018-11-23 12:46:46,548 INFO L273 TraceCheckUtils]: 38: Hoare triple {86422#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,548 INFO L273 TraceCheckUtils]: 39: Hoare triple {86422#true} assume !(0 != #t~mem69);havoc #t~mem69;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,549 INFO L273 TraceCheckUtils]: 40: Hoare triple {86422#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,549 INFO L273 TraceCheckUtils]: 41: Hoare triple {86422#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,549 INFO L273 TraceCheckUtils]: 42: Hoare triple {86422#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {86422#true} is VALID [2018-11-23 12:46:46,549 INFO L273 TraceCheckUtils]: 43: Hoare triple {86422#true} ~skip~0 := 0; {86422#true} is VALID [2018-11-23 12:46:46,549 INFO L273 TraceCheckUtils]: 44: Hoare triple {86422#true} assume !false; {86422#true} is VALID [2018-11-23 12:46:46,549 INFO L273 TraceCheckUtils]: 45: Hoare triple {86422#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,549 INFO L273 TraceCheckUtils]: 46: Hoare triple {86422#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,549 INFO L273 TraceCheckUtils]: 47: Hoare triple {86422#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,549 INFO L273 TraceCheckUtils]: 48: Hoare triple {86422#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,550 INFO L273 TraceCheckUtils]: 49: Hoare triple {86422#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,550 INFO L273 TraceCheckUtils]: 50: Hoare triple {86422#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,550 INFO L273 TraceCheckUtils]: 51: Hoare triple {86422#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,550 INFO L273 TraceCheckUtils]: 52: Hoare triple {86422#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,550 INFO L273 TraceCheckUtils]: 53: Hoare triple {86422#true} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,550 INFO L273 TraceCheckUtils]: 54: Hoare triple {86422#true} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,550 INFO L273 TraceCheckUtils]: 55: Hoare triple {86422#true} assume 4400 == #t~mem32;havoc #t~mem32; {86422#true} is VALID [2018-11-23 12:46:46,550 INFO L273 TraceCheckUtils]: 56: Hoare triple {86422#true} call #t~mem70.base, #t~mem70.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem71.base, #t~mem71.offset := read~$Pointer$(#t~mem70.base, 836 + #t~mem70.offset, 4);call #t~mem72 := read~int(#t~mem71.base, 12 + #t~mem71.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,550 INFO L273 TraceCheckUtils]: 57: Hoare triple {86422#true} assume !(0 != ~bitwiseAnd(#t~mem72, 256) % 4294967296);havoc #t~mem70.base, #t~mem70.offset;havoc #t~mem71.base, #t~mem71.offset;havoc #t~mem72;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; {86422#true} is VALID [2018-11-23 12:46:46,551 INFO L273 TraceCheckUtils]: 58: Hoare triple {86422#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {86422#true} is VALID [2018-11-23 12:46:46,551 INFO L273 TraceCheckUtils]: 59: Hoare triple {86422#true} assume !(~ret~0 <= 0); {86422#true} is VALID [2018-11-23 12:46:46,551 INFO L273 TraceCheckUtils]: 60: Hoare triple {86422#true} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,551 INFO L273 TraceCheckUtils]: 61: Hoare triple {86422#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,551 INFO L273 TraceCheckUtils]: 62: Hoare triple {86422#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {86422#true} is VALID [2018-11-23 12:46:46,551 INFO L273 TraceCheckUtils]: 63: Hoare triple {86422#true} ~skip~0 := 0; {86422#true} is VALID [2018-11-23 12:46:46,551 INFO L273 TraceCheckUtils]: 64: Hoare triple {86422#true} assume !false; {86422#true} is VALID [2018-11-23 12:46:46,551 INFO L273 TraceCheckUtils]: 65: Hoare triple {86422#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,551 INFO L273 TraceCheckUtils]: 66: Hoare triple {86422#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,552 INFO L273 TraceCheckUtils]: 67: Hoare triple {86422#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,552 INFO L273 TraceCheckUtils]: 68: Hoare triple {86422#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,552 INFO L273 TraceCheckUtils]: 69: Hoare triple {86422#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,552 INFO L273 TraceCheckUtils]: 70: Hoare triple {86422#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,552 INFO L273 TraceCheckUtils]: 71: Hoare triple {86422#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,552 INFO L273 TraceCheckUtils]: 72: Hoare triple {86422#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,552 INFO L273 TraceCheckUtils]: 73: Hoare triple {86422#true} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,552 INFO L273 TraceCheckUtils]: 74: Hoare triple {86422#true} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,553 INFO L273 TraceCheckUtils]: 75: Hoare triple {86422#true} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,553 INFO L273 TraceCheckUtils]: 76: Hoare triple {86422#true} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {86422#true} is VALID [2018-11-23 12:46:46,553 INFO L273 TraceCheckUtils]: 77: Hoare triple {86422#true} assume 4416 == #t~mem34;havoc #t~mem34; {86422#true} is VALID [2018-11-23 12:46:46,553 INFO L273 TraceCheckUtils]: 78: Hoare triple {86422#true} assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~ret~0 := #t~nondet74;havoc #t~nondet74; {86422#true} is VALID [2018-11-23 12:46:46,553 INFO L273 TraceCheckUtils]: 79: Hoare triple {86422#true} assume 3 == ~blastFlag~0;~blastFlag~0 := 4; {86422#true} is VALID [2018-11-23 12:46:46,554 INFO L273 TraceCheckUtils]: 80: Hoare triple {86422#true} assume !(~ret~0 <= 0);call write~int(4432, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~tmp___6~0 := #t~nondet75;havoc #t~nondet75; {86424#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:46,555 INFO L273 TraceCheckUtils]: 81: Hoare triple {86424#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(0 == ~tmp___6~0); {86424#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:46,555 INFO L273 TraceCheckUtils]: 82: Hoare triple {86424#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {86424#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:46,557 INFO L273 TraceCheckUtils]: 83: Hoare triple {86424#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {86424#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:46,557 INFO L273 TraceCheckUtils]: 84: Hoare triple {86424#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} ~skip~0 := 0; {86424#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:46,559 INFO L273 TraceCheckUtils]: 85: Hoare triple {86424#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !false; {86424#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:46,559 INFO L273 TraceCheckUtils]: 86: Hoare triple {86424#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {86424#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:46,559 INFO L273 TraceCheckUtils]: 87: Hoare triple {86424#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {86424#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:46,560 INFO L273 TraceCheckUtils]: 88: Hoare triple {86424#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {86424#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:46,560 INFO L273 TraceCheckUtils]: 89: Hoare triple {86424#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {86425#(= |ssl3_connect_#t~mem26| 4432)} is VALID [2018-11-23 12:46:46,560 INFO L273 TraceCheckUtils]: 90: Hoare triple {86425#(= |ssl3_connect_#t~mem26| 4432)} assume 20480 == #t~mem26;havoc #t~mem26; {86423#false} is VALID [2018-11-23 12:46:46,561 INFO L273 TraceCheckUtils]: 91: Hoare triple {86423#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {86423#false} is VALID [2018-11-23 12:46:46,561 INFO L273 TraceCheckUtils]: 92: Hoare triple {86423#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {86423#false} is VALID [2018-11-23 12:46:46,561 INFO L273 TraceCheckUtils]: 93: Hoare triple {86423#false} call #t~mem58 := read~int(~s.base, ~s.offset, 4); {86423#false} is VALID [2018-11-23 12:46:46,561 INFO L273 TraceCheckUtils]: 94: Hoare triple {86423#false} assume !(768 != ~bitwiseAnd(#t~mem58, 65280));havoc #t~mem58;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem59.base, #t~mem59.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {86423#false} is VALID [2018-11-23 12:46:46,561 INFO L273 TraceCheckUtils]: 95: Hoare triple {86423#false} assume !(0 == (#t~mem59.base + #t~mem59.offset) % 4294967296);havoc #t~mem59.base, #t~mem59.offset; {86423#false} is VALID [2018-11-23 12:46:46,562 INFO L273 TraceCheckUtils]: 96: Hoare triple {86423#false} assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___4~0 := #t~nondet61;havoc #t~nondet61; {86423#false} is VALID [2018-11-23 12:46:46,562 INFO L273 TraceCheckUtils]: 97: Hoare triple {86423#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet62 && #t~nondet62 <= 2147483647;~tmp___5~0 := #t~nondet62;havoc #t~nondet62; {86423#false} is VALID [2018-11-23 12:46:46,562 INFO L273 TraceCheckUtils]: 98: Hoare triple {86423#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 60 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 60 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset;call write~int(0, ~s.base, 64 + ~s.offset, 4); {86423#false} is VALID [2018-11-23 12:46:46,562 INFO L273 TraceCheckUtils]: 99: Hoare triple {86423#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {86423#false} is VALID [2018-11-23 12:46:46,562 INFO L273 TraceCheckUtils]: 100: Hoare triple {86423#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {86423#false} is VALID [2018-11-23 12:46:46,562 INFO L273 TraceCheckUtils]: 101: Hoare triple {86423#false} ~skip~0 := 0; {86423#false} is VALID [2018-11-23 12:46:46,563 INFO L273 TraceCheckUtils]: 102: Hoare triple {86423#false} assume !false; {86423#false} is VALID [2018-11-23 12:46:46,563 INFO L273 TraceCheckUtils]: 103: Hoare triple {86423#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {86423#false} is VALID [2018-11-23 12:46:46,563 INFO L273 TraceCheckUtils]: 104: Hoare triple {86423#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {86423#false} is VALID [2018-11-23 12:46:46,563 INFO L273 TraceCheckUtils]: 105: Hoare triple {86423#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {86423#false} is VALID [2018-11-23 12:46:46,563 INFO L273 TraceCheckUtils]: 106: Hoare triple {86423#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {86423#false} is VALID [2018-11-23 12:46:46,564 INFO L273 TraceCheckUtils]: 107: Hoare triple {86423#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {86423#false} is VALID [2018-11-23 12:46:46,564 INFO L273 TraceCheckUtils]: 108: Hoare triple {86423#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {86423#false} is VALID [2018-11-23 12:46:46,564 INFO L273 TraceCheckUtils]: 109: Hoare triple {86423#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {86423#false} is VALID [2018-11-23 12:46:46,564 INFO L273 TraceCheckUtils]: 110: Hoare triple {86423#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {86423#false} is VALID [2018-11-23 12:46:46,564 INFO L273 TraceCheckUtils]: 111: Hoare triple {86423#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {86423#false} is VALID [2018-11-23 12:46:46,564 INFO L273 TraceCheckUtils]: 112: Hoare triple {86423#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {86423#false} is VALID [2018-11-23 12:46:46,565 INFO L273 TraceCheckUtils]: 113: Hoare triple {86423#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {86423#false} is VALID [2018-11-23 12:46:46,565 INFO L273 TraceCheckUtils]: 114: Hoare triple {86423#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {86423#false} is VALID [2018-11-23 12:46:46,565 INFO L273 TraceCheckUtils]: 115: Hoare triple {86423#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {86423#false} is VALID [2018-11-23 12:46:46,565 INFO L273 TraceCheckUtils]: 116: Hoare triple {86423#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {86423#false} is VALID [2018-11-23 12:46:46,565 INFO L273 TraceCheckUtils]: 117: Hoare triple {86423#false} assume !(4432 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {86423#false} is VALID [2018-11-23 12:46:46,565 INFO L273 TraceCheckUtils]: 118: Hoare triple {86423#false} assume !(4433 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {86423#false} is VALID [2018-11-23 12:46:46,565 INFO L273 TraceCheckUtils]: 119: Hoare triple {86423#false} assume 4448 == #t~mem38;havoc #t~mem38; {86423#false} is VALID [2018-11-23 12:46:46,565 INFO L273 TraceCheckUtils]: 120: Hoare triple {86423#false} assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~ret~0 := #t~nondet77;havoc #t~nondet77; {86423#false} is VALID [2018-11-23 12:46:46,565 INFO L273 TraceCheckUtils]: 121: Hoare triple {86423#false} assume 4 == ~blastFlag~0; {86423#false} is VALID [2018-11-23 12:46:46,566 INFO L273 TraceCheckUtils]: 122: Hoare triple {86423#false} assume !false; {86423#false} is VALID [2018-11-23 12:46:46,572 INFO L134 CoverageAnalysis]: Checked inductivity of 160 backedges. 95 proven. 0 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2018-11-23 12:46:46,573 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:46,573 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:46,573 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 123 [2018-11-23 12:46:46,573 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:46,573 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:46,663 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 90 edges. 90 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:46,663 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:46,663 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:46,663 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:46,664 INFO L87 Difference]: Start difference. First operand 919 states and 1363 transitions. Second operand 4 states. [2018-11-23 12:46:48,206 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:48,206 INFO L93 Difference]: Finished difference Result 1957 states and 2871 transitions. [2018-11-23 12:46:48,206 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:48,206 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 123 [2018-11-23 12:46:48,207 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:48,207 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:48,208 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 409 transitions. [2018-11-23 12:46:48,208 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:48,209 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 409 transitions. [2018-11-23 12:46:48,209 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 409 transitions. [2018-11-23 12:46:48,637 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 409 edges. 409 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:48,684 INFO L225 Difference]: With dead ends: 1957 [2018-11-23 12:46:48,684 INFO L226 Difference]: Without dead ends: 1051 [2018-11-23 12:46:48,685 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:48,686 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1051 states. [2018-11-23 12:46:49,023 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1051 to 919. [2018-11-23 12:46:49,023 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:49,024 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1051 states. Second operand 919 states. [2018-11-23 12:46:49,024 INFO L74 IsIncluded]: Start isIncluded. First operand 1051 states. Second operand 919 states. [2018-11-23 12:46:49,024 INFO L87 Difference]: Start difference. First operand 1051 states. Second operand 919 states. [2018-11-23 12:46:49,062 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:49,062 INFO L93 Difference]: Finished difference Result 1051 states and 1520 transitions. [2018-11-23 12:46:49,062 INFO L276 IsEmpty]: Start isEmpty. Operand 1051 states and 1520 transitions. [2018-11-23 12:46:49,063 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:49,063 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:49,063 INFO L74 IsIncluded]: Start isIncluded. First operand 919 states. Second operand 1051 states. [2018-11-23 12:46:49,063 INFO L87 Difference]: Start difference. First operand 919 states. Second operand 1051 states. [2018-11-23 12:46:49,099 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:49,100 INFO L93 Difference]: Finished difference Result 1051 states and 1520 transitions. [2018-11-23 12:46:49,100 INFO L276 IsEmpty]: Start isEmpty. Operand 1051 states and 1520 transitions. [2018-11-23 12:46:49,101 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:49,101 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:49,101 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:49,101 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:49,101 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 919 states. [2018-11-23 12:46:49,132 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 919 states to 919 states and 1358 transitions. [2018-11-23 12:46:49,132 INFO L78 Accepts]: Start accepts. Automaton has 919 states and 1358 transitions. Word has length 123 [2018-11-23 12:46:49,132 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:49,132 INFO L480 AbstractCegarLoop]: Abstraction has 919 states and 1358 transitions. [2018-11-23 12:46:49,132 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:49,132 INFO L276 IsEmpty]: Start isEmpty. Operand 919 states and 1358 transitions. [2018-11-23 12:46:49,134 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2018-11-23 12:46:49,134 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:49,134 INFO L402 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 5, 5, 5, 5, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:49,135 INFO L423 AbstractCegarLoop]: === Iteration 32 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:49,135 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:49,135 INFO L82 PathProgramCache]: Analyzing trace with hash 805588424, now seen corresponding path program 1 times [2018-11-23 12:46:49,135 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:49,135 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:49,136 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:49,136 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:49,136 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:49,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:49,415 INFO L256 TraceCheckUtils]: 0: Hoare triple {91744#true} call ULTIMATE.init(); {91744#true} is VALID [2018-11-23 12:46:49,416 INFO L273 TraceCheckUtils]: 1: Hoare triple {91744#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,416 INFO L273 TraceCheckUtils]: 2: Hoare triple {91744#true} assume true; {91744#true} is VALID [2018-11-23 12:46:49,416 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {91744#true} {91744#true} #542#return; {91744#true} is VALID [2018-11-23 12:46:49,416 INFO L256 TraceCheckUtils]: 4: Hoare triple {91744#true} call #t~ret139 := main(); {91744#true} is VALID [2018-11-23 12:46:49,416 INFO L273 TraceCheckUtils]: 5: Hoare triple {91744#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {91744#true} is VALID [2018-11-23 12:46:49,417 INFO L256 TraceCheckUtils]: 6: Hoare triple {91744#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {91744#true} is VALID [2018-11-23 12:46:49,417 INFO L273 TraceCheckUtils]: 7: Hoare triple {91744#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,417 INFO L273 TraceCheckUtils]: 8: Hoare triple {91744#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {91744#true} is VALID [2018-11-23 12:46:49,417 INFO L273 TraceCheckUtils]: 9: Hoare triple {91744#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {91744#true} is VALID [2018-11-23 12:46:49,417 INFO L273 TraceCheckUtils]: 10: Hoare triple {91744#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {91744#true} is VALID [2018-11-23 12:46:49,418 INFO L273 TraceCheckUtils]: 11: Hoare triple {91744#true} assume !false; {91744#true} is VALID [2018-11-23 12:46:49,418 INFO L273 TraceCheckUtils]: 12: Hoare triple {91744#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,418 INFO L273 TraceCheckUtils]: 13: Hoare triple {91744#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,418 INFO L273 TraceCheckUtils]: 14: Hoare triple {91744#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,418 INFO L273 TraceCheckUtils]: 15: Hoare triple {91744#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,418 INFO L273 TraceCheckUtils]: 16: Hoare triple {91744#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,418 INFO L273 TraceCheckUtils]: 17: Hoare triple {91744#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,418 INFO L273 TraceCheckUtils]: 18: Hoare triple {91744#true} assume 4368 == #t~mem28;havoc #t~mem28; {91744#true} is VALID [2018-11-23 12:46:49,419 INFO L273 TraceCheckUtils]: 19: Hoare triple {91744#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {91744#true} is VALID [2018-11-23 12:46:49,419 INFO L273 TraceCheckUtils]: 20: Hoare triple {91744#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {91744#true} is VALID [2018-11-23 12:46:49,419 INFO L273 TraceCheckUtils]: 21: Hoare triple {91744#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,419 INFO L273 TraceCheckUtils]: 22: Hoare triple {91744#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {91744#true} is VALID [2018-11-23 12:46:49,419 INFO L273 TraceCheckUtils]: 23: Hoare triple {91744#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,419 INFO L273 TraceCheckUtils]: 24: Hoare triple {91744#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {91744#true} is VALID [2018-11-23 12:46:49,419 INFO L273 TraceCheckUtils]: 25: Hoare triple {91744#true} ~skip~0 := 0; {91744#true} is VALID [2018-11-23 12:46:49,419 INFO L273 TraceCheckUtils]: 26: Hoare triple {91744#true} assume !false; {91744#true} is VALID [2018-11-23 12:46:49,419 INFO L273 TraceCheckUtils]: 27: Hoare triple {91744#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,420 INFO L273 TraceCheckUtils]: 28: Hoare triple {91744#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,420 INFO L273 TraceCheckUtils]: 29: Hoare triple {91744#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,420 INFO L273 TraceCheckUtils]: 30: Hoare triple {91744#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,420 INFO L273 TraceCheckUtils]: 31: Hoare triple {91744#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,420 INFO L273 TraceCheckUtils]: 32: Hoare triple {91744#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,420 INFO L273 TraceCheckUtils]: 33: Hoare triple {91744#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,420 INFO L273 TraceCheckUtils]: 34: Hoare triple {91744#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,420 INFO L273 TraceCheckUtils]: 35: Hoare triple {91744#true} assume 4384 == #t~mem30;havoc #t~mem30; {91744#true} is VALID [2018-11-23 12:46:49,420 INFO L273 TraceCheckUtils]: 36: Hoare triple {91744#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {91744#true} is VALID [2018-11-23 12:46:49,421 INFO L273 TraceCheckUtils]: 37: Hoare triple {91744#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {91744#true} is VALID [2018-11-23 12:46:49,421 INFO L273 TraceCheckUtils]: 38: Hoare triple {91744#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,421 INFO L273 TraceCheckUtils]: 39: Hoare triple {91744#true} assume !(0 != #t~mem69);havoc #t~mem69;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,421 INFO L273 TraceCheckUtils]: 40: Hoare triple {91744#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,421 INFO L273 TraceCheckUtils]: 41: Hoare triple {91744#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,421 INFO L273 TraceCheckUtils]: 42: Hoare triple {91744#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {91744#true} is VALID [2018-11-23 12:46:49,421 INFO L273 TraceCheckUtils]: 43: Hoare triple {91744#true} ~skip~0 := 0; {91744#true} is VALID [2018-11-23 12:46:49,421 INFO L273 TraceCheckUtils]: 44: Hoare triple {91744#true} assume !false; {91744#true} is VALID [2018-11-23 12:46:49,421 INFO L273 TraceCheckUtils]: 45: Hoare triple {91744#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,422 INFO L273 TraceCheckUtils]: 46: Hoare triple {91744#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,422 INFO L273 TraceCheckUtils]: 47: Hoare triple {91744#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,422 INFO L273 TraceCheckUtils]: 48: Hoare triple {91744#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,422 INFO L273 TraceCheckUtils]: 49: Hoare triple {91744#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,422 INFO L273 TraceCheckUtils]: 50: Hoare triple {91744#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,422 INFO L273 TraceCheckUtils]: 51: Hoare triple {91744#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,422 INFO L273 TraceCheckUtils]: 52: Hoare triple {91744#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,422 INFO L273 TraceCheckUtils]: 53: Hoare triple {91744#true} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,423 INFO L273 TraceCheckUtils]: 54: Hoare triple {91744#true} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,423 INFO L273 TraceCheckUtils]: 55: Hoare triple {91744#true} assume 4400 == #t~mem32;havoc #t~mem32; {91744#true} is VALID [2018-11-23 12:46:49,423 INFO L273 TraceCheckUtils]: 56: Hoare triple {91744#true} call #t~mem70.base, #t~mem70.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem71.base, #t~mem71.offset := read~$Pointer$(#t~mem70.base, 836 + #t~mem70.offset, 4);call #t~mem72 := read~int(#t~mem71.base, 12 + #t~mem71.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,423 INFO L273 TraceCheckUtils]: 57: Hoare triple {91744#true} assume !(0 != ~bitwiseAnd(#t~mem72, 256) % 4294967296);havoc #t~mem70.base, #t~mem70.offset;havoc #t~mem71.base, #t~mem71.offset;havoc #t~mem72;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; {91744#true} is VALID [2018-11-23 12:46:49,423 INFO L273 TraceCheckUtils]: 58: Hoare triple {91744#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {91744#true} is VALID [2018-11-23 12:46:49,423 INFO L273 TraceCheckUtils]: 59: Hoare triple {91744#true} assume !(~ret~0 <= 0); {91744#true} is VALID [2018-11-23 12:46:49,423 INFO L273 TraceCheckUtils]: 60: Hoare triple {91744#true} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,423 INFO L273 TraceCheckUtils]: 61: Hoare triple {91744#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,423 INFO L273 TraceCheckUtils]: 62: Hoare triple {91744#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {91744#true} is VALID [2018-11-23 12:46:49,424 INFO L273 TraceCheckUtils]: 63: Hoare triple {91744#true} ~skip~0 := 0; {91744#true} is VALID [2018-11-23 12:46:49,424 INFO L273 TraceCheckUtils]: 64: Hoare triple {91744#true} assume !false; {91744#true} is VALID [2018-11-23 12:46:49,424 INFO L273 TraceCheckUtils]: 65: Hoare triple {91744#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,424 INFO L273 TraceCheckUtils]: 66: Hoare triple {91744#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,424 INFO L273 TraceCheckUtils]: 67: Hoare triple {91744#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,424 INFO L273 TraceCheckUtils]: 68: Hoare triple {91744#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,424 INFO L273 TraceCheckUtils]: 69: Hoare triple {91744#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,424 INFO L273 TraceCheckUtils]: 70: Hoare triple {91744#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,424 INFO L273 TraceCheckUtils]: 71: Hoare triple {91744#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,425 INFO L273 TraceCheckUtils]: 72: Hoare triple {91744#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,425 INFO L273 TraceCheckUtils]: 73: Hoare triple {91744#true} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,425 INFO L273 TraceCheckUtils]: 74: Hoare triple {91744#true} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,425 INFO L273 TraceCheckUtils]: 75: Hoare triple {91744#true} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,425 INFO L273 TraceCheckUtils]: 76: Hoare triple {91744#true} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {91744#true} is VALID [2018-11-23 12:46:49,425 INFO L273 TraceCheckUtils]: 77: Hoare triple {91744#true} assume 4416 == #t~mem34;havoc #t~mem34; {91744#true} is VALID [2018-11-23 12:46:49,425 INFO L273 TraceCheckUtils]: 78: Hoare triple {91744#true} assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~ret~0 := #t~nondet74;havoc #t~nondet74; {91744#true} is VALID [2018-11-23 12:46:49,425 INFO L273 TraceCheckUtils]: 79: Hoare triple {91744#true} assume 3 == ~blastFlag~0;~blastFlag~0 := 4; {91744#true} is VALID [2018-11-23 12:46:49,430 INFO L273 TraceCheckUtils]: 80: Hoare triple {91744#true} assume !(~ret~0 <= 0);call write~int(4432, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~tmp___6~0 := #t~nondet75;havoc #t~nondet75; {91746#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:49,431 INFO L273 TraceCheckUtils]: 81: Hoare triple {91746#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(0 == ~tmp___6~0); {91746#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:49,433 INFO L273 TraceCheckUtils]: 82: Hoare triple {91746#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {91746#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:49,433 INFO L273 TraceCheckUtils]: 83: Hoare triple {91746#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {91746#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:49,433 INFO L273 TraceCheckUtils]: 84: Hoare triple {91746#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} ~skip~0 := 0; {91746#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:49,434 INFO L273 TraceCheckUtils]: 85: Hoare triple {91746#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !false; {91746#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:49,434 INFO L273 TraceCheckUtils]: 86: Hoare triple {91746#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {91746#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:49,434 INFO L273 TraceCheckUtils]: 87: Hoare triple {91746#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {91746#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:49,435 INFO L273 TraceCheckUtils]: 88: Hoare triple {91746#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {91746#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:49,435 INFO L273 TraceCheckUtils]: 89: Hoare triple {91746#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {91746#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 12:46:49,435 INFO L273 TraceCheckUtils]: 90: Hoare triple {91746#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {91747#(= |ssl3_connect_#t~mem27| 4432)} is VALID [2018-11-23 12:46:49,436 INFO L273 TraceCheckUtils]: 91: Hoare triple {91747#(= |ssl3_connect_#t~mem27| 4432)} assume 4099 == #t~mem27;havoc #t~mem27; {91745#false} is VALID [2018-11-23 12:46:49,436 INFO L273 TraceCheckUtils]: 92: Hoare triple {91745#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {91745#false} is VALID [2018-11-23 12:46:49,436 INFO L273 TraceCheckUtils]: 93: Hoare triple {91745#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {91745#false} is VALID [2018-11-23 12:46:49,436 INFO L273 TraceCheckUtils]: 94: Hoare triple {91745#false} call #t~mem58 := read~int(~s.base, ~s.offset, 4); {91745#false} is VALID [2018-11-23 12:46:49,436 INFO L273 TraceCheckUtils]: 95: Hoare triple {91745#false} assume !(768 != ~bitwiseAnd(#t~mem58, 65280));havoc #t~mem58;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem59.base, #t~mem59.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {91745#false} is VALID [2018-11-23 12:46:49,437 INFO L273 TraceCheckUtils]: 96: Hoare triple {91745#false} assume !(0 == (#t~mem59.base + #t~mem59.offset) % 4294967296);havoc #t~mem59.base, #t~mem59.offset; {91745#false} is VALID [2018-11-23 12:46:49,437 INFO L273 TraceCheckUtils]: 97: Hoare triple {91745#false} assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___4~0 := #t~nondet61;havoc #t~nondet61; {91745#false} is VALID [2018-11-23 12:46:49,437 INFO L273 TraceCheckUtils]: 98: Hoare triple {91745#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet62 && #t~nondet62 <= 2147483647;~tmp___5~0 := #t~nondet62;havoc #t~nondet62; {91745#false} is VALID [2018-11-23 12:46:49,437 INFO L273 TraceCheckUtils]: 99: Hoare triple {91745#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 60 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 60 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset;call write~int(0, ~s.base, 64 + ~s.offset, 4); {91745#false} is VALID [2018-11-23 12:46:49,437 INFO L273 TraceCheckUtils]: 100: Hoare triple {91745#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {91745#false} is VALID [2018-11-23 12:46:49,437 INFO L273 TraceCheckUtils]: 101: Hoare triple {91745#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {91745#false} is VALID [2018-11-23 12:46:49,438 INFO L273 TraceCheckUtils]: 102: Hoare triple {91745#false} ~skip~0 := 0; {91745#false} is VALID [2018-11-23 12:46:49,438 INFO L273 TraceCheckUtils]: 103: Hoare triple {91745#false} assume !false; {91745#false} is VALID [2018-11-23 12:46:49,438 INFO L273 TraceCheckUtils]: 104: Hoare triple {91745#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {91745#false} is VALID [2018-11-23 12:46:49,438 INFO L273 TraceCheckUtils]: 105: Hoare triple {91745#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {91745#false} is VALID [2018-11-23 12:46:49,438 INFO L273 TraceCheckUtils]: 106: Hoare triple {91745#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {91745#false} is VALID [2018-11-23 12:46:49,439 INFO L273 TraceCheckUtils]: 107: Hoare triple {91745#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {91745#false} is VALID [2018-11-23 12:46:49,439 INFO L273 TraceCheckUtils]: 108: Hoare triple {91745#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {91745#false} is VALID [2018-11-23 12:46:49,439 INFO L273 TraceCheckUtils]: 109: Hoare triple {91745#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {91745#false} is VALID [2018-11-23 12:46:49,439 INFO L273 TraceCheckUtils]: 110: Hoare triple {91745#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {91745#false} is VALID [2018-11-23 12:46:49,439 INFO L273 TraceCheckUtils]: 111: Hoare triple {91745#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {91745#false} is VALID [2018-11-23 12:46:49,439 INFO L273 TraceCheckUtils]: 112: Hoare triple {91745#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {91745#false} is VALID [2018-11-23 12:46:49,440 INFO L273 TraceCheckUtils]: 113: Hoare triple {91745#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {91745#false} is VALID [2018-11-23 12:46:49,440 INFO L273 TraceCheckUtils]: 114: Hoare triple {91745#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {91745#false} is VALID [2018-11-23 12:46:49,440 INFO L273 TraceCheckUtils]: 115: Hoare triple {91745#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {91745#false} is VALID [2018-11-23 12:46:49,440 INFO L273 TraceCheckUtils]: 116: Hoare triple {91745#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {91745#false} is VALID [2018-11-23 12:46:49,440 INFO L273 TraceCheckUtils]: 117: Hoare triple {91745#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {91745#false} is VALID [2018-11-23 12:46:49,441 INFO L273 TraceCheckUtils]: 118: Hoare triple {91745#false} assume !(4432 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {91745#false} is VALID [2018-11-23 12:46:49,441 INFO L273 TraceCheckUtils]: 119: Hoare triple {91745#false} assume !(4433 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {91745#false} is VALID [2018-11-23 12:46:49,441 INFO L273 TraceCheckUtils]: 120: Hoare triple {91745#false} assume 4448 == #t~mem38;havoc #t~mem38; {91745#false} is VALID [2018-11-23 12:46:49,441 INFO L273 TraceCheckUtils]: 121: Hoare triple {91745#false} assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~ret~0 := #t~nondet77;havoc #t~nondet77; {91745#false} is VALID [2018-11-23 12:46:49,441 INFO L273 TraceCheckUtils]: 122: Hoare triple {91745#false} assume 4 == ~blastFlag~0; {91745#false} is VALID [2018-11-23 12:46:49,441 INFO L273 TraceCheckUtils]: 123: Hoare triple {91745#false} assume !false; {91745#false} is VALID [2018-11-23 12:46:49,450 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 100 proven. 0 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2018-11-23 12:46:49,450 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:49,451 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:49,451 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 124 [2018-11-23 12:46:49,451 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:49,452 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:49,567 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 91 edges. 91 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:49,567 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:49,568 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:49,568 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:49,568 INFO L87 Difference]: Start difference. First operand 919 states and 1358 transitions. Second operand 4 states. [2018-11-23 12:46:51,241 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:51,241 INFO L93 Difference]: Finished difference Result 1912 states and 2806 transitions. [2018-11-23 12:46:51,241 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:51,241 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 124 [2018-11-23 12:46:51,241 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:51,241 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:51,243 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 397 transitions. [2018-11-23 12:46:51,244 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:51,245 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 397 transitions. [2018-11-23 12:46:51,246 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 397 transitions. [2018-11-23 12:46:51,649 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 397 edges. 397 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:51,693 INFO L225 Difference]: With dead ends: 1912 [2018-11-23 12:46:51,693 INFO L226 Difference]: Without dead ends: 1006 [2018-11-23 12:46:51,694 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:51,695 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1006 states. [2018-11-23 12:46:52,179 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1006 to 919. [2018-11-23 12:46:52,180 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:52,180 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1006 states. Second operand 919 states. [2018-11-23 12:46:52,180 INFO L74 IsIncluded]: Start isIncluded. First operand 1006 states. Second operand 919 states. [2018-11-23 12:46:52,180 INFO L87 Difference]: Start difference. First operand 1006 states. Second operand 919 states. [2018-11-23 12:46:52,218 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:52,219 INFO L93 Difference]: Finished difference Result 1006 states and 1460 transitions. [2018-11-23 12:46:52,219 INFO L276 IsEmpty]: Start isEmpty. Operand 1006 states and 1460 transitions. [2018-11-23 12:46:52,220 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:52,220 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:52,220 INFO L74 IsIncluded]: Start isIncluded. First operand 919 states. Second operand 1006 states. [2018-11-23 12:46:52,220 INFO L87 Difference]: Start difference. First operand 919 states. Second operand 1006 states. [2018-11-23 12:46:52,251 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:52,252 INFO L93 Difference]: Finished difference Result 1006 states and 1460 transitions. [2018-11-23 12:46:52,252 INFO L276 IsEmpty]: Start isEmpty. Operand 1006 states and 1460 transitions. [2018-11-23 12:46:52,253 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:52,253 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:52,253 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:52,253 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:52,253 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 919 states. [2018-11-23 12:46:52,283 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 919 states to 919 states and 1353 transitions. [2018-11-23 12:46:52,283 INFO L78 Accepts]: Start accepts. Automaton has 919 states and 1353 transitions. Word has length 124 [2018-11-23 12:46:52,283 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:52,283 INFO L480 AbstractCegarLoop]: Abstraction has 919 states and 1353 transitions. [2018-11-23 12:46:52,283 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:52,283 INFO L276 IsEmpty]: Start isEmpty. Operand 919 states and 1353 transitions. [2018-11-23 12:46:52,284 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2018-11-23 12:46:52,284 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:52,285 INFO L402 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 5, 5, 5, 5, 5, 4, 4, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:52,285 INFO L423 AbstractCegarLoop]: === Iteration 33 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:52,285 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:52,285 INFO L82 PathProgramCache]: Analyzing trace with hash -1158112039, now seen corresponding path program 1 times [2018-11-23 12:46:52,285 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:52,285 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:52,286 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:52,286 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:52,286 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:52,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:52,443 INFO L256 TraceCheckUtils]: 0: Hoare triple {96926#true} call ULTIMATE.init(); {96926#true} is VALID [2018-11-23 12:46:52,444 INFO L273 TraceCheckUtils]: 1: Hoare triple {96926#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,444 INFO L273 TraceCheckUtils]: 2: Hoare triple {96926#true} assume true; {96926#true} is VALID [2018-11-23 12:46:52,444 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {96926#true} {96926#true} #542#return; {96926#true} is VALID [2018-11-23 12:46:52,444 INFO L256 TraceCheckUtils]: 4: Hoare triple {96926#true} call #t~ret139 := main(); {96926#true} is VALID [2018-11-23 12:46:52,445 INFO L273 TraceCheckUtils]: 5: Hoare triple {96926#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {96926#true} is VALID [2018-11-23 12:46:52,445 INFO L256 TraceCheckUtils]: 6: Hoare triple {96926#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {96926#true} is VALID [2018-11-23 12:46:52,445 INFO L273 TraceCheckUtils]: 7: Hoare triple {96926#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,445 INFO L273 TraceCheckUtils]: 8: Hoare triple {96926#true} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {96926#true} is VALID [2018-11-23 12:46:52,445 INFO L273 TraceCheckUtils]: 9: Hoare triple {96926#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {96926#true} is VALID [2018-11-23 12:46:52,446 INFO L273 TraceCheckUtils]: 10: Hoare triple {96926#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {96926#true} is VALID [2018-11-23 12:46:52,446 INFO L273 TraceCheckUtils]: 11: Hoare triple {96926#true} assume !false; {96926#true} is VALID [2018-11-23 12:46:52,446 INFO L273 TraceCheckUtils]: 12: Hoare triple {96926#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,446 INFO L273 TraceCheckUtils]: 13: Hoare triple {96926#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,446 INFO L273 TraceCheckUtils]: 14: Hoare triple {96926#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,446 INFO L273 TraceCheckUtils]: 15: Hoare triple {96926#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,446 INFO L273 TraceCheckUtils]: 16: Hoare triple {96926#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,446 INFO L273 TraceCheckUtils]: 17: Hoare triple {96926#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,446 INFO L273 TraceCheckUtils]: 18: Hoare triple {96926#true} assume 4368 == #t~mem28;havoc #t~mem28; {96926#true} is VALID [2018-11-23 12:46:52,447 INFO L273 TraceCheckUtils]: 19: Hoare triple {96926#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {96926#true} is VALID [2018-11-23 12:46:52,447 INFO L273 TraceCheckUtils]: 20: Hoare triple {96926#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {96926#true} is VALID [2018-11-23 12:46:52,447 INFO L273 TraceCheckUtils]: 21: Hoare triple {96926#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,447 INFO L273 TraceCheckUtils]: 22: Hoare triple {96926#true} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {96926#true} is VALID [2018-11-23 12:46:52,447 INFO L273 TraceCheckUtils]: 23: Hoare triple {96926#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,447 INFO L273 TraceCheckUtils]: 24: Hoare triple {96926#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {96926#true} is VALID [2018-11-23 12:46:52,447 INFO L273 TraceCheckUtils]: 25: Hoare triple {96926#true} ~skip~0 := 0; {96926#true} is VALID [2018-11-23 12:46:52,447 INFO L273 TraceCheckUtils]: 26: Hoare triple {96926#true} assume !false; {96926#true} is VALID [2018-11-23 12:46:52,447 INFO L273 TraceCheckUtils]: 27: Hoare triple {96926#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,448 INFO L273 TraceCheckUtils]: 28: Hoare triple {96926#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,448 INFO L273 TraceCheckUtils]: 29: Hoare triple {96926#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,448 INFO L273 TraceCheckUtils]: 30: Hoare triple {96926#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,448 INFO L273 TraceCheckUtils]: 31: Hoare triple {96926#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,448 INFO L273 TraceCheckUtils]: 32: Hoare triple {96926#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,448 INFO L273 TraceCheckUtils]: 33: Hoare triple {96926#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,448 INFO L273 TraceCheckUtils]: 34: Hoare triple {96926#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,448 INFO L273 TraceCheckUtils]: 35: Hoare triple {96926#true} assume 4384 == #t~mem30;havoc #t~mem30; {96926#true} is VALID [2018-11-23 12:46:52,448 INFO L273 TraceCheckUtils]: 36: Hoare triple {96926#true} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {96926#true} is VALID [2018-11-23 12:46:52,449 INFO L273 TraceCheckUtils]: 37: Hoare triple {96926#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {96926#true} is VALID [2018-11-23 12:46:52,449 INFO L273 TraceCheckUtils]: 38: Hoare triple {96926#true} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,449 INFO L273 TraceCheckUtils]: 39: Hoare triple {96926#true} assume !(0 != #t~mem69);havoc #t~mem69;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,449 INFO L273 TraceCheckUtils]: 40: Hoare triple {96926#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,449 INFO L273 TraceCheckUtils]: 41: Hoare triple {96926#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,449 INFO L273 TraceCheckUtils]: 42: Hoare triple {96926#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {96926#true} is VALID [2018-11-23 12:46:52,449 INFO L273 TraceCheckUtils]: 43: Hoare triple {96926#true} ~skip~0 := 0; {96926#true} is VALID [2018-11-23 12:46:52,449 INFO L273 TraceCheckUtils]: 44: Hoare triple {96926#true} assume !false; {96926#true} is VALID [2018-11-23 12:46:52,449 INFO L273 TraceCheckUtils]: 45: Hoare triple {96926#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,450 INFO L273 TraceCheckUtils]: 46: Hoare triple {96926#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,450 INFO L273 TraceCheckUtils]: 47: Hoare triple {96926#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,450 INFO L273 TraceCheckUtils]: 48: Hoare triple {96926#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,450 INFO L273 TraceCheckUtils]: 49: Hoare triple {96926#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,450 INFO L273 TraceCheckUtils]: 50: Hoare triple {96926#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,450 INFO L273 TraceCheckUtils]: 51: Hoare triple {96926#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,450 INFO L273 TraceCheckUtils]: 52: Hoare triple {96926#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,450 INFO L273 TraceCheckUtils]: 53: Hoare triple {96926#true} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,450 INFO L273 TraceCheckUtils]: 54: Hoare triple {96926#true} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,451 INFO L273 TraceCheckUtils]: 55: Hoare triple {96926#true} assume 4400 == #t~mem32;havoc #t~mem32; {96926#true} is VALID [2018-11-23 12:46:52,451 INFO L273 TraceCheckUtils]: 56: Hoare triple {96926#true} call #t~mem70.base, #t~mem70.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem71.base, #t~mem71.offset := read~$Pointer$(#t~mem70.base, 836 + #t~mem70.offset, 4);call #t~mem72 := read~int(#t~mem71.base, 12 + #t~mem71.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,451 INFO L273 TraceCheckUtils]: 57: Hoare triple {96926#true} assume !(0 != ~bitwiseAnd(#t~mem72, 256) % 4294967296);havoc #t~mem70.base, #t~mem70.offset;havoc #t~mem71.base, #t~mem71.offset;havoc #t~mem72;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; {96926#true} is VALID [2018-11-23 12:46:52,451 INFO L273 TraceCheckUtils]: 58: Hoare triple {96926#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {96926#true} is VALID [2018-11-23 12:46:52,451 INFO L273 TraceCheckUtils]: 59: Hoare triple {96926#true} assume !(~ret~0 <= 0); {96926#true} is VALID [2018-11-23 12:46:52,451 INFO L273 TraceCheckUtils]: 60: Hoare triple {96926#true} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,451 INFO L273 TraceCheckUtils]: 61: Hoare triple {96926#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,451 INFO L273 TraceCheckUtils]: 62: Hoare triple {96926#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {96926#true} is VALID [2018-11-23 12:46:52,452 INFO L273 TraceCheckUtils]: 63: Hoare triple {96926#true} ~skip~0 := 0; {96926#true} is VALID [2018-11-23 12:46:52,452 INFO L273 TraceCheckUtils]: 64: Hoare triple {96926#true} assume !false; {96926#true} is VALID [2018-11-23 12:46:52,452 INFO L273 TraceCheckUtils]: 65: Hoare triple {96926#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,452 INFO L273 TraceCheckUtils]: 66: Hoare triple {96926#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,452 INFO L273 TraceCheckUtils]: 67: Hoare triple {96926#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,452 INFO L273 TraceCheckUtils]: 68: Hoare triple {96926#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,452 INFO L273 TraceCheckUtils]: 69: Hoare triple {96926#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,452 INFO L273 TraceCheckUtils]: 70: Hoare triple {96926#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,452 INFO L273 TraceCheckUtils]: 71: Hoare triple {96926#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,452 INFO L273 TraceCheckUtils]: 72: Hoare triple {96926#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,453 INFO L273 TraceCheckUtils]: 73: Hoare triple {96926#true} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,453 INFO L273 TraceCheckUtils]: 74: Hoare triple {96926#true} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,453 INFO L273 TraceCheckUtils]: 75: Hoare triple {96926#true} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,453 INFO L273 TraceCheckUtils]: 76: Hoare triple {96926#true} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,453 INFO L273 TraceCheckUtils]: 77: Hoare triple {96926#true} assume 4416 == #t~mem34;havoc #t~mem34; {96926#true} is VALID [2018-11-23 12:46:52,453 INFO L273 TraceCheckUtils]: 78: Hoare triple {96926#true} assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~ret~0 := #t~nondet74;havoc #t~nondet74; {96926#true} is VALID [2018-11-23 12:46:52,453 INFO L273 TraceCheckUtils]: 79: Hoare triple {96926#true} assume 3 == ~blastFlag~0;~blastFlag~0 := 4; {96926#true} is VALID [2018-11-23 12:46:52,453 INFO L273 TraceCheckUtils]: 80: Hoare triple {96926#true} assume !(~ret~0 <= 0);call write~int(4432, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~tmp___6~0 := #t~nondet75;havoc #t~nondet75; {96926#true} is VALID [2018-11-23 12:46:52,453 INFO L273 TraceCheckUtils]: 81: Hoare triple {96926#true} assume !(0 == ~tmp___6~0); {96926#true} is VALID [2018-11-23 12:46:52,454 INFO L273 TraceCheckUtils]: 82: Hoare triple {96926#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,454 INFO L273 TraceCheckUtils]: 83: Hoare triple {96926#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {96926#true} is VALID [2018-11-23 12:46:52,454 INFO L273 TraceCheckUtils]: 84: Hoare triple {96926#true} ~skip~0 := 0; {96926#true} is VALID [2018-11-23 12:46:52,454 INFO L273 TraceCheckUtils]: 85: Hoare triple {96926#true} assume !false; {96926#true} is VALID [2018-11-23 12:46:52,454 INFO L273 TraceCheckUtils]: 86: Hoare triple {96926#true} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,454 INFO L273 TraceCheckUtils]: 87: Hoare triple {96926#true} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,454 INFO L273 TraceCheckUtils]: 88: Hoare triple {96926#true} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,454 INFO L273 TraceCheckUtils]: 89: Hoare triple {96926#true} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,454 INFO L273 TraceCheckUtils]: 90: Hoare triple {96926#true} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,454 INFO L273 TraceCheckUtils]: 91: Hoare triple {96926#true} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,455 INFO L273 TraceCheckUtils]: 92: Hoare triple {96926#true} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,455 INFO L273 TraceCheckUtils]: 93: Hoare triple {96926#true} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,455 INFO L273 TraceCheckUtils]: 94: Hoare triple {96926#true} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,455 INFO L273 TraceCheckUtils]: 95: Hoare triple {96926#true} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,455 INFO L273 TraceCheckUtils]: 96: Hoare triple {96926#true} assume 4400 == #t~mem32;havoc #t~mem32; {96926#true} is VALID [2018-11-23 12:46:52,455 INFO L273 TraceCheckUtils]: 97: Hoare triple {96926#true} call #t~mem70.base, #t~mem70.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem71.base, #t~mem71.offset := read~$Pointer$(#t~mem70.base, 836 + #t~mem70.offset, 4);call #t~mem72 := read~int(#t~mem71.base, 12 + #t~mem71.offset, 4); {96926#true} is VALID [2018-11-23 12:46:52,455 INFO L273 TraceCheckUtils]: 98: Hoare triple {96926#true} assume 0 != ~bitwiseAnd(#t~mem72, 256) % 4294967296;havoc #t~mem70.base, #t~mem70.offset;havoc #t~mem71.base, #t~mem71.offset;havoc #t~mem72;~skip~0 := 1; {96926#true} is VALID [2018-11-23 12:46:52,456 INFO L273 TraceCheckUtils]: 99: Hoare triple {96926#true} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:52,456 INFO L273 TraceCheckUtils]: 100: Hoare triple {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:52,458 INFO L273 TraceCheckUtils]: 101: Hoare triple {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:52,458 INFO L273 TraceCheckUtils]: 102: Hoare triple {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} ~skip~0 := 0; {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:52,458 INFO L273 TraceCheckUtils]: 103: Hoare triple {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !false; {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:52,459 INFO L273 TraceCheckUtils]: 104: Hoare triple {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:52,459 INFO L273 TraceCheckUtils]: 105: Hoare triple {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:52,460 INFO L273 TraceCheckUtils]: 106: Hoare triple {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:52,460 INFO L273 TraceCheckUtils]: 107: Hoare triple {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:52,461 INFO L273 TraceCheckUtils]: 108: Hoare triple {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:52,461 INFO L273 TraceCheckUtils]: 109: Hoare triple {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:52,462 INFO L273 TraceCheckUtils]: 110: Hoare triple {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:52,462 INFO L273 TraceCheckUtils]: 111: Hoare triple {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:52,463 INFO L273 TraceCheckUtils]: 112: Hoare triple {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:52,463 INFO L273 TraceCheckUtils]: 113: Hoare triple {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:52,464 INFO L273 TraceCheckUtils]: 114: Hoare triple {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:52,464 INFO L273 TraceCheckUtils]: 115: Hoare triple {96928#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {96929#(= |ssl3_connect_#t~mem34| 4416)} is VALID [2018-11-23 12:46:52,465 INFO L273 TraceCheckUtils]: 116: Hoare triple {96929#(= |ssl3_connect_#t~mem34| 4416)} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {96927#false} is VALID [2018-11-23 12:46:52,465 INFO L273 TraceCheckUtils]: 117: Hoare triple {96927#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {96927#false} is VALID [2018-11-23 12:46:52,465 INFO L273 TraceCheckUtils]: 118: Hoare triple {96927#false} assume !(4432 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {96927#false} is VALID [2018-11-23 12:46:52,465 INFO L273 TraceCheckUtils]: 119: Hoare triple {96927#false} assume !(4433 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {96927#false} is VALID [2018-11-23 12:46:52,465 INFO L273 TraceCheckUtils]: 120: Hoare triple {96927#false} assume 4448 == #t~mem38;havoc #t~mem38; {96927#false} is VALID [2018-11-23 12:46:52,466 INFO L273 TraceCheckUtils]: 121: Hoare triple {96927#false} assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~ret~0 := #t~nondet77;havoc #t~nondet77; {96927#false} is VALID [2018-11-23 12:46:52,466 INFO L273 TraceCheckUtils]: 122: Hoare triple {96927#false} assume 4 == ~blastFlag~0; {96927#false} is VALID [2018-11-23 12:46:52,466 INFO L273 TraceCheckUtils]: 123: Hoare triple {96927#false} assume !false; {96927#false} is VALID [2018-11-23 12:46:52,475 INFO L134 CoverageAnalysis]: Checked inductivity of 187 backedges. 68 proven. 0 refuted. 0 times theorem prover too weak. 119 trivial. 0 not checked. [2018-11-23 12:46:52,475 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:52,475 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:52,476 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 124 [2018-11-23 12:46:52,476 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:52,476 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:52,552 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 75 edges. 75 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:52,552 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:52,553 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:52,553 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:52,553 INFO L87 Difference]: Start difference. First operand 919 states and 1353 transitions. Second operand 4 states. [2018-11-23 12:46:54,427 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:54,427 INFO L93 Difference]: Finished difference Result 2057 states and 3036 transitions. [2018-11-23 12:46:54,427 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:54,428 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 124 [2018-11-23 12:46:54,428 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:54,428 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:54,429 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 407 transitions. [2018-11-23 12:46:54,429 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:54,431 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 407 transitions. [2018-11-23 12:46:54,431 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 407 transitions. [2018-11-23 12:46:54,838 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 407 edges. 407 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:54,893 INFO L225 Difference]: With dead ends: 2057 [2018-11-23 12:46:54,893 INFO L226 Difference]: Without dead ends: 1151 [2018-11-23 12:46:54,894 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:54,895 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1151 states. [2018-11-23 12:46:55,461 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1151 to 1029. [2018-11-23 12:46:55,461 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:55,461 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1151 states. Second operand 1029 states. [2018-11-23 12:46:55,462 INFO L74 IsIncluded]: Start isIncluded. First operand 1151 states. Second operand 1029 states. [2018-11-23 12:46:55,462 INFO L87 Difference]: Start difference. First operand 1151 states. Second operand 1029 states. [2018-11-23 12:46:55,505 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:55,505 INFO L93 Difference]: Finished difference Result 1151 states and 1695 transitions. [2018-11-23 12:46:55,505 INFO L276 IsEmpty]: Start isEmpty. Operand 1151 states and 1695 transitions. [2018-11-23 12:46:55,506 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:55,506 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:55,506 INFO L74 IsIncluded]: Start isIncluded. First operand 1029 states. Second operand 1151 states. [2018-11-23 12:46:55,506 INFO L87 Difference]: Start difference. First operand 1029 states. Second operand 1151 states. [2018-11-23 12:46:55,546 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:55,546 INFO L93 Difference]: Finished difference Result 1151 states and 1695 transitions. [2018-11-23 12:46:55,546 INFO L276 IsEmpty]: Start isEmpty. Operand 1151 states and 1695 transitions. [2018-11-23 12:46:55,547 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:55,547 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:55,547 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:55,547 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:55,547 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1029 states. [2018-11-23 12:46:55,582 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1029 states to 1029 states and 1543 transitions. [2018-11-23 12:46:55,582 INFO L78 Accepts]: Start accepts. Automaton has 1029 states and 1543 transitions. Word has length 124 [2018-11-23 12:46:55,582 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:55,583 INFO L480 AbstractCegarLoop]: Abstraction has 1029 states and 1543 transitions. [2018-11-23 12:46:55,583 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:55,583 INFO L276 IsEmpty]: Start isEmpty. Operand 1029 states and 1543 transitions. [2018-11-23 12:46:55,584 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 129 [2018-11-23 12:46:55,584 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:55,584 INFO L402 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 5, 5, 5, 5, 5, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:55,584 INFO L423 AbstractCegarLoop]: === Iteration 34 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:55,585 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:55,585 INFO L82 PathProgramCache]: Analyzing trace with hash -421436053, now seen corresponding path program 1 times [2018-11-23 12:46:55,585 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:55,585 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:55,586 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:55,586 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:55,586 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:55,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:55,896 INFO L256 TraceCheckUtils]: 0: Hoare triple {102668#true} call ULTIMATE.init(); {102668#true} is VALID [2018-11-23 12:46:55,896 INFO L273 TraceCheckUtils]: 1: Hoare triple {102668#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {102668#true} is VALID [2018-11-23 12:46:55,896 INFO L273 TraceCheckUtils]: 2: Hoare triple {102668#true} assume true; {102668#true} is VALID [2018-11-23 12:46:55,896 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {102668#true} {102668#true} #542#return; {102668#true} is VALID [2018-11-23 12:46:55,897 INFO L256 TraceCheckUtils]: 4: Hoare triple {102668#true} call #t~ret139 := main(); {102668#true} is VALID [2018-11-23 12:46:55,897 INFO L273 TraceCheckUtils]: 5: Hoare triple {102668#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {102668#true} is VALID [2018-11-23 12:46:55,897 INFO L256 TraceCheckUtils]: 6: Hoare triple {102668#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {102668#true} is VALID [2018-11-23 12:46:55,899 INFO L273 TraceCheckUtils]: 7: Hoare triple {102668#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {102670#(or (= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))) (= 0 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))))} is VALID [2018-11-23 12:46:55,900 INFO L273 TraceCheckUtils]: 8: Hoare triple {102670#(or (= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))) (= 0 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))))} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {102670#(or (= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))) (= 0 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))))} is VALID [2018-11-23 12:46:55,901 INFO L273 TraceCheckUtils]: 9: Hoare triple {102670#(or (= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))) (= 0 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))))} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {102670#(or (= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))) (= 0 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))))} is VALID [2018-11-23 12:46:55,902 INFO L273 TraceCheckUtils]: 10: Hoare triple {102670#(or (= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))) (= 0 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))))} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {102670#(or (= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))) (= 0 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))))} is VALID [2018-11-23 12:46:55,902 INFO L273 TraceCheckUtils]: 11: Hoare triple {102670#(or (= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))) (= 0 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))))} assume !false; {102670#(or (= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))) (= 0 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))))} is VALID [2018-11-23 12:46:55,903 INFO L273 TraceCheckUtils]: 12: Hoare triple {102670#(or (= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))) (= 0 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))))} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {102671#(or (= 0 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52))) (= |ssl3_connect_#t~mem23| 12292))} is VALID [2018-11-23 12:46:55,904 INFO L273 TraceCheckUtils]: 13: Hoare triple {102671#(or (= 0 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52))) (= |ssl3_connect_#t~mem23| 12292))} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {102672#(= 0 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:55,904 INFO L273 TraceCheckUtils]: 14: Hoare triple {102672#(= 0 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {102672#(= 0 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:55,905 INFO L273 TraceCheckUtils]: 15: Hoare triple {102672#(= 0 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {102672#(= 0 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:55,905 INFO L273 TraceCheckUtils]: 16: Hoare triple {102672#(= 0 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {102672#(= 0 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:55,906 INFO L273 TraceCheckUtils]: 17: Hoare triple {102672#(= 0 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {102673#(= 0 |ssl3_connect_#t~mem28|)} is VALID [2018-11-23 12:46:55,906 INFO L273 TraceCheckUtils]: 18: Hoare triple {102673#(= 0 |ssl3_connect_#t~mem28|)} assume 4368 == #t~mem28;havoc #t~mem28; {102669#false} is VALID [2018-11-23 12:46:55,907 INFO L273 TraceCheckUtils]: 19: Hoare triple {102669#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {102669#false} is VALID [2018-11-23 12:46:55,907 INFO L273 TraceCheckUtils]: 20: Hoare triple {102669#false} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {102669#false} is VALID [2018-11-23 12:46:55,907 INFO L273 TraceCheckUtils]: 21: Hoare triple {102669#false} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,907 INFO L273 TraceCheckUtils]: 22: Hoare triple {102669#false} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {102669#false} is VALID [2018-11-23 12:46:55,907 INFO L273 TraceCheckUtils]: 23: Hoare triple {102669#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,908 INFO L273 TraceCheckUtils]: 24: Hoare triple {102669#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {102669#false} is VALID [2018-11-23 12:46:55,908 INFO L273 TraceCheckUtils]: 25: Hoare triple {102669#false} ~skip~0 := 0; {102669#false} is VALID [2018-11-23 12:46:55,908 INFO L273 TraceCheckUtils]: 26: Hoare triple {102669#false} assume !false; {102669#false} is VALID [2018-11-23 12:46:55,908 INFO L273 TraceCheckUtils]: 27: Hoare triple {102669#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,908 INFO L273 TraceCheckUtils]: 28: Hoare triple {102669#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,908 INFO L273 TraceCheckUtils]: 29: Hoare triple {102669#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,909 INFO L273 TraceCheckUtils]: 30: Hoare triple {102669#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,909 INFO L273 TraceCheckUtils]: 31: Hoare triple {102669#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,909 INFO L273 TraceCheckUtils]: 32: Hoare triple {102669#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,909 INFO L273 TraceCheckUtils]: 33: Hoare triple {102669#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,909 INFO L273 TraceCheckUtils]: 34: Hoare triple {102669#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,910 INFO L273 TraceCheckUtils]: 35: Hoare triple {102669#false} assume 4384 == #t~mem30;havoc #t~mem30; {102669#false} is VALID [2018-11-23 12:46:55,910 INFO L273 TraceCheckUtils]: 36: Hoare triple {102669#false} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {102669#false} is VALID [2018-11-23 12:46:55,910 INFO L273 TraceCheckUtils]: 37: Hoare triple {102669#false} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {102669#false} is VALID [2018-11-23 12:46:55,910 INFO L273 TraceCheckUtils]: 38: Hoare triple {102669#false} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,910 INFO L273 TraceCheckUtils]: 39: Hoare triple {102669#false} assume !(0 != #t~mem69);havoc #t~mem69;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,910 INFO L273 TraceCheckUtils]: 40: Hoare triple {102669#false} call write~int(0, ~s.base, 64 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,910 INFO L273 TraceCheckUtils]: 41: Hoare triple {102669#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,911 INFO L273 TraceCheckUtils]: 42: Hoare triple {102669#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {102669#false} is VALID [2018-11-23 12:46:55,911 INFO L273 TraceCheckUtils]: 43: Hoare triple {102669#false} ~skip~0 := 0; {102669#false} is VALID [2018-11-23 12:46:55,911 INFO L273 TraceCheckUtils]: 44: Hoare triple {102669#false} assume !false; {102669#false} is VALID [2018-11-23 12:46:55,911 INFO L273 TraceCheckUtils]: 45: Hoare triple {102669#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,911 INFO L273 TraceCheckUtils]: 46: Hoare triple {102669#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,911 INFO L273 TraceCheckUtils]: 47: Hoare triple {102669#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,911 INFO L273 TraceCheckUtils]: 48: Hoare triple {102669#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,911 INFO L273 TraceCheckUtils]: 49: Hoare triple {102669#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,911 INFO L273 TraceCheckUtils]: 50: Hoare triple {102669#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,912 INFO L273 TraceCheckUtils]: 51: Hoare triple {102669#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,912 INFO L273 TraceCheckUtils]: 52: Hoare triple {102669#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,912 INFO L273 TraceCheckUtils]: 53: Hoare triple {102669#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,912 INFO L273 TraceCheckUtils]: 54: Hoare triple {102669#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,912 INFO L273 TraceCheckUtils]: 55: Hoare triple {102669#false} assume 4400 == #t~mem32;havoc #t~mem32; {102669#false} is VALID [2018-11-23 12:46:55,912 INFO L273 TraceCheckUtils]: 56: Hoare triple {102669#false} call #t~mem70.base, #t~mem70.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem71.base, #t~mem71.offset := read~$Pointer$(#t~mem70.base, 836 + #t~mem70.offset, 4);call #t~mem72 := read~int(#t~mem71.base, 12 + #t~mem71.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,912 INFO L273 TraceCheckUtils]: 57: Hoare triple {102669#false} assume !(0 != ~bitwiseAnd(#t~mem72, 256) % 4294967296);havoc #t~mem70.base, #t~mem70.offset;havoc #t~mem71.base, #t~mem71.offset;havoc #t~mem72;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; {102669#false} is VALID [2018-11-23 12:46:55,912 INFO L273 TraceCheckUtils]: 58: Hoare triple {102669#false} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {102669#false} is VALID [2018-11-23 12:46:55,912 INFO L273 TraceCheckUtils]: 59: Hoare triple {102669#false} assume !(~ret~0 <= 0); {102669#false} is VALID [2018-11-23 12:46:55,913 INFO L273 TraceCheckUtils]: 60: Hoare triple {102669#false} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,913 INFO L273 TraceCheckUtils]: 61: Hoare triple {102669#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,913 INFO L273 TraceCheckUtils]: 62: Hoare triple {102669#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {102669#false} is VALID [2018-11-23 12:46:55,913 INFO L273 TraceCheckUtils]: 63: Hoare triple {102669#false} ~skip~0 := 0; {102669#false} is VALID [2018-11-23 12:46:55,913 INFO L273 TraceCheckUtils]: 64: Hoare triple {102669#false} assume !false; {102669#false} is VALID [2018-11-23 12:46:55,913 INFO L273 TraceCheckUtils]: 65: Hoare triple {102669#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,913 INFO L273 TraceCheckUtils]: 66: Hoare triple {102669#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,913 INFO L273 TraceCheckUtils]: 67: Hoare triple {102669#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,913 INFO L273 TraceCheckUtils]: 68: Hoare triple {102669#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,914 INFO L273 TraceCheckUtils]: 69: Hoare triple {102669#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,914 INFO L273 TraceCheckUtils]: 70: Hoare triple {102669#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,914 INFO L273 TraceCheckUtils]: 71: Hoare triple {102669#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,914 INFO L273 TraceCheckUtils]: 72: Hoare triple {102669#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,914 INFO L273 TraceCheckUtils]: 73: Hoare triple {102669#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,914 INFO L273 TraceCheckUtils]: 74: Hoare triple {102669#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,914 INFO L273 TraceCheckUtils]: 75: Hoare triple {102669#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,914 INFO L273 TraceCheckUtils]: 76: Hoare triple {102669#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,915 INFO L273 TraceCheckUtils]: 77: Hoare triple {102669#false} assume 4416 == #t~mem34;havoc #t~mem34; {102669#false} is VALID [2018-11-23 12:46:55,915 INFO L273 TraceCheckUtils]: 78: Hoare triple {102669#false} assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~ret~0 := #t~nondet74;havoc #t~nondet74; {102669#false} is VALID [2018-11-23 12:46:55,915 INFO L273 TraceCheckUtils]: 79: Hoare triple {102669#false} assume 3 == ~blastFlag~0;~blastFlag~0 := 4; {102669#false} is VALID [2018-11-23 12:46:55,915 INFO L273 TraceCheckUtils]: 80: Hoare triple {102669#false} assume !(~ret~0 <= 0);call write~int(4432, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~tmp___6~0 := #t~nondet75;havoc #t~nondet75; {102669#false} is VALID [2018-11-23 12:46:55,915 INFO L273 TraceCheckUtils]: 81: Hoare triple {102669#false} assume !(0 == ~tmp___6~0); {102669#false} is VALID [2018-11-23 12:46:55,915 INFO L273 TraceCheckUtils]: 82: Hoare triple {102669#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,915 INFO L273 TraceCheckUtils]: 83: Hoare triple {102669#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {102669#false} is VALID [2018-11-23 12:46:55,915 INFO L273 TraceCheckUtils]: 84: Hoare triple {102669#false} ~skip~0 := 0; {102669#false} is VALID [2018-11-23 12:46:55,915 INFO L273 TraceCheckUtils]: 85: Hoare triple {102669#false} assume !false; {102669#false} is VALID [2018-11-23 12:46:55,916 INFO L273 TraceCheckUtils]: 86: Hoare triple {102669#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,916 INFO L273 TraceCheckUtils]: 87: Hoare triple {102669#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,916 INFO L273 TraceCheckUtils]: 88: Hoare triple {102669#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,916 INFO L273 TraceCheckUtils]: 89: Hoare triple {102669#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,916 INFO L273 TraceCheckUtils]: 90: Hoare triple {102669#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,916 INFO L273 TraceCheckUtils]: 91: Hoare triple {102669#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,916 INFO L273 TraceCheckUtils]: 92: Hoare triple {102669#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,916 INFO L273 TraceCheckUtils]: 93: Hoare triple {102669#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,916 INFO L273 TraceCheckUtils]: 94: Hoare triple {102669#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,917 INFO L273 TraceCheckUtils]: 95: Hoare triple {102669#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,917 INFO L273 TraceCheckUtils]: 96: Hoare triple {102669#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,917 INFO L273 TraceCheckUtils]: 97: Hoare triple {102669#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,917 INFO L273 TraceCheckUtils]: 98: Hoare triple {102669#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,917 INFO L273 TraceCheckUtils]: 99: Hoare triple {102669#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,917 INFO L273 TraceCheckUtils]: 100: Hoare triple {102669#false} assume 4432 == #t~mem36;havoc #t~mem36; {102669#false} is VALID [2018-11-23 12:46:55,918 INFO L273 TraceCheckUtils]: 101: Hoare triple {102669#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {102669#false} is VALID [2018-11-23 12:46:55,918 INFO L273 TraceCheckUtils]: 102: Hoare triple {102669#false} assume !(5 == ~blastFlag~0); {102669#false} is VALID [2018-11-23 12:46:55,918 INFO L273 TraceCheckUtils]: 103: Hoare triple {102669#false} assume !(~ret~0 <= 0);call write~int(4448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,918 INFO L273 TraceCheckUtils]: 104: Hoare triple {102669#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,918 INFO L273 TraceCheckUtils]: 105: Hoare triple {102669#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {102669#false} is VALID [2018-11-23 12:46:55,918 INFO L273 TraceCheckUtils]: 106: Hoare triple {102669#false} ~skip~0 := 0; {102669#false} is VALID [2018-11-23 12:46:55,919 INFO L273 TraceCheckUtils]: 107: Hoare triple {102669#false} assume !false; {102669#false} is VALID [2018-11-23 12:46:55,919 INFO L273 TraceCheckUtils]: 108: Hoare triple {102669#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,919 INFO L273 TraceCheckUtils]: 109: Hoare triple {102669#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,919 INFO L273 TraceCheckUtils]: 110: Hoare triple {102669#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,919 INFO L273 TraceCheckUtils]: 111: Hoare triple {102669#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,919 INFO L273 TraceCheckUtils]: 112: Hoare triple {102669#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,919 INFO L273 TraceCheckUtils]: 113: Hoare triple {102669#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,920 INFO L273 TraceCheckUtils]: 114: Hoare triple {102669#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,920 INFO L273 TraceCheckUtils]: 115: Hoare triple {102669#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,920 INFO L273 TraceCheckUtils]: 116: Hoare triple {102669#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,920 INFO L273 TraceCheckUtils]: 117: Hoare triple {102669#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,920 INFO L273 TraceCheckUtils]: 118: Hoare triple {102669#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,920 INFO L273 TraceCheckUtils]: 119: Hoare triple {102669#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,920 INFO L273 TraceCheckUtils]: 120: Hoare triple {102669#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,921 INFO L273 TraceCheckUtils]: 121: Hoare triple {102669#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,921 INFO L273 TraceCheckUtils]: 122: Hoare triple {102669#false} assume !(4432 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,921 INFO L273 TraceCheckUtils]: 123: Hoare triple {102669#false} assume !(4433 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {102669#false} is VALID [2018-11-23 12:46:55,921 INFO L273 TraceCheckUtils]: 124: Hoare triple {102669#false} assume 4448 == #t~mem38;havoc #t~mem38; {102669#false} is VALID [2018-11-23 12:46:55,921 INFO L273 TraceCheckUtils]: 125: Hoare triple {102669#false} assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~ret~0 := #t~nondet77;havoc #t~nondet77; {102669#false} is VALID [2018-11-23 12:46:55,921 INFO L273 TraceCheckUtils]: 126: Hoare triple {102669#false} assume 4 == ~blastFlag~0; {102669#false} is VALID [2018-11-23 12:46:55,921 INFO L273 TraceCheckUtils]: 127: Hoare triple {102669#false} assume !false; {102669#false} is VALID [2018-11-23 12:46:55,929 INFO L134 CoverageAnalysis]: Checked inductivity of 190 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 150 trivial. 0 not checked. [2018-11-23 12:46:55,929 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:55,930 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 12:46:55,930 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 128 [2018-11-23 12:46:55,930 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:55,930 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2018-11-23 12:46:55,997 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 68 edges. 68 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:55,997 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-23 12:46:55,998 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 12:46:55,998 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2018-11-23 12:46:55,998 INFO L87 Difference]: Start difference. First operand 1029 states and 1543 transitions. Second operand 6 states. [2018-11-23 12:46:58,352 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:58,352 INFO L93 Difference]: Finished difference Result 1934 states and 2904 transitions. [2018-11-23 12:46:58,352 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-23 12:46:58,352 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 128 [2018-11-23 12:46:58,353 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:58,353 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2018-11-23 12:46:58,355 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 458 transitions. [2018-11-23 12:46:58,355 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2018-11-23 12:46:58,357 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 458 transitions. [2018-11-23 12:46:58,357 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 458 transitions. [2018-11-23 12:46:58,831 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 458 edges. 458 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:58,880 INFO L225 Difference]: With dead ends: 1934 [2018-11-23 12:46:58,880 INFO L226 Difference]: Without dead ends: 1113 [2018-11-23 12:46:58,881 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=23, Invalid=33, Unknown=0, NotChecked=0, Total=56 [2018-11-23 12:46:58,882 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1113 states. [2018-11-23 12:46:59,304 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1113 to 1037. [2018-11-23 12:46:59,304 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:59,304 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1113 states. Second operand 1037 states. [2018-11-23 12:46:59,305 INFO L74 IsIncluded]: Start isIncluded. First operand 1113 states. Second operand 1037 states. [2018-11-23 12:46:59,305 INFO L87 Difference]: Start difference. First operand 1113 states. Second operand 1037 states. [2018-11-23 12:46:59,348 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:59,348 INFO L93 Difference]: Finished difference Result 1113 states and 1665 transitions. [2018-11-23 12:46:59,348 INFO L276 IsEmpty]: Start isEmpty. Operand 1113 states and 1665 transitions. [2018-11-23 12:46:59,349 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:59,350 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:59,350 INFO L74 IsIncluded]: Start isIncluded. First operand 1037 states. Second operand 1113 states. [2018-11-23 12:46:59,350 INFO L87 Difference]: Start difference. First operand 1037 states. Second operand 1113 states. [2018-11-23 12:46:59,387 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:59,387 INFO L93 Difference]: Finished difference Result 1113 states and 1665 transitions. [2018-11-23 12:46:59,387 INFO L276 IsEmpty]: Start isEmpty. Operand 1113 states and 1665 transitions. [2018-11-23 12:46:59,388 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:59,388 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:59,388 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:59,388 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:59,388 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1037 states. [2018-11-23 12:46:59,424 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1037 states to 1037 states and 1556 transitions. [2018-11-23 12:46:59,424 INFO L78 Accepts]: Start accepts. Automaton has 1037 states and 1556 transitions. Word has length 128 [2018-11-23 12:46:59,425 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:59,425 INFO L480 AbstractCegarLoop]: Abstraction has 1037 states and 1556 transitions. [2018-11-23 12:46:59,425 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-23 12:46:59,425 INFO L276 IsEmpty]: Start isEmpty. Operand 1037 states and 1556 transitions. [2018-11-23 12:46:59,426 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 130 [2018-11-23 12:46:59,426 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:59,426 INFO L402 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 5, 5, 5, 5, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:59,426 INFO L423 AbstractCegarLoop]: === Iteration 35 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:59,426 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:59,426 INFO L82 PathProgramCache]: Analyzing trace with hash -527506, now seen corresponding path program 1 times [2018-11-23 12:46:59,426 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:59,427 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:59,428 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:59,428 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:59,428 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:59,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:59,651 INFO L256 TraceCheckUtils]: 0: Hoare triple {108194#true} call ULTIMATE.init(); {108194#true} is VALID [2018-11-23 12:46:59,652 INFO L273 TraceCheckUtils]: 1: Hoare triple {108194#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {108194#true} is VALID [2018-11-23 12:46:59,652 INFO L273 TraceCheckUtils]: 2: Hoare triple {108194#true} assume true; {108194#true} is VALID [2018-11-23 12:46:59,652 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {108194#true} {108194#true} #542#return; {108194#true} is VALID [2018-11-23 12:46:59,652 INFO L256 TraceCheckUtils]: 4: Hoare triple {108194#true} call #t~ret139 := main(); {108194#true} is VALID [2018-11-23 12:46:59,652 INFO L273 TraceCheckUtils]: 5: Hoare triple {108194#true} call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; {108194#true} is VALID [2018-11-23 12:46:59,653 INFO L256 TraceCheckUtils]: 6: Hoare triple {108194#true} call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); {108194#true} is VALID [2018-11-23 12:46:59,655 INFO L273 TraceCheckUtils]: 7: Hoare triple {108194#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {108196#(or (= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))) (= 0 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))))} is VALID [2018-11-23 12:46:59,655 INFO L273 TraceCheckUtils]: 8: Hoare triple {108196#(or (= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))) (= 0 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))))} assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; {108196#(or (= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))) (= 0 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))))} is VALID [2018-11-23 12:46:59,656 INFO L273 TraceCheckUtils]: 9: Hoare triple {108196#(or (= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))) (= 0 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))))} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {108196#(or (= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))) (= 0 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))))} is VALID [2018-11-23 12:46:59,656 INFO L273 TraceCheckUtils]: 10: Hoare triple {108196#(or (= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))) (= 0 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))))} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {108196#(or (= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))) (= 0 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))))} is VALID [2018-11-23 12:46:59,657 INFO L273 TraceCheckUtils]: 11: Hoare triple {108196#(or (= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))) (= 0 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))))} assume !false; {108196#(or (= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))) (= 0 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))))} is VALID [2018-11-23 12:46:59,657 INFO L273 TraceCheckUtils]: 12: Hoare triple {108196#(or (= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))) (= 0 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52))))} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {108197#(or (= 0 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52))) (= |ssl3_connect_#t~mem23| 12292))} is VALID [2018-11-23 12:46:59,658 INFO L273 TraceCheckUtils]: 13: Hoare triple {108197#(or (= 0 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52))) (= |ssl3_connect_#t~mem23| 12292))} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {108198#(= 0 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:59,658 INFO L273 TraceCheckUtils]: 14: Hoare triple {108198#(= 0 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {108198#(= 0 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:59,659 INFO L273 TraceCheckUtils]: 15: Hoare triple {108198#(= 0 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {108198#(= 0 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:59,659 INFO L273 TraceCheckUtils]: 16: Hoare triple {108198#(= 0 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {108198#(= 0 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:59,660 INFO L273 TraceCheckUtils]: 17: Hoare triple {108198#(= 0 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {108198#(= 0 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 12:46:59,660 INFO L273 TraceCheckUtils]: 18: Hoare triple {108198#(= 0 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {108199#(= 0 |ssl3_connect_#t~mem29|)} is VALID [2018-11-23 12:46:59,661 INFO L273 TraceCheckUtils]: 19: Hoare triple {108199#(= 0 |ssl3_connect_#t~mem29|)} assume 4369 == #t~mem29;havoc #t~mem29; {108195#false} is VALID [2018-11-23 12:46:59,661 INFO L273 TraceCheckUtils]: 20: Hoare triple {108195#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; {108195#false} is VALID [2018-11-23 12:46:59,661 INFO L273 TraceCheckUtils]: 21: Hoare triple {108195#false} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {108195#false} is VALID [2018-11-23 12:46:59,662 INFO L273 TraceCheckUtils]: 22: Hoare triple {108195#false} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,662 INFO L273 TraceCheckUtils]: 23: Hoare triple {108195#false} assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; {108195#false} is VALID [2018-11-23 12:46:59,662 INFO L273 TraceCheckUtils]: 24: Hoare triple {108195#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,662 INFO L273 TraceCheckUtils]: 25: Hoare triple {108195#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {108195#false} is VALID [2018-11-23 12:46:59,663 INFO L273 TraceCheckUtils]: 26: Hoare triple {108195#false} ~skip~0 := 0; {108195#false} is VALID [2018-11-23 12:46:59,663 INFO L273 TraceCheckUtils]: 27: Hoare triple {108195#false} assume !false; {108195#false} is VALID [2018-11-23 12:46:59,663 INFO L273 TraceCheckUtils]: 28: Hoare triple {108195#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,663 INFO L273 TraceCheckUtils]: 29: Hoare triple {108195#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,663 INFO L273 TraceCheckUtils]: 30: Hoare triple {108195#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,664 INFO L273 TraceCheckUtils]: 31: Hoare triple {108195#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,664 INFO L273 TraceCheckUtils]: 32: Hoare triple {108195#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,664 INFO L273 TraceCheckUtils]: 33: Hoare triple {108195#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,664 INFO L273 TraceCheckUtils]: 34: Hoare triple {108195#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,664 INFO L273 TraceCheckUtils]: 35: Hoare triple {108195#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,664 INFO L273 TraceCheckUtils]: 36: Hoare triple {108195#false} assume 4384 == #t~mem30;havoc #t~mem30; {108195#false} is VALID [2018-11-23 12:46:59,665 INFO L273 TraceCheckUtils]: 37: Hoare triple {108195#false} assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; {108195#false} is VALID [2018-11-23 12:46:59,665 INFO L273 TraceCheckUtils]: 38: Hoare triple {108195#false} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {108195#false} is VALID [2018-11-23 12:46:59,665 INFO L273 TraceCheckUtils]: 39: Hoare triple {108195#false} assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,665 INFO L273 TraceCheckUtils]: 40: Hoare triple {108195#false} assume !(0 != #t~mem69);havoc #t~mem69;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,665 INFO L273 TraceCheckUtils]: 41: Hoare triple {108195#false} call write~int(0, ~s.base, 64 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,666 INFO L273 TraceCheckUtils]: 42: Hoare triple {108195#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,666 INFO L273 TraceCheckUtils]: 43: Hoare triple {108195#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {108195#false} is VALID [2018-11-23 12:46:59,666 INFO L273 TraceCheckUtils]: 44: Hoare triple {108195#false} ~skip~0 := 0; {108195#false} is VALID [2018-11-23 12:46:59,666 INFO L273 TraceCheckUtils]: 45: Hoare triple {108195#false} assume !false; {108195#false} is VALID [2018-11-23 12:46:59,666 INFO L273 TraceCheckUtils]: 46: Hoare triple {108195#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,666 INFO L273 TraceCheckUtils]: 47: Hoare triple {108195#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,667 INFO L273 TraceCheckUtils]: 48: Hoare triple {108195#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,667 INFO L273 TraceCheckUtils]: 49: Hoare triple {108195#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,667 INFO L273 TraceCheckUtils]: 50: Hoare triple {108195#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,667 INFO L273 TraceCheckUtils]: 51: Hoare triple {108195#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,667 INFO L273 TraceCheckUtils]: 52: Hoare triple {108195#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,667 INFO L273 TraceCheckUtils]: 53: Hoare triple {108195#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,668 INFO L273 TraceCheckUtils]: 54: Hoare triple {108195#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,668 INFO L273 TraceCheckUtils]: 55: Hoare triple {108195#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,668 INFO L273 TraceCheckUtils]: 56: Hoare triple {108195#false} assume 4400 == #t~mem32;havoc #t~mem32; {108195#false} is VALID [2018-11-23 12:46:59,668 INFO L273 TraceCheckUtils]: 57: Hoare triple {108195#false} call #t~mem70.base, #t~mem70.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem71.base, #t~mem71.offset := read~$Pointer$(#t~mem70.base, 836 + #t~mem70.offset, 4);call #t~mem72 := read~int(#t~mem71.base, 12 + #t~mem71.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,668 INFO L273 TraceCheckUtils]: 58: Hoare triple {108195#false} assume !(0 != ~bitwiseAnd(#t~mem72, 256) % 4294967296);havoc #t~mem70.base, #t~mem70.offset;havoc #t~mem71.base, #t~mem71.offset;havoc #t~mem72;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; {108195#false} is VALID [2018-11-23 12:46:59,668 INFO L273 TraceCheckUtils]: 59: Hoare triple {108195#false} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {108195#false} is VALID [2018-11-23 12:46:59,668 INFO L273 TraceCheckUtils]: 60: Hoare triple {108195#false} assume !(~ret~0 <= 0); {108195#false} is VALID [2018-11-23 12:46:59,669 INFO L273 TraceCheckUtils]: 61: Hoare triple {108195#false} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,669 INFO L273 TraceCheckUtils]: 62: Hoare triple {108195#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,669 INFO L273 TraceCheckUtils]: 63: Hoare triple {108195#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {108195#false} is VALID [2018-11-23 12:46:59,669 INFO L273 TraceCheckUtils]: 64: Hoare triple {108195#false} ~skip~0 := 0; {108195#false} is VALID [2018-11-23 12:46:59,669 INFO L273 TraceCheckUtils]: 65: Hoare triple {108195#false} assume !false; {108195#false} is VALID [2018-11-23 12:46:59,669 INFO L273 TraceCheckUtils]: 66: Hoare triple {108195#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,670 INFO L273 TraceCheckUtils]: 67: Hoare triple {108195#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,670 INFO L273 TraceCheckUtils]: 68: Hoare triple {108195#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,670 INFO L273 TraceCheckUtils]: 69: Hoare triple {108195#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,670 INFO L273 TraceCheckUtils]: 70: Hoare triple {108195#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,670 INFO L273 TraceCheckUtils]: 71: Hoare triple {108195#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,670 INFO L273 TraceCheckUtils]: 72: Hoare triple {108195#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,671 INFO L273 TraceCheckUtils]: 73: Hoare triple {108195#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,671 INFO L273 TraceCheckUtils]: 74: Hoare triple {108195#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,671 INFO L273 TraceCheckUtils]: 75: Hoare triple {108195#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,671 INFO L273 TraceCheckUtils]: 76: Hoare triple {108195#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,671 INFO L273 TraceCheckUtils]: 77: Hoare triple {108195#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,671 INFO L273 TraceCheckUtils]: 78: Hoare triple {108195#false} assume 4416 == #t~mem34;havoc #t~mem34; {108195#false} is VALID [2018-11-23 12:46:59,672 INFO L273 TraceCheckUtils]: 79: Hoare triple {108195#false} assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~ret~0 := #t~nondet74;havoc #t~nondet74; {108195#false} is VALID [2018-11-23 12:46:59,672 INFO L273 TraceCheckUtils]: 80: Hoare triple {108195#false} assume 3 == ~blastFlag~0;~blastFlag~0 := 4; {108195#false} is VALID [2018-11-23 12:46:59,672 INFO L273 TraceCheckUtils]: 81: Hoare triple {108195#false} assume !(~ret~0 <= 0);call write~int(4432, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~tmp___6~0 := #t~nondet75;havoc #t~nondet75; {108195#false} is VALID [2018-11-23 12:46:59,672 INFO L273 TraceCheckUtils]: 82: Hoare triple {108195#false} assume !(0 == ~tmp___6~0); {108195#false} is VALID [2018-11-23 12:46:59,672 INFO L273 TraceCheckUtils]: 83: Hoare triple {108195#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,672 INFO L273 TraceCheckUtils]: 84: Hoare triple {108195#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {108195#false} is VALID [2018-11-23 12:46:59,673 INFO L273 TraceCheckUtils]: 85: Hoare triple {108195#false} ~skip~0 := 0; {108195#false} is VALID [2018-11-23 12:46:59,673 INFO L273 TraceCheckUtils]: 86: Hoare triple {108195#false} assume !false; {108195#false} is VALID [2018-11-23 12:46:59,673 INFO L273 TraceCheckUtils]: 87: Hoare triple {108195#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,673 INFO L273 TraceCheckUtils]: 88: Hoare triple {108195#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,673 INFO L273 TraceCheckUtils]: 89: Hoare triple {108195#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,673 INFO L273 TraceCheckUtils]: 90: Hoare triple {108195#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,674 INFO L273 TraceCheckUtils]: 91: Hoare triple {108195#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,674 INFO L273 TraceCheckUtils]: 92: Hoare triple {108195#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,674 INFO L273 TraceCheckUtils]: 93: Hoare triple {108195#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,674 INFO L273 TraceCheckUtils]: 94: Hoare triple {108195#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,674 INFO L273 TraceCheckUtils]: 95: Hoare triple {108195#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,674 INFO L273 TraceCheckUtils]: 96: Hoare triple {108195#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,674 INFO L273 TraceCheckUtils]: 97: Hoare triple {108195#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,675 INFO L273 TraceCheckUtils]: 98: Hoare triple {108195#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,675 INFO L273 TraceCheckUtils]: 99: Hoare triple {108195#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,675 INFO L273 TraceCheckUtils]: 100: Hoare triple {108195#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,675 INFO L273 TraceCheckUtils]: 101: Hoare triple {108195#false} assume 4432 == #t~mem36;havoc #t~mem36; {108195#false} is VALID [2018-11-23 12:46:59,675 INFO L273 TraceCheckUtils]: 102: Hoare triple {108195#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {108195#false} is VALID [2018-11-23 12:46:59,675 INFO L273 TraceCheckUtils]: 103: Hoare triple {108195#false} assume !(5 == ~blastFlag~0); {108195#false} is VALID [2018-11-23 12:46:59,676 INFO L273 TraceCheckUtils]: 104: Hoare triple {108195#false} assume !(~ret~0 <= 0);call write~int(4448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,676 INFO L273 TraceCheckUtils]: 105: Hoare triple {108195#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,676 INFO L273 TraceCheckUtils]: 106: Hoare triple {108195#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {108195#false} is VALID [2018-11-23 12:46:59,676 INFO L273 TraceCheckUtils]: 107: Hoare triple {108195#false} ~skip~0 := 0; {108195#false} is VALID [2018-11-23 12:46:59,676 INFO L273 TraceCheckUtils]: 108: Hoare triple {108195#false} assume !false; {108195#false} is VALID [2018-11-23 12:46:59,676 INFO L273 TraceCheckUtils]: 109: Hoare triple {108195#false} call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,677 INFO L273 TraceCheckUtils]: 110: Hoare triple {108195#false} assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,677 INFO L273 TraceCheckUtils]: 111: Hoare triple {108195#false} assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,677 INFO L273 TraceCheckUtils]: 112: Hoare triple {108195#false} assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,677 INFO L273 TraceCheckUtils]: 113: Hoare triple {108195#false} assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,677 INFO L273 TraceCheckUtils]: 114: Hoare triple {108195#false} assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,677 INFO L273 TraceCheckUtils]: 115: Hoare triple {108195#false} assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,678 INFO L273 TraceCheckUtils]: 116: Hoare triple {108195#false} assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,678 INFO L273 TraceCheckUtils]: 117: Hoare triple {108195#false} assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,678 INFO L273 TraceCheckUtils]: 118: Hoare triple {108195#false} assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,678 INFO L273 TraceCheckUtils]: 119: Hoare triple {108195#false} assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,678 INFO L273 TraceCheckUtils]: 120: Hoare triple {108195#false} assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,678 INFO L273 TraceCheckUtils]: 121: Hoare triple {108195#false} assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,679 INFO L273 TraceCheckUtils]: 122: Hoare triple {108195#false} assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,679 INFO L273 TraceCheckUtils]: 123: Hoare triple {108195#false} assume !(4432 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,679 INFO L273 TraceCheckUtils]: 124: Hoare triple {108195#false} assume !(4433 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {108195#false} is VALID [2018-11-23 12:46:59,679 INFO L273 TraceCheckUtils]: 125: Hoare triple {108195#false} assume 4448 == #t~mem38;havoc #t~mem38; {108195#false} is VALID [2018-11-23 12:46:59,679 INFO L273 TraceCheckUtils]: 126: Hoare triple {108195#false} assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~ret~0 := #t~nondet77;havoc #t~nondet77; {108195#false} is VALID [2018-11-23 12:46:59,679 INFO L273 TraceCheckUtils]: 127: Hoare triple {108195#false} assume 4 == ~blastFlag~0; {108195#false} is VALID [2018-11-23 12:46:59,679 INFO L273 TraceCheckUtils]: 128: Hoare triple {108195#false} assume !false; {108195#false} is VALID [2018-11-23 12:46:59,692 INFO L134 CoverageAnalysis]: Checked inductivity of 195 backedges. 45 proven. 0 refuted. 0 times theorem prover too weak. 150 trivial. 0 not checked. [2018-11-23 12:46:59,692 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:59,693 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 12:46:59,693 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 129 [2018-11-23 12:46:59,693 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:59,693 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2018-11-23 12:46:59,794 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 69 edges. 69 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:59,795 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-23 12:46:59,795 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 12:46:59,795 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2018-11-23 12:46:59,796 INFO L87 Difference]: Start difference. First operand 1037 states and 1556 transitions. Second operand 6 states. [2018-11-23 12:47:02,593 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:02,593 INFO L93 Difference]: Finished difference Result 1931 states and 2900 transitions. [2018-11-23 12:47:02,593 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-23 12:47:02,594 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 129 [2018-11-23 12:47:02,594 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:02,594 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2018-11-23 12:47:02,595 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 454 transitions. [2018-11-23 12:47:02,595 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2018-11-23 12:47:02,597 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 454 transitions. [2018-11-23 12:47:02,597 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 454 transitions. [2018-11-23 12:47:03,116 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 454 edges. 454 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:03,167 INFO L225 Difference]: With dead ends: 1931 [2018-11-23 12:47:03,167 INFO L226 Difference]: Without dead ends: 1110 [2018-11-23 12:47:03,168 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=33, Unknown=0, NotChecked=0, Total=56 [2018-11-23 12:47:03,168 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1110 states. [2018-11-23 12:47:03,501 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1110 to 1038. [2018-11-23 12:47:03,501 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:03,502 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1110 states. Second operand 1038 states. [2018-11-23 12:47:03,502 INFO L74 IsIncluded]: Start isIncluded. First operand 1110 states. Second operand 1038 states. [2018-11-23 12:47:03,502 INFO L87 Difference]: Start difference. First operand 1110 states. Second operand 1038 states. [2018-11-23 12:47:03,543 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:03,543 INFO L93 Difference]: Finished difference Result 1110 states and 1661 transitions. [2018-11-23 12:47:03,543 INFO L276 IsEmpty]: Start isEmpty. Operand 1110 states and 1661 transitions. [2018-11-23 12:47:03,544 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:03,544 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:03,544 INFO L74 IsIncluded]: Start isIncluded. First operand 1038 states. Second operand 1110 states. [2018-11-23 12:47:03,544 INFO L87 Difference]: Start difference. First operand 1038 states. Second operand 1110 states. [2018-11-23 12:47:03,581 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:03,581 INFO L93 Difference]: Finished difference Result 1110 states and 1661 transitions. [2018-11-23 12:47:03,581 INFO L276 IsEmpty]: Start isEmpty. Operand 1110 states and 1661 transitions. [2018-11-23 12:47:03,582 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:03,582 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:03,582 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:03,582 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:03,582 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1038 states. [2018-11-23 12:47:03,619 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1038 states to 1038 states and 1557 transitions. [2018-11-23 12:47:03,619 INFO L78 Accepts]: Start accepts. Automaton has 1038 states and 1557 transitions. Word has length 129 [2018-11-23 12:47:03,619 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:03,619 INFO L480 AbstractCegarLoop]: Abstraction has 1038 states and 1557 transitions. [2018-11-23 12:47:03,620 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-23 12:47:03,620 INFO L276 IsEmpty]: Start isEmpty. Operand 1038 states and 1557 transitions. [2018-11-23 12:47:03,620 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 144 [2018-11-23 12:47:03,620 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:03,621 INFO L402 BasicCegarLoop]: trace histogram [7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 5, 5, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:03,621 INFO L423 AbstractCegarLoop]: === Iteration 36 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:03,621 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:03,621 INFO L82 PathProgramCache]: Analyzing trace with hash 1528997636, now seen corresponding path program 1 times [2018-11-23 12:47:03,621 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:03,621 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:03,622 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:03,622 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:03,622 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:03,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 12:47:04,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 12:47:04,138 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=20507, |#NULL.offset|=20535, |old(#NULL.base)|=20507, |old(#NULL.offset)|=20535, |old(~#SSLv3_client_data~0.base)|=20492, |old(~#SSLv3_client_data~0.offset)|=20488, |old(~init~0)|=20541, |~#SSLv3_client_data~0.base|=20492, |~#SSLv3_client_data~0.offset|=20488, ~init~0=20541] [?] #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); VAL [|#NULL.base|=0, |#NULL.offset|=0, |old(#NULL.base)|=20507, |old(#NULL.offset)|=20535, |old(~#SSLv3_client_data~0.base)|=20492, |old(~#SSLv3_client_data~0.offset)|=20488, |old(~init~0)|=20541, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume true; VAL [|#NULL.base|=0, |#NULL.offset|=0, |old(#NULL.base)|=20507, |old(#NULL.offset)|=20535, |old(~#SSLv3_client_data~0.base)|=20492, |old(~#SSLv3_client_data~0.offset)|=20488, |old(~init~0)|=20541, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] RET #542#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647;call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet7; VAL [main_~s~0.base=20501, main_~s~0.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |main_#t~malloc3.base|=20501, |main_#t~malloc3.offset|=0, |main_#t~malloc4.base|=20506, |main_#t~malloc4.offset|=0, |main_#t~malloc5.base|=20521, |main_#t~malloc5.offset|=0, |main_#t~malloc6.base|=20484, |main_#t~malloc6.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] CALL call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset;havoc #t~nondet9.base, #t~nondet9.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset;havoc #t~nondet10.base, #t~nondet10.offset;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___1~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___2~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp~2 := #t~nondet14;havoc #t~nondet14;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=0, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem15.base|=1, |ssl3_connect_#t~mem15.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296;havoc #t~mem15.base, #t~mem15.offset;call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset;havoc #t~mem16.base, #t~mem16.offset; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem23|=12292, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 12292 == #t~mem23;havoc #t~mem23; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call write~int(1, ~s.base, 40 + ~s.offset, 4);call write~int(4096, ~s.base, 52 + ~s.offset, 4);call #t~mem56.base, #t~mem56.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem57 := read~int(#t~mem56.base, 64 + #t~mem56.offset, 4);call write~int(1 + #t~mem57, #t~mem56.base, 64 + #t~mem56.offset, 4);havoc #t~mem56.base, #t~mem56.offset;havoc #t~mem57; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call write~int(0, ~s.base, 36 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem58 := read~int(~s.base, ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem58|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(768 != ~bitwiseAnd(#t~mem58, 65280));havoc #t~mem58;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem59.base, #t~mem59.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem59.base|=(- 1), |ssl3_connect_#t~mem59.offset|=2, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 == (#t~mem59.base + #t~mem59.offset) % 4294967296);havoc #t~mem59.base, #t~mem59.offset; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___4~0 := #t~nondet61;havoc #t~nondet61; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet62 && #t~nondet62 <= 2147483647;~tmp___5~0 := #t~nondet62;havoc #t~nondet62; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 60 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 60 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset;call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem128.base|=20506, |ssl3_connect_#t~mem128.offset|=0, |ssl3_connect_#t~mem129|=20542, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem23|=4368, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem24|=4368, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem25|=4368, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem26|=4368, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem27|=4368, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem28|=4368, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 4368 == #t~mem28;havoc #t~mem28; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647;~ret~0 := #t~nondet65;havoc #t~nondet65; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 0 == ~blastFlag~0;~blastFlag~0 := 1; VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem66.base|=0, |ssl3_connect_#t~mem66.offset|=1, |ssl3_connect_#t~mem67.base|=0, |ssl3_connect_#t~mem67.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296;havoc #t~mem66.base, #t~mem66.offset;havoc #t~mem67.base, #t~mem67.offset; VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem128.base|=20506, |ssl3_connect_#t~mem128.offset|=0, |ssl3_connect_#t~mem129|=20542, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem23|=4384, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem24|=4384, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem25|=4384, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem26|=4384, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem27|=4384, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem28|=4384, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem29|=4384, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem30|=4384, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 4384 == #t~mem30;havoc #t~mem30; VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647;~ret~0 := #t~nondet68;havoc #t~nondet68; VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 1 == ~blastFlag~0;~blastFlag~0 := 2; VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem69|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 != #t~mem69);havoc #t~mem69;call write~int(4400, ~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem128.base|=20506, |ssl3_connect_#t~mem128.offset|=0, |ssl3_connect_#t~mem129|=20542, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem23|=4400, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem24|=4400, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem25|=4400, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem26|=4400, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem27|=4400, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem28|=4400, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem29|=4400, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem30|=4400, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem31|=4400, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem32|=4400, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 4400 == #t~mem32;havoc #t~mem32; VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem70.base, #t~mem70.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem71.base, #t~mem71.offset := read~$Pointer$(#t~mem70.base, 836 + #t~mem70.offset, 4);call #t~mem72 := read~int(#t~mem71.base, 12 + #t~mem71.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem70.base|=20506, |ssl3_connect_#t~mem70.offset|=0, |ssl3_connect_#t~mem71.base|=20502, |ssl3_connect_#t~mem71.offset|=0, |ssl3_connect_#t~mem72|=20537, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 != ~bitwiseAnd(#t~mem72, 256) % 4294967296);havoc #t~mem70.base, #t~mem70.offset;havoc #t~mem71.base, #t~mem71.offset;havoc #t~mem72;assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=5, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 2 == ~blastFlag~0;~blastFlag~0 := 3; VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=5, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=5, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=5, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=5, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem128.base|=20506, |ssl3_connect_#t~mem128.offset|=0, |ssl3_connect_#t~mem129|=20542, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=5, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=5, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=5, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=5, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem23|=4416, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=5, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem24|=4416, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=5, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem25|=4416, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=5, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem26|=4416, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=5, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem27|=4416, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=5, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem28|=4416, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=5, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem29|=4416, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=5, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem30|=4416, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=5, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem31|=4416, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=5, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem32|=4416, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=5, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem33|=4416, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=5, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem34|=4416, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 4416 == #t~mem34;havoc #t~mem34; VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=5, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~ret~0 := #t~nondet74;havoc #t~nondet74; VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=6, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 3 == ~blastFlag~0;~blastFlag~0 := 4; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=6, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);call write~int(4432, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~tmp___6~0 := #t~nondet75;havoc #t~nondet75; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=6, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 == ~tmp___6~0); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=6, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=6, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem128.base|=20506, |ssl3_connect_#t~mem128.offset|=0, |ssl3_connect_#t~mem129|=20542, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=6, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=6, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=6, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=6, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem23|=4432, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=6, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem24|=4432, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=6, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem25|=4432, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=6, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem26|=4432, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=6, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem27|=4432, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=6, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem28|=4432, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=6, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem29|=4432, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=6, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem30|=4432, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=6, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem31|=4432, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=6, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem32|=4432, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=6, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem33|=4432, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=6, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem34|=4432, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=6, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem35|=4432, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=6, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem36|=4432, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 4432 == #t~mem36;havoc #t~mem36; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=6, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(5 == ~blastFlag~0); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);call write~int(4448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem128.base|=20506, |ssl3_connect_#t~mem128.offset|=0, |ssl3_connect_#t~mem129|=20542, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem22;havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem23|=4448, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem24|=4448, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem25|=4448, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4096 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem26|=4448, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(20480 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem27|=4448, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4099 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem28|=4448, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4368 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem29|=4448, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4369 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem30|=4448, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4384 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem31|=4448, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4385 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem32|=4448, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4400 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem33|=4448, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4401 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem34|=4448, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4416 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem35|=4448, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4417 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem36|=4448, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4432 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem37|=4448, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4433 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~mem38|=4448, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 4448 == #t~mem38;havoc #t~mem38; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=7, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647;~ret~0 := #t~nondet77;havoc #t~nondet77; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=0, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 4 == ~blastFlag~0; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=0, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20511, ssl3_connect_~buf~0.offset=20517, ssl3_connect_~cb~0.base=1, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=0, ssl3_connect_~s.base=20501, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20501, ssl3_connect_~tmp___0~1.offset=204, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20501, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20494, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] CALL call ULTIMATE.init(); VAL [#NULL.base=20507, #NULL.offset=20535, old(#NULL.base)=20507, old(#NULL.offset)=20535, old(~#SSLv3_client_data~0.base)=20492, old(~#SSLv3_client_data~0.offset)=20488, old(~init~0)=20541, ~#SSLv3_client_data~0.base=20492, ~#SSLv3_client_data~0.offset=20488, ~init~0=20541] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L1042] ~init~0 := 1; [L1043] call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100); [L1043] call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=20507, old(#NULL.offset)=20535, old(~#SSLv3_client_data~0.base)=20492, old(~#SSLv3_client_data~0.offset)=20488, old(~init~0)=20541, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~init~0=1] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=20507, old(#NULL.offset)=20535, old(~#SSLv3_client_data~0.base)=20492, old(~#SSLv3_client_data~0.offset)=20488, old(~init~0)=20541, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~init~0=1] [L1065] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248); [L1065] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1069] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899); [L1069] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4); [L1070] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232); [L1070] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4); [L1071] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200); [L1071] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); [L1072] call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4); [L1073] assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647; [L1073] call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4); [L1073] havoc #t~nondet7; VAL [#NULL.base=0, #NULL.offset=0, #t~malloc3.base=20501, #t~malloc3.offset=0, #t~malloc4.base=20506, #t~malloc4.offset=0, #t~malloc5.base=20521, #t~malloc5.offset=0, #t~malloc6.base=20484, #t~malloc6.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~init~0=1, ~s~0.base=20501, ~s~0.offset=0] [L1074] CALL call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~init~0=1] [L1079-L1648] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1080] ~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset; [L1080] havoc #t~nondet9.base, #t~nondet9.offset; [L1081] havoc ~tmp~2; [L1082] havoc ~l~0; [L1083] havoc ~num1~0; [L1084] havoc ~cb~0.base, ~cb~0.offset; [L1085] havoc ~ret~0; [L1086] havoc ~new_state~0; [L1087] havoc ~state~0; [L1088] havoc ~skip~0; [L1089] ~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset; [L1089] havoc #t~nondet10.base, #t~nondet10.offset; [L1090] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1090] ~tmp___1~0 := #t~nondet11; [L1090] havoc #t~nondet11; [L1091] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1091] ~tmp___2~0 := #t~nondet12; [L1091] havoc #t~nondet12; [L1092] havoc ~tmp___3~0; [L1093] havoc ~tmp___4~0; [L1094] havoc ~tmp___5~0; [L1095] havoc ~tmp___6~0; [L1096] havoc ~tmp___7~0; [L1097] havoc ~tmp___8~0; [L1098] havoc ~tmp___9~0; [L1100] havoc ~blastFlag~0; [L1103] ~blastFlag~0 := 0; [L1104] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1104] call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4); [L1104] havoc #t~nondet13; [L1105] call write~int(12292, ~s.base, 52 + ~s.offset, 4); [L1106] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1106] ~tmp~2 := #t~nondet14; [L1106] havoc #t~nondet14; [L1107] ~cb~0.base, ~cb~0.offset := 0, 0; [L1108] ~ret~0 := -1; [L1109] ~skip~0 := 0; [L1110] call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4); [L1111] call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem15.base=1, #t~mem15.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=0, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1111-L1119] assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296; [L1111] havoc #t~mem15.base, #t~mem15.offset; [L1112] call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); [L1112] ~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset; [L1112] havoc #t~mem16.base, #t~mem16.offset; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1120] call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4); [L1120] call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4); [L1120] havoc #t~mem21; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1121-L1129] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1131-L1635] assume !false; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=12292, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1134-L1604] assume 12292 == #t~mem23; [L1134] havoc #t~mem23; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1237] call write~int(1, ~s.base, 40 + ~s.offset, 4); [L1238] call write~int(4096, ~s.base, 52 + ~s.offset, 4); [L1239] call #t~mem56.base, #t~mem56.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4); [L1239] call #t~mem57 := read~int(#t~mem56.base, 64 + #t~mem56.offset, 4); [L1239] call write~int(1 + #t~mem57, #t~mem56.base, 64 + #t~mem56.offset, 4); [L1239] havoc #t~mem56.base, #t~mem56.offset; [L1239] havoc #t~mem57; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1244] call write~int(0, ~s.base, 36 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1245-L1249] assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1250] call #t~mem58 := read~int(~s.base, ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem58=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1250-L1255] assume !(768 != ~bitwiseAnd(#t~mem58, 65280)); [L1250] havoc #t~mem58; [L1256] call write~int(4096, ~s.base, 4 + ~s.offset, 4); [L1257] call #t~mem59.base, #t~mem59.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem59.base=-1, #t~mem59.offset=2, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1257-L1268] assume !(0 == (#t~mem59.base + #t~mem59.offset) % 4294967296); [L1257] havoc #t~mem59.base, #t~mem59.offset; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1269] assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647; [L1269] ~tmp___4~0 := #t~nondet61; [L1269] havoc #t~nondet61; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp~2=0] [L1270-L1275] assume !(0 == ~tmp___4~0); [L1276] assume -2147483648 <= #t~nondet62 && #t~nondet62 <= 2147483647; [L1276] ~tmp___5~0 := #t~nondet62; [L1276] havoc #t~nondet62; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1277-L1282] assume !(0 == ~tmp___5~0); [L1283] call write~int(4368, ~s.base, 52 + ~s.offset, 4); [L1284] call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4); [L1284] call #t~mem64 := read~int(#t~mem63.base, 60 + #t~mem63.offset, 4); [L1284] call write~int(1 + #t~mem64, #t~mem63.base, 60 + #t~mem63.offset, 4); [L1284] havoc #t~mem64; [L1284] havoc #t~mem63.base, #t~mem63.offset; [L1285] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1605] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=20506, #t~mem128.offset=0, #t~mem129=20542, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605-L1633] assume !(0 == #t~mem129); [L1605] havoc #t~mem129; [L1605] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] assume !false; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=4368, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134-L1604] assume !(12292 == #t~mem23); [L1134] havoc #t~mem23; [L1137] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=4368, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137-L1603] assume !(16384 == #t~mem24); [L1137] havoc #t~mem24; [L1140] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=4368, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140-L1602] assume !(4096 == #t~mem25); [L1140] havoc #t~mem25; [L1143] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=4368, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143-L1601] assume !(20480 == #t~mem26); [L1143] havoc #t~mem26; [L1146] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=4368, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146-L1600] assume !(4099 == #t~mem27); [L1146] havoc #t~mem27; [L1149] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=4368, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149-L1599] assume 4368 == #t~mem28; [L1149] havoc #t~mem28; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1289] call write~int(0, ~s.base, 48 + ~s.offset, 4); [L1290] assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647; [L1290] ~ret~0 := #t~nondet65; [L1290] havoc #t~nondet65; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1291-L1295] assume 0 == ~blastFlag~0; [L1292] ~blastFlag~0 := 1; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1296-L1300] assume !(~ret~0 <= 0); [L1301] call write~int(4384, ~s.base, 52 + ~s.offset, 4); [L1302] call write~int(0, ~s.base, 64 + ~s.offset, 4); [L1303] call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4); [L1303] call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem66.base=0, #t~mem66.offset=1, #t~mem67.base=0, #t~mem67.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1303-L1307] assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296; [L1303] havoc #t~mem66.base, #t~mem66.offset; [L1303] havoc #t~mem67.base, #t~mem67.offset; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1605] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=20506, #t~mem128.offset=0, #t~mem129=20542, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605-L1633] assume !(0 == #t~mem129); [L1605] havoc #t~mem129; [L1605] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] assume !false; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=4384, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134-L1604] assume !(12292 == #t~mem23); [L1134] havoc #t~mem23; [L1137] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=4384, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137-L1603] assume !(16384 == #t~mem24); [L1137] havoc #t~mem24; [L1140] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=4384, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140-L1602] assume !(4096 == #t~mem25); [L1140] havoc #t~mem25; [L1143] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=4384, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143-L1601] assume !(20480 == #t~mem26); [L1143] havoc #t~mem26; [L1146] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=4384, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146-L1600] assume !(4099 == #t~mem27); [L1146] havoc #t~mem27; [L1149] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=4384, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149-L1599] assume !(4368 == #t~mem28); [L1149] havoc #t~mem28; [L1152] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=4384, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1152-L1598] assume !(4369 == #t~mem29); [L1152] havoc #t~mem29; [L1155] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=4384, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1155-L1597] assume 4384 == #t~mem30; [L1155] havoc #t~mem30; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1311] assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647; [L1311] ~ret~0 := #t~nondet68; [L1311] havoc #t~nondet68; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1312-L1316] assume 1 == ~blastFlag~0; [L1313] ~blastFlag~0 := 2; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1317-L1321] assume !(~ret~0 <= 0); [L1322] call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem69=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1322-L1326] assume !(0 != #t~mem69); [L1322] havoc #t~mem69; [L1325] call write~int(4400, ~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1327] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1605] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=20506, #t~mem128.offset=0, #t~mem129=20542, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605-L1633] assume !(0 == #t~mem129); [L1605] havoc #t~mem129; [L1605] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] assume !false; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=4400, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134-L1604] assume !(12292 == #t~mem23); [L1134] havoc #t~mem23; [L1137] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=4400, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137-L1603] assume !(16384 == #t~mem24); [L1137] havoc #t~mem24; [L1140] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=4400, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140-L1602] assume !(4096 == #t~mem25); [L1140] havoc #t~mem25; [L1143] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=4400, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143-L1601] assume !(20480 == #t~mem26); [L1143] havoc #t~mem26; [L1146] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=4400, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146-L1600] assume !(4099 == #t~mem27); [L1146] havoc #t~mem27; [L1149] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=4400, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149-L1599] assume !(4368 == #t~mem28); [L1149] havoc #t~mem28; [L1152] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=4400, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1152-L1598] assume !(4369 == #t~mem29); [L1152] havoc #t~mem29; [L1155] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=4400, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1155-L1597] assume !(4384 == #t~mem30); [L1155] havoc #t~mem30; [L1158] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=4400, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1158-L1596] assume !(4385 == #t~mem31); [L1158] havoc #t~mem31; [L1161] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=4400, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1161-L1595] assume 4400 == #t~mem32; [L1161] havoc #t~mem32; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1331] call #t~mem70.base, #t~mem70.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1331] call #t~mem71.base, #t~mem71.offset := read~$Pointer$(#t~mem70.base, 836 + #t~mem70.offset, 4); [L1331] call #t~mem72 := read~int(#t~mem71.base, 12 + #t~mem71.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem70.base=20506, #t~mem70.offset=0, #t~mem71.base=20502, #t~mem71.offset=0, #t~mem72=20537, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1331-L1345] assume !(0 != ~bitwiseAnd(#t~mem72, 256) % 4294967296); [L1331] havoc #t~mem70.base, #t~mem70.offset; [L1331] havoc #t~mem71.base, #t~mem71.offset; [L1331] havoc #t~mem72; [L1334] assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647; [L1334] ~ret~0 := #t~nondet73; [L1334] havoc #t~nondet73; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1335-L1339] assume 2 == ~blastFlag~0; [L1336] ~blastFlag~0 := 3; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1340-L1344] assume !(~ret~0 <= 0); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1346] call write~int(4416, ~s.base, 52 + ~s.offset, 4); [L1347] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1605] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=20506, #t~mem128.offset=0, #t~mem129=20542, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605-L1633] assume !(0 == #t~mem129); [L1605] havoc #t~mem129; [L1605] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] assume !false; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134-L1604] assume !(12292 == #t~mem23); [L1134] havoc #t~mem23; [L1137] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137-L1603] assume !(16384 == #t~mem24); [L1137] havoc #t~mem24; [L1140] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140-L1602] assume !(4096 == #t~mem25); [L1140] havoc #t~mem25; [L1143] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143-L1601] assume !(20480 == #t~mem26); [L1143] havoc #t~mem26; [L1146] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146-L1600] assume !(4099 == #t~mem27); [L1146] havoc #t~mem27; [L1149] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149-L1599] assume !(4368 == #t~mem28); [L1149] havoc #t~mem28; [L1152] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1152-L1598] assume !(4369 == #t~mem29); [L1152] havoc #t~mem29; [L1155] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1155-L1597] assume !(4384 == #t~mem30); [L1155] havoc #t~mem30; [L1158] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1158-L1596] assume !(4385 == #t~mem31); [L1158] havoc #t~mem31; [L1161] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1161-L1595] assume !(4400 == #t~mem32); [L1161] havoc #t~mem32; [L1164] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1164-L1594] assume !(4401 == #t~mem33); [L1164] havoc #t~mem33; [L1167] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1167-L1593] assume 4416 == #t~mem34; [L1167] havoc #t~mem34; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1351] assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647; [L1351] ~ret~0 := #t~nondet74; [L1351] havoc #t~nondet74; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1352-L1356] assume 3 == ~blastFlag~0; [L1353] ~blastFlag~0 := 4; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1357-L1361] assume !(~ret~0 <= 0); [L1362] call write~int(4432, ~s.base, 52 + ~s.offset, 4); [L1363] call write~int(0, ~s.base, 64 + ~s.offset, 4); [L1364] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1364] ~tmp___6~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1365-L1370] assume !(0 == ~tmp___6~0); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1605] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=20506, #t~mem128.offset=0, #t~mem129=20542, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605-L1633] assume !(0 == #t~mem129); [L1605] havoc #t~mem129; [L1605] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1131-L1635] assume !false; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1134-L1604] assume !(12292 == #t~mem23); [L1134] havoc #t~mem23; [L1137] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1137-L1603] assume !(16384 == #t~mem24); [L1137] havoc #t~mem24; [L1140] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1140-L1602] assume !(4096 == #t~mem25); [L1140] havoc #t~mem25; [L1143] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1143-L1601] assume !(20480 == #t~mem26); [L1143] havoc #t~mem26; [L1146] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1146-L1600] assume !(4099 == #t~mem27); [L1146] havoc #t~mem27; [L1149] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1149-L1599] assume !(4368 == #t~mem28); [L1149] havoc #t~mem28; [L1152] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1152-L1598] assume !(4369 == #t~mem29); [L1152] havoc #t~mem29; [L1155] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1155-L1597] assume !(4384 == #t~mem30); [L1155] havoc #t~mem30; [L1158] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1158-L1596] assume !(4385 == #t~mem31); [L1158] havoc #t~mem31; [L1161] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1161-L1595] assume !(4400 == #t~mem32); [L1161] havoc #t~mem32; [L1164] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1164-L1594] assume !(4401 == #t~mem33); [L1164] havoc #t~mem33; [L1167] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1167-L1593] assume !(4416 == #t~mem34); [L1167] havoc #t~mem34; [L1170] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1170-L1592] assume !(4417 == #t~mem35); [L1170] havoc #t~mem35; [L1173] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1173-L1591] assume 4432 == #t~mem36; [L1173] havoc #t~mem36; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1374] assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647; [L1374] ~ret~0 := #t~nondet76; [L1374] havoc #t~nondet76; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1375-L1379] assume !(5 == ~blastFlag~0); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1380-L1384] assume !(~ret~0 <= 0); [L1385] call write~int(4448, ~s.base, 52 + ~s.offset, 4); [L1386] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1605] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=20506, #t~mem128.offset=0, #t~mem129=20542, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605-L1633] assume !(0 == #t~mem129); [L1605] havoc #t~mem129; [L1605] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1131-L1635] assume !false; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1134-L1604] assume !(12292 == #t~mem23); [L1134] havoc #t~mem23; [L1137] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1137-L1603] assume !(16384 == #t~mem24); [L1137] havoc #t~mem24; [L1140] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1140-L1602] assume !(4096 == #t~mem25); [L1140] havoc #t~mem25; [L1143] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1143-L1601] assume !(20480 == #t~mem26); [L1143] havoc #t~mem26; [L1146] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1146-L1600] assume !(4099 == #t~mem27); [L1146] havoc #t~mem27; [L1149] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1149-L1599] assume !(4368 == #t~mem28); [L1149] havoc #t~mem28; [L1152] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1152-L1598] assume !(4369 == #t~mem29); [L1152] havoc #t~mem29; [L1155] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1155-L1597] assume !(4384 == #t~mem30); [L1155] havoc #t~mem30; [L1158] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1158-L1596] assume !(4385 == #t~mem31); [L1158] havoc #t~mem31; [L1161] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1161-L1595] assume !(4400 == #t~mem32); [L1161] havoc #t~mem32; [L1164] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1164-L1594] assume !(4401 == #t~mem33); [L1164] havoc #t~mem33; [L1167] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1167-L1593] assume !(4416 == #t~mem34); [L1167] havoc #t~mem34; [L1170] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1170-L1592] assume !(4417 == #t~mem35); [L1170] havoc #t~mem35; [L1173] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1173-L1591] assume !(4432 == #t~mem36); [L1173] havoc #t~mem36; [L1176] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1176-L1590] assume !(4433 == #t~mem37); [L1176] havoc #t~mem37; [L1179] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1179-L1589] assume 4448 == #t~mem38; [L1179] havoc #t~mem38; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1390] assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647; [L1390] ~ret~0 := #t~nondet77; [L1390] havoc #t~nondet77; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=0, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1391-L1395] assume 4 == ~blastFlag~0; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=0, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1646] assert false; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=0, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL.base=20507, #NULL.offset=20535, old(#NULL.base)=20507, old(#NULL.offset)=20535, old(~#SSLv3_client_data~0.base)=20492, old(~#SSLv3_client_data~0.offset)=20488, old(~init~0)=20541, ~#SSLv3_client_data~0.base=20492, ~#SSLv3_client_data~0.offset=20488, ~init~0=20541] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L1042] ~init~0 := 1; [L1043] call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100); [L1043] call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=20507, old(#NULL.offset)=20535, old(~#SSLv3_client_data~0.base)=20492, old(~#SSLv3_client_data~0.offset)=20488, old(~init~0)=20541, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~init~0=1] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=20507, old(#NULL.offset)=20535, old(~#SSLv3_client_data~0.base)=20492, old(~#SSLv3_client_data~0.offset)=20488, old(~init~0)=20541, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~init~0=1] [L1065] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248); [L1065] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1069] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899); [L1069] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4); [L1070] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232); [L1070] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4); [L1071] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200); [L1071] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); [L1072] call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4); [L1073] assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647; [L1073] call write~int(#t~nondet7, ~s~0.base, ~s~0.offset, 4); [L1073] havoc #t~nondet7; VAL [#NULL.base=0, #NULL.offset=0, #t~malloc3.base=20501, #t~malloc3.offset=0, #t~malloc4.base=20506, #t~malloc4.offset=0, #t~malloc5.base=20521, #t~malloc5.offset=0, #t~malloc6.base=20484, #t~malloc6.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~init~0=1, ~s~0.base=20501, ~s~0.offset=0] [L1074] CALL call #t~ret8 := ssl3_connect(~s~0.base, ~s~0.offset); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~init~0=1] [L1079-L1648] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1080] ~buf~0.base, ~buf~0.offset := #t~nondet9.base, #t~nondet9.offset; [L1080] havoc #t~nondet9.base, #t~nondet9.offset; [L1081] havoc ~tmp~2; [L1082] havoc ~l~0; [L1083] havoc ~num1~0; [L1084] havoc ~cb~0.base, ~cb~0.offset; [L1085] havoc ~ret~0; [L1086] havoc ~new_state~0; [L1087] havoc ~state~0; [L1088] havoc ~skip~0; [L1089] ~tmp___0~1.base, ~tmp___0~1.offset := #t~nondet10.base, #t~nondet10.offset; [L1089] havoc #t~nondet10.base, #t~nondet10.offset; [L1090] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1090] ~tmp___1~0 := #t~nondet11; [L1090] havoc #t~nondet11; [L1091] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1091] ~tmp___2~0 := #t~nondet12; [L1091] havoc #t~nondet12; [L1092] havoc ~tmp___3~0; [L1093] havoc ~tmp___4~0; [L1094] havoc ~tmp___5~0; [L1095] havoc ~tmp___6~0; [L1096] havoc ~tmp___7~0; [L1097] havoc ~tmp___8~0; [L1098] havoc ~tmp___9~0; [L1100] havoc ~blastFlag~0; [L1103] ~blastFlag~0 := 0; [L1104] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1104] call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4); [L1104] havoc #t~nondet13; [L1105] call write~int(12292, ~s.base, 52 + ~s.offset, 4); [L1106] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1106] ~tmp~2 := #t~nondet14; [L1106] havoc #t~nondet14; [L1107] ~cb~0.base, ~cb~0.offset := 0, 0; [L1108] ~ret~0 := -1; [L1109] ~skip~0 := 0; [L1110] call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4); [L1111] call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem15.base=1, #t~mem15.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=0, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1111-L1119] assume 0 != (#t~mem15.base + #t~mem15.offset) % 4294967296; [L1111] havoc #t~mem15.base, #t~mem15.offset; [L1112] call #t~mem16.base, #t~mem16.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); [L1112] ~cb~0.base, ~cb~0.offset := #t~mem16.base, #t~mem16.offset; [L1112] havoc #t~mem16.base, #t~mem16.offset; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1120] call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4); [L1120] call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4); [L1120] havoc #t~mem21; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1121-L1129] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1131-L1635] assume !false; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=12292, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1134-L1604] assume 12292 == #t~mem23; [L1134] havoc #t~mem23; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1237] call write~int(1, ~s.base, 40 + ~s.offset, 4); [L1238] call write~int(4096, ~s.base, 52 + ~s.offset, 4); [L1239] call #t~mem56.base, #t~mem56.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4); [L1239] call #t~mem57 := read~int(#t~mem56.base, 64 + #t~mem56.offset, 4); [L1239] call write~int(1 + #t~mem57, #t~mem56.base, 64 + #t~mem56.offset, 4); [L1239] havoc #t~mem56.base, #t~mem56.offset; [L1239] havoc #t~mem57; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1244] call write~int(0, ~s.base, 36 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1245-L1249] assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1250] call #t~mem58 := read~int(~s.base, ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem58=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1250-L1255] assume !(768 != ~bitwiseAnd(#t~mem58, 65280)); [L1250] havoc #t~mem58; [L1256] call write~int(4096, ~s.base, 4 + ~s.offset, 4); [L1257] call #t~mem59.base, #t~mem59.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem59.base=-1, #t~mem59.offset=2, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1257-L1268] assume !(0 == (#t~mem59.base + #t~mem59.offset) % 4294967296); [L1257] havoc #t~mem59.base, #t~mem59.offset; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1269] assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647; [L1269] ~tmp___4~0 := #t~nondet61; [L1269] havoc #t~nondet61; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp~2=0] [L1270-L1275] assume !(0 == ~tmp___4~0); [L1276] assume -2147483648 <= #t~nondet62 && #t~nondet62 <= 2147483647; [L1276] ~tmp___5~0 := #t~nondet62; [L1276] havoc #t~nondet62; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1277-L1282] assume !(0 == ~tmp___5~0); [L1283] call write~int(4368, ~s.base, 52 + ~s.offset, 4); [L1284] call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4); [L1284] call #t~mem64 := read~int(#t~mem63.base, 60 + #t~mem63.offset, 4); [L1284] call write~int(1 + #t~mem64, #t~mem63.base, 60 + #t~mem63.offset, 4); [L1284] havoc #t~mem64; [L1284] havoc #t~mem63.base, #t~mem63.offset; [L1285] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1605] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=20506, #t~mem128.offset=0, #t~mem129=20542, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605-L1633] assume !(0 == #t~mem129); [L1605] havoc #t~mem129; [L1605] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] assume !false; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=4368, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134-L1604] assume !(12292 == #t~mem23); [L1134] havoc #t~mem23; [L1137] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=4368, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137-L1603] assume !(16384 == #t~mem24); [L1137] havoc #t~mem24; [L1140] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=4368, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140-L1602] assume !(4096 == #t~mem25); [L1140] havoc #t~mem25; [L1143] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=4368, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143-L1601] assume !(20480 == #t~mem26); [L1143] havoc #t~mem26; [L1146] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=4368, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146-L1600] assume !(4099 == #t~mem27); [L1146] havoc #t~mem27; [L1149] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=4368, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149-L1599] assume 4368 == #t~mem28; [L1149] havoc #t~mem28; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1289] call write~int(0, ~s.base, 48 + ~s.offset, 4); [L1290] assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647; [L1290] ~ret~0 := #t~nondet65; [L1290] havoc #t~nondet65; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1291-L1295] assume 0 == ~blastFlag~0; [L1292] ~blastFlag~0 := 1; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1296-L1300] assume !(~ret~0 <= 0); [L1301] call write~int(4384, ~s.base, 52 + ~s.offset, 4); [L1302] call write~int(0, ~s.base, 64 + ~s.offset, 4); [L1303] call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4); [L1303] call #t~mem67.base, #t~mem67.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem66.base=0, #t~mem66.offset=1, #t~mem67.base=0, #t~mem67.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1303-L1307] assume (#t~mem66.base + #t~mem66.offset) % 4294967296 != (#t~mem67.base + #t~mem67.offset) % 4294967296; [L1303] havoc #t~mem66.base, #t~mem66.offset; [L1303] havoc #t~mem67.base, #t~mem67.offset; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1605] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=20506, #t~mem128.offset=0, #t~mem129=20542, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605-L1633] assume !(0 == #t~mem129); [L1605] havoc #t~mem129; [L1605] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] assume !false; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=4384, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134-L1604] assume !(12292 == #t~mem23); [L1134] havoc #t~mem23; [L1137] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=4384, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137-L1603] assume !(16384 == #t~mem24); [L1137] havoc #t~mem24; [L1140] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=4384, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140-L1602] assume !(4096 == #t~mem25); [L1140] havoc #t~mem25; [L1143] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=4384, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143-L1601] assume !(20480 == #t~mem26); [L1143] havoc #t~mem26; [L1146] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=4384, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146-L1600] assume !(4099 == #t~mem27); [L1146] havoc #t~mem27; [L1149] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=4384, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149-L1599] assume !(4368 == #t~mem28); [L1149] havoc #t~mem28; [L1152] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=4384, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1152-L1598] assume !(4369 == #t~mem29); [L1152] havoc #t~mem29; [L1155] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=4384, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1155-L1597] assume 4384 == #t~mem30; [L1155] havoc #t~mem30; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1311] assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647; [L1311] ~ret~0 := #t~nondet68; [L1311] havoc #t~nondet68; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1312-L1316] assume 1 == ~blastFlag~0; [L1313] ~blastFlag~0 := 2; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1317-L1321] assume !(~ret~0 <= 0); [L1322] call #t~mem69 := read~int(~s.base, 92 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem69=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1322-L1326] assume !(0 != #t~mem69); [L1322] havoc #t~mem69; [L1325] call write~int(4400, ~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1327] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1605] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=20506, #t~mem128.offset=0, #t~mem129=20542, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605-L1633] assume !(0 == #t~mem129); [L1605] havoc #t~mem129; [L1605] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] assume !false; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=4400, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134-L1604] assume !(12292 == #t~mem23); [L1134] havoc #t~mem23; [L1137] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=4400, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137-L1603] assume !(16384 == #t~mem24); [L1137] havoc #t~mem24; [L1140] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=4400, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140-L1602] assume !(4096 == #t~mem25); [L1140] havoc #t~mem25; [L1143] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=4400, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143-L1601] assume !(20480 == #t~mem26); [L1143] havoc #t~mem26; [L1146] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=4400, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146-L1600] assume !(4099 == #t~mem27); [L1146] havoc #t~mem27; [L1149] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=4400, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149-L1599] assume !(4368 == #t~mem28); [L1149] havoc #t~mem28; [L1152] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=4400, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1152-L1598] assume !(4369 == #t~mem29); [L1152] havoc #t~mem29; [L1155] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=4400, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1155-L1597] assume !(4384 == #t~mem30); [L1155] havoc #t~mem30; [L1158] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=4400, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1158-L1596] assume !(4385 == #t~mem31); [L1158] havoc #t~mem31; [L1161] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=4400, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1161-L1595] assume 4400 == #t~mem32; [L1161] havoc #t~mem32; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1331] call #t~mem70.base, #t~mem70.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1331] call #t~mem71.base, #t~mem71.offset := read~$Pointer$(#t~mem70.base, 836 + #t~mem70.offset, 4); [L1331] call #t~mem72 := read~int(#t~mem71.base, 12 + #t~mem71.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem70.base=20506, #t~mem70.offset=0, #t~mem71.base=20502, #t~mem71.offset=0, #t~mem72=20537, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=1, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1331-L1345] assume !(0 != ~bitwiseAnd(#t~mem72, 256) % 4294967296); [L1331] havoc #t~mem70.base, #t~mem70.offset; [L1331] havoc #t~mem71.base, #t~mem71.offset; [L1331] havoc #t~mem72; [L1334] assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647; [L1334] ~ret~0 := #t~nondet73; [L1334] havoc #t~nondet73; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1335-L1339] assume 2 == ~blastFlag~0; [L1336] ~blastFlag~0 := 3; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1340-L1344] assume !(~ret~0 <= 0); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1346] call write~int(4416, ~s.base, 52 + ~s.offset, 4); [L1347] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1605] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=20506, #t~mem128.offset=0, #t~mem129=20542, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605-L1633] assume !(0 == #t~mem129); [L1605] havoc #t~mem129; [L1605] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] assume !false; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134-L1604] assume !(12292 == #t~mem23); [L1134] havoc #t~mem23; [L1137] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137-L1603] assume !(16384 == #t~mem24); [L1137] havoc #t~mem24; [L1140] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140-L1602] assume !(4096 == #t~mem25); [L1140] havoc #t~mem25; [L1143] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143-L1601] assume !(20480 == #t~mem26); [L1143] havoc #t~mem26; [L1146] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146-L1600] assume !(4099 == #t~mem27); [L1146] havoc #t~mem27; [L1149] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149-L1599] assume !(4368 == #t~mem28); [L1149] havoc #t~mem28; [L1152] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1152-L1598] assume !(4369 == #t~mem29); [L1152] havoc #t~mem29; [L1155] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1155-L1597] assume !(4384 == #t~mem30); [L1155] havoc #t~mem30; [L1158] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1158-L1596] assume !(4385 == #t~mem31); [L1158] havoc #t~mem31; [L1161] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1161-L1595] assume !(4400 == #t~mem32); [L1161] havoc #t~mem32; [L1164] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1164-L1594] assume !(4401 == #t~mem33); [L1164] havoc #t~mem33; [L1167] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=4416, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1167-L1593] assume 4416 == #t~mem34; [L1167] havoc #t~mem34; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=5, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1351] assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647; [L1351] ~ret~0 := #t~nondet74; [L1351] havoc #t~nondet74; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1352-L1356] assume 3 == ~blastFlag~0; [L1353] ~blastFlag~0 := 4; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1357-L1361] assume !(~ret~0 <= 0); [L1362] call write~int(4432, ~s.base, 52 + ~s.offset, 4); [L1363] call write~int(0, ~s.base, 64 + ~s.offset, 4); [L1364] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1364] ~tmp___6~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1365-L1370] assume !(0 == ~tmp___6~0); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1605] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=20506, #t~mem128.offset=0, #t~mem129=20542, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605-L1633] assume !(0 == #t~mem129); [L1605] havoc #t~mem129; [L1605] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1131-L1635] assume !false; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1134-L1604] assume !(12292 == #t~mem23); [L1134] havoc #t~mem23; [L1137] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1137-L1603] assume !(16384 == #t~mem24); [L1137] havoc #t~mem24; [L1140] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1140-L1602] assume !(4096 == #t~mem25); [L1140] havoc #t~mem25; [L1143] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1143-L1601] assume !(20480 == #t~mem26); [L1143] havoc #t~mem26; [L1146] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1146-L1600] assume !(4099 == #t~mem27); [L1146] havoc #t~mem27; [L1149] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1149-L1599] assume !(4368 == #t~mem28); [L1149] havoc #t~mem28; [L1152] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1152-L1598] assume !(4369 == #t~mem29); [L1152] havoc #t~mem29; [L1155] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1155-L1597] assume !(4384 == #t~mem30); [L1155] havoc #t~mem30; [L1158] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1158-L1596] assume !(4385 == #t~mem31); [L1158] havoc #t~mem31; [L1161] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1161-L1595] assume !(4400 == #t~mem32); [L1161] havoc #t~mem32; [L1164] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1164-L1594] assume !(4401 == #t~mem33); [L1164] havoc #t~mem33; [L1167] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1167-L1593] assume !(4416 == #t~mem34); [L1167] havoc #t~mem34; [L1170] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1170-L1592] assume !(4417 == #t~mem35); [L1170] havoc #t~mem35; [L1173] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=4432, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1173-L1591] assume 4432 == #t~mem36; [L1173] havoc #t~mem36; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=6, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1374] assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647; [L1374] ~ret~0 := #t~nondet76; [L1374] havoc #t~nondet76; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1375-L1379] assume !(5 == ~blastFlag~0); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1380-L1384] assume !(~ret~0 <= 0); [L1385] call write~int(4448, ~s.base, 52 + ~s.offset, 4); [L1386] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1605] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=20506, #t~mem128.offset=0, #t~mem129=20542, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605-L1633] assume !(0 == #t~mem129); [L1605] havoc #t~mem129; [L1605] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1131-L1635] assume !false; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1134-L1604] assume !(12292 == #t~mem23); [L1134] havoc #t~mem23; [L1137] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1137-L1603] assume !(16384 == #t~mem24); [L1137] havoc #t~mem24; [L1140] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1140-L1602] assume !(4096 == #t~mem25); [L1140] havoc #t~mem25; [L1143] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1143-L1601] assume !(20480 == #t~mem26); [L1143] havoc #t~mem26; [L1146] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1146-L1600] assume !(4099 == #t~mem27); [L1146] havoc #t~mem27; [L1149] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1149-L1599] assume !(4368 == #t~mem28); [L1149] havoc #t~mem28; [L1152] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1152-L1598] assume !(4369 == #t~mem29); [L1152] havoc #t~mem29; [L1155] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1155-L1597] assume !(4384 == #t~mem30); [L1155] havoc #t~mem30; [L1158] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1158-L1596] assume !(4385 == #t~mem31); [L1158] havoc #t~mem31; [L1161] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1161-L1595] assume !(4400 == #t~mem32); [L1161] havoc #t~mem32; [L1164] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1164-L1594] assume !(4401 == #t~mem33); [L1164] havoc #t~mem33; [L1167] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1167-L1593] assume !(4416 == #t~mem34); [L1167] havoc #t~mem34; [L1170] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1170-L1592] assume !(4417 == #t~mem35); [L1170] havoc #t~mem35; [L1173] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1173-L1591] assume !(4432 == #t~mem36); [L1173] havoc #t~mem36; [L1176] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1176-L1590] assume !(4433 == #t~mem37); [L1176] havoc #t~mem37; [L1179] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=4448, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1179-L1589] assume 4448 == #t~mem38; [L1179] havoc #t~mem38; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=7, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1390] assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647; [L1390] ~ret~0 := #t~nondet77; [L1390] havoc #t~nondet77; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=0, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1391-L1395] assume 4 == ~blastFlag~0; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=0, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1646] assert false; VAL [#in~s.base=20501, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20494, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20511, ~buf~0.offset=20517, ~cb~0.base=1, ~cb~0.offset=0, ~init~0=1, ~ret~0=0, ~s.base=20501, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20501, ~tmp___0~1.offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=20507, #NULL!offset=20535, old(#NULL!base)=20507, old(#NULL!offset)=20535, old(~#SSLv3_client_data~0!base)=20492, old(~#SSLv3_client_data~0!offset)=20488, old(~init~0)=20541, ~#SSLv3_client_data~0!base=20492, ~#SSLv3_client_data~0!offset=20488, ~init~0=20541] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_client_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_client_data~0!base, offset: ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 4 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 8 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 12 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 16 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 20 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 24 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 28 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 32 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 36 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 40 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 44 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 48 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 52 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 56 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 60 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 64 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 68 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 72 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 76 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 80 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 84 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 88 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 92 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 96 + ~#SSLv3_client_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=20507, old(#NULL!offset)=20535, old(~#SSLv3_client_data~0!base)=20492, old(~#SSLv3_client_data~0!offset)=20488, old(~init~0)=20541, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [L1065] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1065] ~s~0 := #t~malloc3; [L1069] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1069] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1070] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1070] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1071] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1071] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1072] FCALL call write~int(12292, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); [L1073] assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647; [L1073] FCALL call write~int(#t~nondet7, { base: ~s~0!base, offset: ~s~0!offset }, 4); [L1073] havoc #t~nondet7; VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=20501, #t~malloc3!offset=0, #t~malloc4!base=20506, #t~malloc4!offset=0, #t~malloc5!base=20521, #t~malloc5!offset=0, #t~malloc6!base=20484, #t~malloc6!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~init~0=1, ~s~0!base=20501, ~s~0!offset=0] [L1074] CALL call #t~ret8 := ssl3_connect(~s~0); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [L1079-L1648] ~s := #in~s; [L1080] ~buf~0 := #t~nondet9; [L1080] havoc #t~nondet9; [L1081] havoc ~tmp~2; [L1082] havoc ~l~0; [L1083] havoc ~num1~0; [L1084] havoc ~cb~0; [L1085] havoc ~ret~0; [L1086] havoc ~new_state~0; [L1087] havoc ~state~0; [L1088] havoc ~skip~0; [L1089] ~tmp___0~1 := #t~nondet10; [L1089] havoc #t~nondet10; [L1090] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1090] ~tmp___1~0 := #t~nondet11; [L1090] havoc #t~nondet11; [L1091] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1091] ~tmp___2~0 := #t~nondet12; [L1091] havoc #t~nondet12; [L1092] havoc ~tmp___3~0; [L1093] havoc ~tmp___4~0; [L1094] havoc ~tmp___5~0; [L1095] havoc ~tmp___6~0; [L1096] havoc ~tmp___7~0; [L1097] havoc ~tmp___8~0; [L1098] havoc ~tmp___9~0; [L1100] havoc ~blastFlag~0; [L1103] ~blastFlag~0 := 0; [L1104] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1104] FCALL call write~int(#t~nondet13, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1104] havoc #t~nondet13; [L1105] FCALL call write~int(12292, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1106] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1106] ~tmp~2 := #t~nondet14; [L1106] havoc #t~nondet14; [L1107] ~cb~0 := { base: 0, offset: 0 }; [L1108] ~ret~0 := -1; [L1109] ~skip~0 := 0; [L1110] FCALL call write~int(0, ~tmp___0~1, 4); [L1111] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem15!base=1, #t~mem15!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=0, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1111] COND TRUE 0 != (#t~mem15!base + #t~mem15!offset) % 4294967296 [L1111] havoc #t~mem15; [L1112] FCALL call #t~mem16 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1112] ~cb~0 := #t~mem16; [L1112] havoc #t~mem16; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1120] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] FCALL call write~int(1 + #t~mem21, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] havoc #t~mem21; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1121-L1129] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=12292, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1134] COND TRUE 12292 == #t~mem23 [L1134] havoc #t~mem23; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1237] FCALL call write~int(1, { base: ~s!base, offset: 40 + ~s!offset }, 4); [L1238] FCALL call write~int(4096, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1239] FCALL call #t~mem56 := read~$Pointer$({ base: ~s!base, offset: 204 + ~s!offset }, 4); [L1239] FCALL call #t~mem57 := read~int({ base: #t~mem56!base, offset: 64 + #t~mem56!offset }, 4); [L1239] FCALL call write~int(1 + #t~mem57, { base: #t~mem56!base, offset: 64 + #t~mem56!offset }, 4); [L1239] havoc #t~mem56; [L1239] havoc #t~mem57; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1244] FCALL call write~int(0, { base: ~s!base, offset: 36 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1245] COND TRUE 0 != (~cb~0!base + ~cb~0!offset) % 4294967296 VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1250] FCALL call #t~mem58 := read~int({ base: ~s!base, offset: ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem58=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1250] COND FALSE !(768 != ~bitwiseAnd(#t~mem58, 65280)) [L1250] havoc #t~mem58; [L1256] FCALL call write~int(4096, { base: ~s!base, offset: 4 + ~s!offset }, 4); [L1257] FCALL call #t~mem59 := read~$Pointer$({ base: ~s!base, offset: 60 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem59!base=-1, #t~mem59!offset=2, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1257] COND FALSE !(0 == (#t~mem59!base + #t~mem59!offset) % 4294967296) [L1257] havoc #t~mem59; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1269] assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647; [L1269] ~tmp___4~0 := #t~nondet61; [L1269] havoc #t~nondet61; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp~2=0] [L1270] COND FALSE !(0 == ~tmp___4~0) [L1276] assume -2147483648 <= #t~nondet62 && #t~nondet62 <= 2147483647; [L1276] ~tmp___5~0 := #t~nondet62; [L1276] havoc #t~nondet62; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1277] COND FALSE !(0 == ~tmp___5~0) [L1283] FCALL call write~int(4368, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1284] FCALL call #t~mem63 := read~$Pointer$({ base: ~s!base, offset: 204 + ~s!offset }, 4); [L1284] FCALL call #t~mem64 := read~int({ base: #t~mem63!base, offset: 60 + #t~mem63!offset }, 4); [L1284] FCALL call write~int(1 + #t~mem64, { base: #t~mem63!base, offset: 60 + #t~mem63!offset }, 4); [L1284] havoc #t~mem64; [L1284] havoc #t~mem63; [L1285] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149] COND TRUE 4368 == #t~mem28 [L1149] havoc #t~mem28; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1289] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1290] assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647; [L1290] ~ret~0 := #t~nondet65; [L1290] havoc #t~nondet65; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1291] COND TRUE 0 == ~blastFlag~0 [L1292] ~blastFlag~0 := 1; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1296] COND FALSE !(~ret~0 <= 0) [L1301] FCALL call write~int(4384, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1302] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1303] FCALL call #t~mem66 := read~$Pointer$({ base: ~s!base, offset: 20 + ~s!offset }, 4); [L1303] FCALL call #t~mem67 := read~$Pointer$({ base: ~s!base, offset: 16 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem66!base=0, #t~mem66!offset=1, #t~mem67!base=0, #t~mem67!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1303] COND TRUE (#t~mem66!base + #t~mem66!offset) % 4294967296 != (#t~mem67!base + #t~mem67!offset) % 4294967296 [L1303] havoc #t~mem66; [L1303] havoc #t~mem67; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149] COND FALSE !(4368 == #t~mem28) [L1149] havoc #t~mem28; [L1152] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1152] COND FALSE !(4369 == #t~mem29) [L1152] havoc #t~mem29; [L1155] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1155] COND TRUE 4384 == #t~mem30 [L1155] havoc #t~mem30; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1311] assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647; [L1311] ~ret~0 := #t~nondet68; [L1311] havoc #t~nondet68; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1312] COND TRUE 1 == ~blastFlag~0 [L1313] ~blastFlag~0 := 2; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1317] COND FALSE !(~ret~0 <= 0) [L1322] FCALL call #t~mem69 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem69=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1322-L1326] COND FALSE !(0 != #t~mem69) [L1322] havoc #t~mem69; [L1325] FCALL call write~int(4400, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1327] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149] COND FALSE !(4368 == #t~mem28) [L1149] havoc #t~mem28; [L1152] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1152] COND FALSE !(4369 == #t~mem29) [L1152] havoc #t~mem29; [L1155] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1155] COND FALSE !(4384 == #t~mem30) [L1155] havoc #t~mem30; [L1158] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1158] COND FALSE !(4385 == #t~mem31) [L1158] havoc #t~mem31; [L1161] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1161] COND TRUE 4400 == #t~mem32 [L1161] havoc #t~mem32; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1331] FCALL call #t~mem70 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1331] FCALL call #t~mem71 := read~$Pointer$({ base: #t~mem70!base, offset: 836 + #t~mem70!offset }, 4); [L1331] FCALL call #t~mem72 := read~int({ base: #t~mem71!base, offset: 12 + #t~mem71!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem70!base=20506, #t~mem70!offset=0, #t~mem71!base=20502, #t~mem71!offset=0, #t~mem72=20537, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1331-L1345] COND FALSE !(0 != ~bitwiseAnd(#t~mem72, 256) % 4294967296) [L1331] havoc #t~mem70; [L1331] havoc #t~mem71; [L1331] havoc #t~mem72; [L1334] assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647; [L1334] ~ret~0 := #t~nondet73; [L1334] havoc #t~nondet73; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1335] COND TRUE 2 == ~blastFlag~0 [L1336] ~blastFlag~0 := 3; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1340] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1346] FCALL call write~int(4416, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1347] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149] COND FALSE !(4368 == #t~mem28) [L1149] havoc #t~mem28; [L1152] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1152] COND FALSE !(4369 == #t~mem29) [L1152] havoc #t~mem29; [L1155] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1155] COND FALSE !(4384 == #t~mem30) [L1155] havoc #t~mem30; [L1158] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1158] COND FALSE !(4385 == #t~mem31) [L1158] havoc #t~mem31; [L1161] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1161] COND FALSE !(4400 == #t~mem32) [L1161] havoc #t~mem32; [L1164] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1164] COND FALSE !(4401 == #t~mem33) [L1164] havoc #t~mem33; [L1167] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1167] COND TRUE 4416 == #t~mem34 [L1167] havoc #t~mem34; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1351] assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647; [L1351] ~ret~0 := #t~nondet74; [L1351] havoc #t~nondet74; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1352] COND TRUE 3 == ~blastFlag~0 [L1353] ~blastFlag~0 := 4; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1357] COND FALSE !(~ret~0 <= 0) [L1362] FCALL call write~int(4432, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1363] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1364] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1364] ~tmp___6~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1365] COND FALSE !(0 == ~tmp___6~0) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1149] COND FALSE !(4368 == #t~mem28) [L1149] havoc #t~mem28; [L1152] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1152] COND FALSE !(4369 == #t~mem29) [L1152] havoc #t~mem29; [L1155] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1155] COND FALSE !(4384 == #t~mem30) [L1155] havoc #t~mem30; [L1158] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1158] COND FALSE !(4385 == #t~mem31) [L1158] havoc #t~mem31; [L1161] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1161] COND FALSE !(4400 == #t~mem32) [L1161] havoc #t~mem32; [L1164] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1164] COND FALSE !(4401 == #t~mem33) [L1164] havoc #t~mem33; [L1167] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1167] COND FALSE !(4416 == #t~mem34) [L1167] havoc #t~mem34; [L1170] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1170] COND FALSE !(4417 == #t~mem35) [L1170] havoc #t~mem35; [L1173] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1173] COND TRUE 4432 == #t~mem36 [L1173] havoc #t~mem36; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1374] assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647; [L1374] ~ret~0 := #t~nondet76; [L1374] havoc #t~nondet76; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1375] COND FALSE !(5 == ~blastFlag~0) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1380] COND FALSE !(~ret~0 <= 0) [L1385] FCALL call write~int(4448, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1386] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1149] COND FALSE !(4368 == #t~mem28) [L1149] havoc #t~mem28; [L1152] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1152] COND FALSE !(4369 == #t~mem29) [L1152] havoc #t~mem29; [L1155] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1155] COND FALSE !(4384 == #t~mem30) [L1155] havoc #t~mem30; [L1158] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1158] COND FALSE !(4385 == #t~mem31) [L1158] havoc #t~mem31; [L1161] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1161] COND FALSE !(4400 == #t~mem32) [L1161] havoc #t~mem32; [L1164] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1164] COND FALSE !(4401 == #t~mem33) [L1164] havoc #t~mem33; [L1167] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1167] COND FALSE !(4416 == #t~mem34) [L1167] havoc #t~mem34; [L1170] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1170] COND FALSE !(4417 == #t~mem35) [L1170] havoc #t~mem35; [L1173] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1173] COND FALSE !(4432 == #t~mem36) [L1173] havoc #t~mem36; [L1176] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1176] COND FALSE !(4433 == #t~mem37) [L1176] havoc #t~mem37; [L1179] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1179] COND TRUE 4448 == #t~mem38 [L1179] havoc #t~mem38; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1390] assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647; [L1390] ~ret~0 := #t~nondet77; [L1390] havoc #t~nondet77; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=0, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1391] COND TRUE 4 == ~blastFlag~0 VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=0, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1646] assert false; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=0, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=20507, #NULL!offset=20535, old(#NULL!base)=20507, old(#NULL!offset)=20535, old(~#SSLv3_client_data~0!base)=20492, old(~#SSLv3_client_data~0!offset)=20488, old(~init~0)=20541, ~#SSLv3_client_data~0!base=20492, ~#SSLv3_client_data~0!offset=20488, ~init~0=20541] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_client_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_client_data~0!base, offset: ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 4 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 8 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 12 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 16 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 20 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 24 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 28 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 32 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 36 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 40 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 44 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 48 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 52 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 56 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 60 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 64 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 68 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 72 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 76 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 80 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 84 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 88 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 92 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 96 + ~#SSLv3_client_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=20507, old(#NULL!offset)=20535, old(~#SSLv3_client_data~0!base)=20492, old(~#SSLv3_client_data~0!offset)=20488, old(~init~0)=20541, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [L1065] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1065] ~s~0 := #t~malloc3; [L1069] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1069] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1070] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1070] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1071] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1071] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1072] FCALL call write~int(12292, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); [L1073] assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647; [L1073] FCALL call write~int(#t~nondet7, { base: ~s~0!base, offset: ~s~0!offset }, 4); [L1073] havoc #t~nondet7; VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=20501, #t~malloc3!offset=0, #t~malloc4!base=20506, #t~malloc4!offset=0, #t~malloc5!base=20521, #t~malloc5!offset=0, #t~malloc6!base=20484, #t~malloc6!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~init~0=1, ~s~0!base=20501, ~s~0!offset=0] [L1074] CALL call #t~ret8 := ssl3_connect(~s~0); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [L1079-L1648] ~s := #in~s; [L1080] ~buf~0 := #t~nondet9; [L1080] havoc #t~nondet9; [L1081] havoc ~tmp~2; [L1082] havoc ~l~0; [L1083] havoc ~num1~0; [L1084] havoc ~cb~0; [L1085] havoc ~ret~0; [L1086] havoc ~new_state~0; [L1087] havoc ~state~0; [L1088] havoc ~skip~0; [L1089] ~tmp___0~1 := #t~nondet10; [L1089] havoc #t~nondet10; [L1090] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1090] ~tmp___1~0 := #t~nondet11; [L1090] havoc #t~nondet11; [L1091] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1091] ~tmp___2~0 := #t~nondet12; [L1091] havoc #t~nondet12; [L1092] havoc ~tmp___3~0; [L1093] havoc ~tmp___4~0; [L1094] havoc ~tmp___5~0; [L1095] havoc ~tmp___6~0; [L1096] havoc ~tmp___7~0; [L1097] havoc ~tmp___8~0; [L1098] havoc ~tmp___9~0; [L1100] havoc ~blastFlag~0; [L1103] ~blastFlag~0 := 0; [L1104] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1104] FCALL call write~int(#t~nondet13, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1104] havoc #t~nondet13; [L1105] FCALL call write~int(12292, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1106] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1106] ~tmp~2 := #t~nondet14; [L1106] havoc #t~nondet14; [L1107] ~cb~0 := { base: 0, offset: 0 }; [L1108] ~ret~0 := -1; [L1109] ~skip~0 := 0; [L1110] FCALL call write~int(0, ~tmp___0~1, 4); [L1111] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem15!base=1, #t~mem15!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=0, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1111] COND TRUE 0 != (#t~mem15!base + #t~mem15!offset) % 4294967296 [L1111] havoc #t~mem15; [L1112] FCALL call #t~mem16 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1112] ~cb~0 := #t~mem16; [L1112] havoc #t~mem16; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1120] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] FCALL call write~int(1 + #t~mem21, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] havoc #t~mem21; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1121-L1129] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=12292, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1134] COND TRUE 12292 == #t~mem23 [L1134] havoc #t~mem23; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1237] FCALL call write~int(1, { base: ~s!base, offset: 40 + ~s!offset }, 4); [L1238] FCALL call write~int(4096, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1239] FCALL call #t~mem56 := read~$Pointer$({ base: ~s!base, offset: 204 + ~s!offset }, 4); [L1239] FCALL call #t~mem57 := read~int({ base: #t~mem56!base, offset: 64 + #t~mem56!offset }, 4); [L1239] FCALL call write~int(1 + #t~mem57, { base: #t~mem56!base, offset: 64 + #t~mem56!offset }, 4); [L1239] havoc #t~mem56; [L1239] havoc #t~mem57; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1244] FCALL call write~int(0, { base: ~s!base, offset: 36 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1245] COND TRUE 0 != (~cb~0!base + ~cb~0!offset) % 4294967296 VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1250] FCALL call #t~mem58 := read~int({ base: ~s!base, offset: ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem58=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1250] COND FALSE !(768 != ~bitwiseAnd(#t~mem58, 65280)) [L1250] havoc #t~mem58; [L1256] FCALL call write~int(4096, { base: ~s!base, offset: 4 + ~s!offset }, 4); [L1257] FCALL call #t~mem59 := read~$Pointer$({ base: ~s!base, offset: 60 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem59!base=-1, #t~mem59!offset=2, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1257] COND FALSE !(0 == (#t~mem59!base + #t~mem59!offset) % 4294967296) [L1257] havoc #t~mem59; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1269] assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647; [L1269] ~tmp___4~0 := #t~nondet61; [L1269] havoc #t~nondet61; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp~2=0] [L1270] COND FALSE !(0 == ~tmp___4~0) [L1276] assume -2147483648 <= #t~nondet62 && #t~nondet62 <= 2147483647; [L1276] ~tmp___5~0 := #t~nondet62; [L1276] havoc #t~nondet62; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1277] COND FALSE !(0 == ~tmp___5~0) [L1283] FCALL call write~int(4368, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1284] FCALL call #t~mem63 := read~$Pointer$({ base: ~s!base, offset: 204 + ~s!offset }, 4); [L1284] FCALL call #t~mem64 := read~int({ base: #t~mem63!base, offset: 60 + #t~mem63!offset }, 4); [L1284] FCALL call write~int(1 + #t~mem64, { base: #t~mem63!base, offset: 60 + #t~mem63!offset }, 4); [L1284] havoc #t~mem64; [L1284] havoc #t~mem63; [L1285] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149] COND TRUE 4368 == #t~mem28 [L1149] havoc #t~mem28; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1289] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1290] assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647; [L1290] ~ret~0 := #t~nondet65; [L1290] havoc #t~nondet65; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1291] COND TRUE 0 == ~blastFlag~0 [L1292] ~blastFlag~0 := 1; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1296] COND FALSE !(~ret~0 <= 0) [L1301] FCALL call write~int(4384, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1302] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1303] FCALL call #t~mem66 := read~$Pointer$({ base: ~s!base, offset: 20 + ~s!offset }, 4); [L1303] FCALL call #t~mem67 := read~$Pointer$({ base: ~s!base, offset: 16 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem66!base=0, #t~mem66!offset=1, #t~mem67!base=0, #t~mem67!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1303] COND TRUE (#t~mem66!base + #t~mem66!offset) % 4294967296 != (#t~mem67!base + #t~mem67!offset) % 4294967296 [L1303] havoc #t~mem66; [L1303] havoc #t~mem67; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149] COND FALSE !(4368 == #t~mem28) [L1149] havoc #t~mem28; [L1152] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1152] COND FALSE !(4369 == #t~mem29) [L1152] havoc #t~mem29; [L1155] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1155] COND TRUE 4384 == #t~mem30 [L1155] havoc #t~mem30; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1311] assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647; [L1311] ~ret~0 := #t~nondet68; [L1311] havoc #t~nondet68; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1312] COND TRUE 1 == ~blastFlag~0 [L1313] ~blastFlag~0 := 2; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1317] COND FALSE !(~ret~0 <= 0) [L1322] FCALL call #t~mem69 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem69=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1322-L1326] COND FALSE !(0 != #t~mem69) [L1322] havoc #t~mem69; [L1325] FCALL call write~int(4400, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1327] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149] COND FALSE !(4368 == #t~mem28) [L1149] havoc #t~mem28; [L1152] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1152] COND FALSE !(4369 == #t~mem29) [L1152] havoc #t~mem29; [L1155] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1155] COND FALSE !(4384 == #t~mem30) [L1155] havoc #t~mem30; [L1158] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1158] COND FALSE !(4385 == #t~mem31) [L1158] havoc #t~mem31; [L1161] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1161] COND TRUE 4400 == #t~mem32 [L1161] havoc #t~mem32; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1331] FCALL call #t~mem70 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1331] FCALL call #t~mem71 := read~$Pointer$({ base: #t~mem70!base, offset: 836 + #t~mem70!offset }, 4); [L1331] FCALL call #t~mem72 := read~int({ base: #t~mem71!base, offset: 12 + #t~mem71!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem70!base=20506, #t~mem70!offset=0, #t~mem71!base=20502, #t~mem71!offset=0, #t~mem72=20537, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1331-L1345] COND FALSE !(0 != ~bitwiseAnd(#t~mem72, 256) % 4294967296) [L1331] havoc #t~mem70; [L1331] havoc #t~mem71; [L1331] havoc #t~mem72; [L1334] assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647; [L1334] ~ret~0 := #t~nondet73; [L1334] havoc #t~nondet73; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1335] COND TRUE 2 == ~blastFlag~0 [L1336] ~blastFlag~0 := 3; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1340] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1346] FCALL call write~int(4416, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1347] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149] COND FALSE !(4368 == #t~mem28) [L1149] havoc #t~mem28; [L1152] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1152] COND FALSE !(4369 == #t~mem29) [L1152] havoc #t~mem29; [L1155] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1155] COND FALSE !(4384 == #t~mem30) [L1155] havoc #t~mem30; [L1158] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1158] COND FALSE !(4385 == #t~mem31) [L1158] havoc #t~mem31; [L1161] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1161] COND FALSE !(4400 == #t~mem32) [L1161] havoc #t~mem32; [L1164] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1164] COND FALSE !(4401 == #t~mem33) [L1164] havoc #t~mem33; [L1167] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1167] COND TRUE 4416 == #t~mem34 [L1167] havoc #t~mem34; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1351] assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647; [L1351] ~ret~0 := #t~nondet74; [L1351] havoc #t~nondet74; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1352] COND TRUE 3 == ~blastFlag~0 [L1353] ~blastFlag~0 := 4; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1357] COND FALSE !(~ret~0 <= 0) [L1362] FCALL call write~int(4432, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1363] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1364] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1364] ~tmp___6~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1365] COND FALSE !(0 == ~tmp___6~0) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1149] COND FALSE !(4368 == #t~mem28) [L1149] havoc #t~mem28; [L1152] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1152] COND FALSE !(4369 == #t~mem29) [L1152] havoc #t~mem29; [L1155] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1155] COND FALSE !(4384 == #t~mem30) [L1155] havoc #t~mem30; [L1158] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1158] COND FALSE !(4385 == #t~mem31) [L1158] havoc #t~mem31; [L1161] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1161] COND FALSE !(4400 == #t~mem32) [L1161] havoc #t~mem32; [L1164] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1164] COND FALSE !(4401 == #t~mem33) [L1164] havoc #t~mem33; [L1167] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1167] COND FALSE !(4416 == #t~mem34) [L1167] havoc #t~mem34; [L1170] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1170] COND FALSE !(4417 == #t~mem35) [L1170] havoc #t~mem35; [L1173] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1173] COND TRUE 4432 == #t~mem36 [L1173] havoc #t~mem36; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1374] assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647; [L1374] ~ret~0 := #t~nondet76; [L1374] havoc #t~nondet76; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1375] COND FALSE !(5 == ~blastFlag~0) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1380] COND FALSE !(~ret~0 <= 0) [L1385] FCALL call write~int(4448, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1386] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1149] COND FALSE !(4368 == #t~mem28) [L1149] havoc #t~mem28; [L1152] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1152] COND FALSE !(4369 == #t~mem29) [L1152] havoc #t~mem29; [L1155] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1155] COND FALSE !(4384 == #t~mem30) [L1155] havoc #t~mem30; [L1158] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1158] COND FALSE !(4385 == #t~mem31) [L1158] havoc #t~mem31; [L1161] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1161] COND FALSE !(4400 == #t~mem32) [L1161] havoc #t~mem32; [L1164] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1164] COND FALSE !(4401 == #t~mem33) [L1164] havoc #t~mem33; [L1167] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1167] COND FALSE !(4416 == #t~mem34) [L1167] havoc #t~mem34; [L1170] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1170] COND FALSE !(4417 == #t~mem35) [L1170] havoc #t~mem35; [L1173] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1173] COND FALSE !(4432 == #t~mem36) [L1173] havoc #t~mem36; [L1176] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1176] COND FALSE !(4433 == #t~mem37) [L1176] havoc #t~mem37; [L1179] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1179] COND TRUE 4448 == #t~mem38 [L1179] havoc #t~mem38; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1390] assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647; [L1390] ~ret~0 := #t~nondet77; [L1390] havoc #t~nondet77; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=0, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1391] COND TRUE 4 == ~blastFlag~0 VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=0, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1646] assert false; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=0, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=20507, #NULL!offset=20535, old(#NULL!base)=20507, old(#NULL!offset)=20535, old(~#SSLv3_client_data~0!base)=20492, old(~#SSLv3_client_data~0!offset)=20488, old(~init~0)=20541, ~#SSLv3_client_data~0!base=20492, ~#SSLv3_client_data~0!offset=20488, ~init~0=20541] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_client_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_client_data~0!base, offset: ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 4 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 8 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 12 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 16 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 20 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 24 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 28 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 32 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 36 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 40 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 44 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 48 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 52 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 56 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 60 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 64 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 68 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 72 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 76 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 80 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 84 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 88 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 92 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 96 + ~#SSLv3_client_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=20507, old(#NULL!offset)=20535, old(~#SSLv3_client_data~0!base)=20492, old(~#SSLv3_client_data~0!offset)=20488, old(~init~0)=20541, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [L1065] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1065] ~s~0 := #t~malloc3; [L1069] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1069] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1070] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1070] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1071] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1071] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1072] FCALL call write~int(12292, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); [L1073] assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647; [L1073] FCALL call write~int(#t~nondet7, { base: ~s~0!base, offset: ~s~0!offset }, 4); [L1073] havoc #t~nondet7; VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=20501, #t~malloc3!offset=0, #t~malloc4!base=20506, #t~malloc4!offset=0, #t~malloc5!base=20521, #t~malloc5!offset=0, #t~malloc6!base=20484, #t~malloc6!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~init~0=1, ~s~0!base=20501, ~s~0!offset=0] [L1074] CALL call #t~ret8 := ssl3_connect(~s~0); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [L1079-L1648] ~s := #in~s; [L1080] ~buf~0 := #t~nondet9; [L1080] havoc #t~nondet9; [L1081] havoc ~tmp~2; [L1082] havoc ~l~0; [L1083] havoc ~num1~0; [L1084] havoc ~cb~0; [L1085] havoc ~ret~0; [L1086] havoc ~new_state~0; [L1087] havoc ~state~0; [L1088] havoc ~skip~0; [L1089] ~tmp___0~1 := #t~nondet10; [L1089] havoc #t~nondet10; [L1090] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1090] ~tmp___1~0 := #t~nondet11; [L1090] havoc #t~nondet11; [L1091] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1091] ~tmp___2~0 := #t~nondet12; [L1091] havoc #t~nondet12; [L1092] havoc ~tmp___3~0; [L1093] havoc ~tmp___4~0; [L1094] havoc ~tmp___5~0; [L1095] havoc ~tmp___6~0; [L1096] havoc ~tmp___7~0; [L1097] havoc ~tmp___8~0; [L1098] havoc ~tmp___9~0; [L1100] havoc ~blastFlag~0; [L1103] ~blastFlag~0 := 0; [L1104] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1104] FCALL call write~int(#t~nondet13, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1104] havoc #t~nondet13; [L1105] FCALL call write~int(12292, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1106] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1106] ~tmp~2 := #t~nondet14; [L1106] havoc #t~nondet14; [L1107] ~cb~0 := { base: 0, offset: 0 }; [L1108] ~ret~0 := -1; [L1109] ~skip~0 := 0; [L1110] FCALL call write~int(0, ~tmp___0~1, 4); [L1111] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem15!base=1, #t~mem15!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=0, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1111] COND TRUE 0 != (#t~mem15!base + #t~mem15!offset) % 4294967296 [L1111] havoc #t~mem15; [L1112] FCALL call #t~mem16 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1112] ~cb~0 := #t~mem16; [L1112] havoc #t~mem16; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1120] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] FCALL call write~int(1 + #t~mem21, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] havoc #t~mem21; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1121-L1129] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=12292, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1134] COND TRUE 12292 == #t~mem23 [L1134] havoc #t~mem23; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1237] FCALL call write~int(1, { base: ~s!base, offset: 40 + ~s!offset }, 4); [L1238] FCALL call write~int(4096, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1239] FCALL call #t~mem56 := read~$Pointer$({ base: ~s!base, offset: 204 + ~s!offset }, 4); [L1239] FCALL call #t~mem57 := read~int({ base: #t~mem56!base, offset: 64 + #t~mem56!offset }, 4); [L1239] FCALL call write~int(1 + #t~mem57, { base: #t~mem56!base, offset: 64 + #t~mem56!offset }, 4); [L1239] havoc #t~mem56; [L1239] havoc #t~mem57; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1244] FCALL call write~int(0, { base: ~s!base, offset: 36 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1245] COND TRUE 0 != (~cb~0!base + ~cb~0!offset) % 4294967296 VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1250] FCALL call #t~mem58 := read~int({ base: ~s!base, offset: ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem58=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1250] COND FALSE !(768 != ~bitwiseAnd(#t~mem58, 65280)) [L1250] havoc #t~mem58; [L1256] FCALL call write~int(4096, { base: ~s!base, offset: 4 + ~s!offset }, 4); [L1257] FCALL call #t~mem59 := read~$Pointer$({ base: ~s!base, offset: 60 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem59!base=-1, #t~mem59!offset=2, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1257] COND FALSE !(0 == (#t~mem59!base + #t~mem59!offset) % 4294967296) [L1257] havoc #t~mem59; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1269] assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647; [L1269] ~tmp___4~0 := #t~nondet61; [L1269] havoc #t~nondet61; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp~2=0] [L1270] COND FALSE !(0 == ~tmp___4~0) [L1276] assume -2147483648 <= #t~nondet62 && #t~nondet62 <= 2147483647; [L1276] ~tmp___5~0 := #t~nondet62; [L1276] havoc #t~nondet62; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1277] COND FALSE !(0 == ~tmp___5~0) [L1283] FCALL call write~int(4368, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1284] FCALL call #t~mem63 := read~$Pointer$({ base: ~s!base, offset: 204 + ~s!offset }, 4); [L1284] FCALL call #t~mem64 := read~int({ base: #t~mem63!base, offset: 60 + #t~mem63!offset }, 4); [L1284] FCALL call write~int(1 + #t~mem64, { base: #t~mem63!base, offset: 60 + #t~mem63!offset }, 4); [L1284] havoc #t~mem64; [L1284] havoc #t~mem63; [L1285] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149] COND TRUE 4368 == #t~mem28 [L1149] havoc #t~mem28; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1289] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1290] assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647; [L1290] ~ret~0 := #t~nondet65; [L1290] havoc #t~nondet65; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1291] COND TRUE 0 == ~blastFlag~0 [L1292] ~blastFlag~0 := 1; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1296] COND FALSE !(~ret~0 <= 0) [L1301] FCALL call write~int(4384, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1302] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1303] FCALL call #t~mem66 := read~$Pointer$({ base: ~s!base, offset: 20 + ~s!offset }, 4); [L1303] FCALL call #t~mem67 := read~$Pointer$({ base: ~s!base, offset: 16 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem66!base=0, #t~mem66!offset=1, #t~mem67!base=0, #t~mem67!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1303] COND TRUE (#t~mem66!base + #t~mem66!offset) % 4294967296 != (#t~mem67!base + #t~mem67!offset) % 4294967296 [L1303] havoc #t~mem66; [L1303] havoc #t~mem67; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149] COND FALSE !(4368 == #t~mem28) [L1149] havoc #t~mem28; [L1152] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1152] COND FALSE !(4369 == #t~mem29) [L1152] havoc #t~mem29; [L1155] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1155] COND TRUE 4384 == #t~mem30 [L1155] havoc #t~mem30; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1311] assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647; [L1311] ~ret~0 := #t~nondet68; [L1311] havoc #t~nondet68; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1312] COND TRUE 1 == ~blastFlag~0 [L1313] ~blastFlag~0 := 2; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1317] COND FALSE !(~ret~0 <= 0) [L1322] FCALL call #t~mem69 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem69=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1322-L1326] COND FALSE !(0 != #t~mem69) [L1322] havoc #t~mem69; [L1325] FCALL call write~int(4400, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1327] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149] COND FALSE !(4368 == #t~mem28) [L1149] havoc #t~mem28; [L1152] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1152] COND FALSE !(4369 == #t~mem29) [L1152] havoc #t~mem29; [L1155] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1155] COND FALSE !(4384 == #t~mem30) [L1155] havoc #t~mem30; [L1158] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1158] COND FALSE !(4385 == #t~mem31) [L1158] havoc #t~mem31; [L1161] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1161] COND TRUE 4400 == #t~mem32 [L1161] havoc #t~mem32; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1331] FCALL call #t~mem70 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1331] FCALL call #t~mem71 := read~$Pointer$({ base: #t~mem70!base, offset: 836 + #t~mem70!offset }, 4); [L1331] FCALL call #t~mem72 := read~int({ base: #t~mem71!base, offset: 12 + #t~mem71!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem70!base=20506, #t~mem70!offset=0, #t~mem71!base=20502, #t~mem71!offset=0, #t~mem72=20537, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1331-L1345] COND FALSE !(0 != ~bitwiseAnd(#t~mem72, 256) % 4294967296) [L1331] havoc #t~mem70; [L1331] havoc #t~mem71; [L1331] havoc #t~mem72; [L1334] assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647; [L1334] ~ret~0 := #t~nondet73; [L1334] havoc #t~nondet73; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1335] COND TRUE 2 == ~blastFlag~0 [L1336] ~blastFlag~0 := 3; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1340] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1346] FCALL call write~int(4416, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1347] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149] COND FALSE !(4368 == #t~mem28) [L1149] havoc #t~mem28; [L1152] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1152] COND FALSE !(4369 == #t~mem29) [L1152] havoc #t~mem29; [L1155] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1155] COND FALSE !(4384 == #t~mem30) [L1155] havoc #t~mem30; [L1158] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1158] COND FALSE !(4385 == #t~mem31) [L1158] havoc #t~mem31; [L1161] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1161] COND FALSE !(4400 == #t~mem32) [L1161] havoc #t~mem32; [L1164] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1164] COND FALSE !(4401 == #t~mem33) [L1164] havoc #t~mem33; [L1167] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1167] COND TRUE 4416 == #t~mem34 [L1167] havoc #t~mem34; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1351] assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647; [L1351] ~ret~0 := #t~nondet74; [L1351] havoc #t~nondet74; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1352] COND TRUE 3 == ~blastFlag~0 [L1353] ~blastFlag~0 := 4; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1357] COND FALSE !(~ret~0 <= 0) [L1362] FCALL call write~int(4432, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1363] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1364] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1364] ~tmp___6~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1365] COND FALSE !(0 == ~tmp___6~0) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1149] COND FALSE !(4368 == #t~mem28) [L1149] havoc #t~mem28; [L1152] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1152] COND FALSE !(4369 == #t~mem29) [L1152] havoc #t~mem29; [L1155] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1155] COND FALSE !(4384 == #t~mem30) [L1155] havoc #t~mem30; [L1158] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1158] COND FALSE !(4385 == #t~mem31) [L1158] havoc #t~mem31; [L1161] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1161] COND FALSE !(4400 == #t~mem32) [L1161] havoc #t~mem32; [L1164] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1164] COND FALSE !(4401 == #t~mem33) [L1164] havoc #t~mem33; [L1167] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1167] COND FALSE !(4416 == #t~mem34) [L1167] havoc #t~mem34; [L1170] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1170] COND FALSE !(4417 == #t~mem35) [L1170] havoc #t~mem35; [L1173] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1173] COND TRUE 4432 == #t~mem36 [L1173] havoc #t~mem36; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1374] assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647; [L1374] ~ret~0 := #t~nondet76; [L1374] havoc #t~nondet76; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1375] COND FALSE !(5 == ~blastFlag~0) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1380] COND FALSE !(~ret~0 <= 0) [L1385] FCALL call write~int(4448, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1386] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1149] COND FALSE !(4368 == #t~mem28) [L1149] havoc #t~mem28; [L1152] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1152] COND FALSE !(4369 == #t~mem29) [L1152] havoc #t~mem29; [L1155] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1155] COND FALSE !(4384 == #t~mem30) [L1155] havoc #t~mem30; [L1158] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1158] COND FALSE !(4385 == #t~mem31) [L1158] havoc #t~mem31; [L1161] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1161] COND FALSE !(4400 == #t~mem32) [L1161] havoc #t~mem32; [L1164] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1164] COND FALSE !(4401 == #t~mem33) [L1164] havoc #t~mem33; [L1167] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1167] COND FALSE !(4416 == #t~mem34) [L1167] havoc #t~mem34; [L1170] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1170] COND FALSE !(4417 == #t~mem35) [L1170] havoc #t~mem35; [L1173] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1173] COND FALSE !(4432 == #t~mem36) [L1173] havoc #t~mem36; [L1176] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1176] COND FALSE !(4433 == #t~mem37) [L1176] havoc #t~mem37; [L1179] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1179] COND TRUE 4448 == #t~mem38 [L1179] havoc #t~mem38; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1390] assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647; [L1390] ~ret~0 := #t~nondet77; [L1390] havoc #t~nondet77; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=0, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1391] COND TRUE 4 == ~blastFlag~0 VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=0, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1646] assert false; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=0, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] ----- [2018-11-23 12:47:04,399 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 20492 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# [2018-11-23 12:47:04,401 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 20488 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=20507, #NULL!offset=20535, old(#NULL!base)=20507, old(#NULL!offset)=20535, old(~#SSLv3_client_data~0!base)=20492, old(~#SSLv3_client_data~0!offset)=20488, old(~init~0)=20541, ~#SSLv3_client_data~0!base=20492, ~#SSLv3_client_data~0!offset=20488, ~init~0=20541] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_client_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_client_data~0!base, offset: ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 4 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 8 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 12 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 16 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 20 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 24 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 28 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 32 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 36 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 40 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 44 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 48 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 52 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 56 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 60 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 64 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 68 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 72 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 76 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 80 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 84 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 88 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 92 + ~#SSLv3_client_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 96 + ~#SSLv3_client_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=20507, old(#NULL!offset)=20535, old(~#SSLv3_client_data~0!base)=20492, old(~#SSLv3_client_data~0!offset)=20488, old(~init~0)=20541, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [L1065] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1065] ~s~0 := #t~malloc3; [L1069] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1069] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1070] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1070] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1071] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1071] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1072] FCALL call write~int(12292, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); [L1073] assume -2147483648 <= #t~nondet7 && #t~nondet7 <= 2147483647; [L1073] FCALL call write~int(#t~nondet7, { base: ~s~0!base, offset: ~s~0!offset }, 4); [L1073] havoc #t~nondet7; VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=20501, #t~malloc3!offset=0, #t~malloc4!base=20506, #t~malloc4!offset=0, #t~malloc5!base=20521, #t~malloc5!offset=0, #t~malloc6!base=20484, #t~malloc6!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~init~0=1, ~s~0!base=20501, ~s~0!offset=0] [L1074] CALL call #t~ret8 := ssl3_connect(~s~0); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [L1079-L1648] ~s := #in~s; [L1080] ~buf~0 := #t~nondet9; [L1080] havoc #t~nondet9; [L1081] havoc ~tmp~2; [L1082] havoc ~l~0; [L1083] havoc ~num1~0; [L1084] havoc ~cb~0; [L1085] havoc ~ret~0; [L1086] havoc ~new_state~0; [L1087] havoc ~state~0; [L1088] havoc ~skip~0; [L1089] ~tmp___0~1 := #t~nondet10; [L1089] havoc #t~nondet10; [L1090] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1090] ~tmp___1~0 := #t~nondet11; [L1090] havoc #t~nondet11; [L1091] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1091] ~tmp___2~0 := #t~nondet12; [L1091] havoc #t~nondet12; [L1092] havoc ~tmp___3~0; [L1093] havoc ~tmp___4~0; [L1094] havoc ~tmp___5~0; [L1095] havoc ~tmp___6~0; [L1096] havoc ~tmp___7~0; [L1097] havoc ~tmp___8~0; [L1098] havoc ~tmp___9~0; [L1100] havoc ~blastFlag~0; [L1103] ~blastFlag~0 := 0; [L1104] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1104] FCALL call write~int(#t~nondet13, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1104] havoc #t~nondet13; [L1105] FCALL call write~int(12292, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1106] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1106] ~tmp~2 := #t~nondet14; [L1106] havoc #t~nondet14; [L1107] ~cb~0 := { base: 0, offset: 0 }; [L1108] ~ret~0 := -1; [L1109] ~skip~0 := 0; [L1110] FCALL call write~int(0, ~tmp___0~1, 4); [L1111] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem15!base=1, #t~mem15!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=0, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1111] COND TRUE 0 != (#t~mem15!base + #t~mem15!offset) % 4294967296 [L1111] havoc #t~mem15; [L1112] FCALL call #t~mem16 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1112] ~cb~0 := #t~mem16; [L1112] havoc #t~mem16; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1120] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] FCALL call write~int(1 + #t~mem21, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] havoc #t~mem21; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1121-L1129] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=12292, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1134] COND TRUE 12292 == #t~mem23 [L1134] havoc #t~mem23; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1237] FCALL call write~int(1, { base: ~s!base, offset: 40 + ~s!offset }, 4); [L1238] FCALL call write~int(4096, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1239] FCALL call #t~mem56 := read~$Pointer$({ base: ~s!base, offset: 204 + ~s!offset }, 4); [L1239] FCALL call #t~mem57 := read~int({ base: #t~mem56!base, offset: 64 + #t~mem56!offset }, 4); [L1239] FCALL call write~int(1 + #t~mem57, { base: #t~mem56!base, offset: 64 + #t~mem56!offset }, 4); [L1239] havoc #t~mem56; [L1239] havoc #t~mem57; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1244] FCALL call write~int(0, { base: ~s!base, offset: 36 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1245] COND TRUE 0 != (~cb~0!base + ~cb~0!offset) % 4294967296 VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1250] FCALL call #t~mem58 := read~int({ base: ~s!base, offset: ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem58=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1250] COND FALSE !(768 != ~bitwiseAnd(#t~mem58, 65280)) [L1250] havoc #t~mem58; [L1256] FCALL call write~int(4096, { base: ~s!base, offset: 4 + ~s!offset }, 4); [L1257] FCALL call #t~mem59 := read~$Pointer$({ base: ~s!base, offset: 60 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem59!base=-1, #t~mem59!offset=2, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1257] COND FALSE !(0 == (#t~mem59!base + #t~mem59!offset) % 4294967296) [L1257] havoc #t~mem59; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1269] assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647; [L1269] ~tmp___4~0 := #t~nondet61; [L1269] havoc #t~nondet61; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp~2=0] [L1270] COND FALSE !(0 == ~tmp___4~0) [L1276] assume -2147483648 <= #t~nondet62 && #t~nondet62 <= 2147483647; [L1276] ~tmp___5~0 := #t~nondet62; [L1276] havoc #t~nondet62; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1277] COND FALSE !(0 == ~tmp___5~0) [L1283] FCALL call write~int(4368, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1284] FCALL call #t~mem63 := read~$Pointer$({ base: ~s!base, offset: 204 + ~s!offset }, 4); [L1284] FCALL call #t~mem64 := read~int({ base: #t~mem63!base, offset: 60 + #t~mem63!offset }, 4); [L1284] FCALL call write~int(1 + #t~mem64, { base: #t~mem63!base, offset: 60 + #t~mem63!offset }, 4); [L1284] havoc #t~mem64; [L1284] havoc #t~mem63; [L1285] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4368, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149] COND TRUE 4368 == #t~mem28 [L1149] havoc #t~mem28; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1289] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1290] assume -2147483648 <= #t~nondet65 && #t~nondet65 <= 2147483647; [L1290] ~ret~0 := #t~nondet65; [L1290] havoc #t~nondet65; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1291] COND TRUE 0 == ~blastFlag~0 [L1292] ~blastFlag~0 := 1; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1296] COND FALSE !(~ret~0 <= 0) [L1301] FCALL call write~int(4384, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1302] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1303] FCALL call #t~mem66 := read~$Pointer$({ base: ~s!base, offset: 20 + ~s!offset }, 4); [L1303] FCALL call #t~mem67 := read~$Pointer$({ base: ~s!base, offset: 16 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem66!base=0, #t~mem66!offset=1, #t~mem67!base=0, #t~mem67!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1303] COND TRUE (#t~mem66!base + #t~mem66!offset) % 4294967296 != (#t~mem67!base + #t~mem67!offset) % 4294967296 [L1303] havoc #t~mem66; [L1303] havoc #t~mem67; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149] COND FALSE !(4368 == #t~mem28) [L1149] havoc #t~mem28; [L1152] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1152] COND FALSE !(4369 == #t~mem29) [L1152] havoc #t~mem29; [L1155] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=4384, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1155] COND TRUE 4384 == #t~mem30 [L1155] havoc #t~mem30; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1311] assume -2147483648 <= #t~nondet68 && #t~nondet68 <= 2147483647; [L1311] ~ret~0 := #t~nondet68; [L1311] havoc #t~nondet68; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1312] COND TRUE 1 == ~blastFlag~0 [L1313] ~blastFlag~0 := 2; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1317] COND FALSE !(~ret~0 <= 0) [L1322] FCALL call #t~mem69 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem69=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1322-L1326] COND FALSE !(0 != #t~mem69) [L1322] havoc #t~mem69; [L1325] FCALL call write~int(4400, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1327] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149] COND FALSE !(4368 == #t~mem28) [L1149] havoc #t~mem28; [L1152] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1152] COND FALSE !(4369 == #t~mem29) [L1152] havoc #t~mem29; [L1155] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1155] COND FALSE !(4384 == #t~mem30) [L1155] havoc #t~mem30; [L1158] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1158] COND FALSE !(4385 == #t~mem31) [L1158] havoc #t~mem31; [L1161] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=4400, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1161] COND TRUE 4400 == #t~mem32 [L1161] havoc #t~mem32; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1331] FCALL call #t~mem70 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1331] FCALL call #t~mem71 := read~$Pointer$({ base: #t~mem70!base, offset: 836 + #t~mem70!offset }, 4); [L1331] FCALL call #t~mem72 := read~int({ base: #t~mem71!base, offset: 12 + #t~mem71!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem70!base=20506, #t~mem70!offset=0, #t~mem71!base=20502, #t~mem71!offset=0, #t~mem72=20537, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=1, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1331-L1345] COND FALSE !(0 != ~bitwiseAnd(#t~mem72, 256) % 4294967296) [L1331] havoc #t~mem70; [L1331] havoc #t~mem71; [L1331] havoc #t~mem72; [L1334] assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647; [L1334] ~ret~0 := #t~nondet73; [L1334] havoc #t~nondet73; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1335] COND TRUE 2 == ~blastFlag~0 [L1336] ~blastFlag~0 := 3; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1340] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1346] FCALL call write~int(4416, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1347] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1149] COND FALSE !(4368 == #t~mem28) [L1149] havoc #t~mem28; [L1152] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1152] COND FALSE !(4369 == #t~mem29) [L1152] havoc #t~mem29; [L1155] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1155] COND FALSE !(4384 == #t~mem30) [L1155] havoc #t~mem30; [L1158] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1158] COND FALSE !(4385 == #t~mem31) [L1158] havoc #t~mem31; [L1161] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1161] COND FALSE !(4400 == #t~mem32) [L1161] havoc #t~mem32; [L1164] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1164] COND FALSE !(4401 == #t~mem33) [L1164] havoc #t~mem33; [L1167] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=4416, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1167] COND TRUE 4416 == #t~mem34 [L1167] havoc #t~mem34; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=5, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1351] assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647; [L1351] ~ret~0 := #t~nondet74; [L1351] havoc #t~nondet74; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1352] COND TRUE 3 == ~blastFlag~0 [L1353] ~blastFlag~0 := 4; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1357] COND FALSE !(~ret~0 <= 0) [L1362] FCALL call write~int(4432, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1363] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1364] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1364] ~tmp___6~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1365] COND FALSE !(0 == ~tmp___6~0) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1149] COND FALSE !(4368 == #t~mem28) [L1149] havoc #t~mem28; [L1152] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1152] COND FALSE !(4369 == #t~mem29) [L1152] havoc #t~mem29; [L1155] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1155] COND FALSE !(4384 == #t~mem30) [L1155] havoc #t~mem30; [L1158] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1158] COND FALSE !(4385 == #t~mem31) [L1158] havoc #t~mem31; [L1161] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1161] COND FALSE !(4400 == #t~mem32) [L1161] havoc #t~mem32; [L1164] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1164] COND FALSE !(4401 == #t~mem33) [L1164] havoc #t~mem33; [L1167] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1167] COND FALSE !(4416 == #t~mem34) [L1167] havoc #t~mem34; [L1170] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1170] COND FALSE !(4417 == #t~mem35) [L1170] havoc #t~mem35; [L1173] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=4432, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1173] COND TRUE 4432 == #t~mem36 [L1173] havoc #t~mem36; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=6, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1374] assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647; [L1374] ~ret~0 := #t~nondet76; [L1374] havoc #t~nondet76; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1375] COND FALSE !(5 == ~blastFlag~0) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1380] COND FALSE !(~ret~0 <= 0) [L1385] FCALL call write~int(4448, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1386] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1605] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=20506, #t~mem128!offset=0, #t~mem129=20542, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1605] COND FALSE !(0 == #t~mem129) [L1605] havoc #t~mem129; [L1605] havoc #t~mem128; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1634] ~skip~0 := 0; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1131-L1635] COND FALSE !(false) VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1133] ~state~0 := #t~mem22; [L1133] havoc #t~mem22; [L1134] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1134] COND FALSE !(12292 == #t~mem23) [L1134] havoc #t~mem23; [L1137] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1137] COND FALSE !(16384 == #t~mem24) [L1137] havoc #t~mem24; [L1140] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1140] COND FALSE !(4096 == #t~mem25) [L1140] havoc #t~mem25; [L1143] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1143] COND FALSE !(20480 == #t~mem26) [L1143] havoc #t~mem26; [L1146] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1146] COND FALSE !(4099 == #t~mem27) [L1146] havoc #t~mem27; [L1149] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1149] COND FALSE !(4368 == #t~mem28) [L1149] havoc #t~mem28; [L1152] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1152] COND FALSE !(4369 == #t~mem29) [L1152] havoc #t~mem29; [L1155] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1155] COND FALSE !(4384 == #t~mem30) [L1155] havoc #t~mem30; [L1158] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1158] COND FALSE !(4385 == #t~mem31) [L1158] havoc #t~mem31; [L1161] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1161] COND FALSE !(4400 == #t~mem32) [L1161] havoc #t~mem32; [L1164] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1164] COND FALSE !(4401 == #t~mem33) [L1164] havoc #t~mem33; [L1167] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1167] COND FALSE !(4416 == #t~mem34) [L1167] havoc #t~mem34; [L1170] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1170] COND FALSE !(4417 == #t~mem35) [L1170] havoc #t~mem35; [L1173] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1173] COND FALSE !(4432 == #t~mem36) [L1173] havoc #t~mem36; [L1176] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1176] COND FALSE !(4433 == #t~mem37) [L1176] havoc #t~mem37; [L1179] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=4448, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1179] COND TRUE 4448 == #t~mem38 [L1179] havoc #t~mem38; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=7, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1390] assume -2147483648 <= #t~nondet77 && #t~nondet77 <= 2147483647; [L1390] ~ret~0 := #t~nondet77; [L1390] havoc #t~nondet77; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=0, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1391] COND TRUE 4 == ~blastFlag~0 VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=0, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1646] assert false; VAL [#in~s!base=20501, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20494, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20511, ~buf~0!offset=20517, ~cb~0!base=1, ~cb~0!offset=0, ~init~0=1, ~ret~0=0, ~s!base=20501, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20501, ~tmp___0~1!offset=204, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_client_data ; VAL [\old(init)=20541, \old(SSLv3_client_data)=null, \old(SSLv3_client_data)=null, init=1, SSLv3_client_data={20494:0}] [L1065] SSL *s = (SSL*)malloc(sizeof(SSL)) ; [L1069] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1070] s->ctx = malloc(sizeof(SSL_CTX)) [L1071] s->session = malloc(sizeof(SSL_SESSION)) [L1072] s->state = 12292 [L1073] s->version = __VERIFIER_nondet_int() [L1074] CALL ssl3_connect(s) VAL [init=1, s={20501:0}, SSLv3_client_data={20494:0}] [L1080] BUF_MEM *buf = __VERIFIER_nondet_pointer() ; [L1081] unsigned long tmp ; [L1082] unsigned long l ; [L1083] long num1 ; [L1084] void (*cb)() ; [L1085] int ret ; [L1086] int new_state ; [L1087] int state ; [L1088] int skip ; [L1089] int *tmp___0 = __VERIFIER_nondet_pointer() ; [L1090] int tmp___1 = __VERIFIER_nondet_int() ; [L1091] int tmp___2 = __VERIFIER_nondet_int() ; [L1092] int tmp___3 ; [L1093] int tmp___4 ; [L1094] int tmp___5 ; [L1095] int tmp___6 ; [L1096] int tmp___7 ; [L1097] int tmp___8 ; [L1098] long tmp___9 ; [L1100] int blastFlag ; [L1103] blastFlag = 0 [L1104] s->hit=__VERIFIER_nondet_int () [L1105] s->state = 12292 [L1106] tmp = __VERIFIER_nondet_int() [L1107] cb = (void (*)())((void *)0) [L1108] ret = -1 [L1109] skip = 0 [L1110] *tmp___0 = 0 [L1111] EXPR s->info_callback VAL [={0:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, s->info_callback={1:0}, skip=0, SSLv3_client_data={20494:0}, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0] [L1111] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1112] EXPR s->info_callback [L1112] cb = s->info_callback [L1120] EXPR s->in_handshake [L1120] s->in_handshake += 1 [L1121] COND FALSE !(tmp___1 & 12288) VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0] [L1131] COND TRUE 1 VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0] [L1133] EXPR s->state [L1133] state = s->state [L1134] EXPR s->state VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, s->state=12292, skip=0, SSLv3_client_data={20494:0}, state=12292, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0] [L1134] COND TRUE s->state == 12292 [L1237] s->new_session = 1 [L1238] s->state = 4096 [L1239] EXPR s->ctx [L1239] EXPR (s->ctx)->stats.sess_connect_renegotiate [L1239] (s->ctx)->stats.sess_connect_renegotiate += 1 [L1244] s->server = 0 VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=12292, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0] [L1245] COND TRUE (unsigned long )cb != (unsigned long )((void *)0) VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=12292, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0] [L1250] EXPR s->version VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, s->version=0, skip=0, SSLv3_client_data={20494:0}, state=12292, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0] [L1250] COND FALSE !((s->version & 65280) != 768) [L1256] s->type = 4096 [L1257] EXPR s->init_buf VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, s->init_buf={-1:2}, skip=0, SSLv3_client_data={20494:0}, state=12292, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0] [L1257] COND FALSE !((unsigned long )s->init_buf == (unsigned long )((void *)0)) [L1269] tmp___4 = __VERIFIER_nondet_int() [L1270] COND FALSE !(! tmp___4) [L1276] tmp___5 = __VERIFIER_nondet_int() [L1277] COND FALSE !(! tmp___5) [L1283] s->state = 4368 [L1284] EXPR s->ctx [L1284] EXPR (s->ctx)->stats.sess_connect [L1284] (s->ctx)->stats.sess_connect += 1 [L1285] s->init_num = 0 VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=12292, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1605] EXPR s->s3 [L1605] EXPR (s->s3)->tmp.reuse_message VAL [={1:0}, (s->s3)->tmp.reuse_message=20542, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, s->s3={20506:0}, skip=0, SSLv3_client_data={20494:0}, state=12292, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1605] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1634] skip = 0 VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=12292, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1131] COND TRUE 1 VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=12292, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1133] EXPR s->state [L1133] state = s->state [L1134] EXPR s->state VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, s->state=4368, skip=0, SSLv3_client_data={20494:0}, state=4368, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1134] COND FALSE !(s->state == 12292) [L1137] EXPR s->state VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, s->state=4368, skip=0, SSLv3_client_data={20494:0}, state=4368, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1137] COND FALSE !(s->state == 16384) [L1140] EXPR s->state VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, s->state=4368, skip=0, SSLv3_client_data={20494:0}, state=4368, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1140] COND FALSE !(s->state == 4096) [L1143] EXPR s->state VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, s->state=4368, skip=0, SSLv3_client_data={20494:0}, state=4368, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1143] COND FALSE !(s->state == 20480) [L1146] EXPR s->state VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, s->state=4368, skip=0, SSLv3_client_data={20494:0}, state=4368, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1146] COND FALSE !(s->state == 4099) [L1149] EXPR s->state VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, s->state=4368, skip=0, SSLv3_client_data={20494:0}, state=4368, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1149] COND TRUE s->state == 4368 [L1289] s->shutdown = 0 [L1290] ret = __VERIFIER_nondet_int() [L1291] COND TRUE blastFlag == 0 [L1292] blastFlag = 1 VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4368, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1296] COND FALSE !(ret <= 0) [L1301] s->state = 4384 [L1302] s->init_num = 0 [L1303] EXPR s->bbio [L1303] EXPR s->wbio VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->bbio={0:1}, s->wbio={0:0}, skip=0, SSLv3_client_data={20494:0}, state=4368, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1303] COND TRUE (unsigned long )s->bbio != (unsigned long )s->wbio [L1605] EXPR s->s3 [L1605] EXPR (s->s3)->tmp.reuse_message VAL [={1:0}, (s->s3)->tmp.reuse_message=20542, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->s3={20506:0}, skip=0, SSLv3_client_data={20494:0}, state=4368, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1605] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1634] skip = 0 VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4368, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1131] COND TRUE 1 VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4368, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1133] EXPR s->state [L1133] state = s->state [L1134] EXPR s->state VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4384, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1134] COND FALSE !(s->state == 12292) [L1137] EXPR s->state VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4384, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1137] COND FALSE !(s->state == 16384) [L1140] EXPR s->state VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4384, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1140] COND FALSE !(s->state == 4096) [L1143] EXPR s->state VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4384, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1143] COND FALSE !(s->state == 20480) [L1146] EXPR s->state VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4384, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1146] COND FALSE !(s->state == 4099) [L1149] EXPR s->state VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4384, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1149] COND FALSE !(s->state == 4368) [L1152] EXPR s->state VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4384, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1152] COND FALSE !(s->state == 4369) [L1155] EXPR s->state VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4384, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1155] COND TRUE s->state == 4384 [L1311] ret = __VERIFIER_nondet_int() [L1312] COND TRUE blastFlag == 1 [L1313] blastFlag = 2 VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1317] COND FALSE !(ret <= 0) [L1322] s->hit VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->hit=0, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1322] COND FALSE !(s->hit) [L1325] s->state = 4400 VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1327] s->init_num = 0 VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1605] EXPR s->s3 [L1605] EXPR (s->s3)->tmp.reuse_message VAL [={1:0}, (s->s3)->tmp.reuse_message=20542, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->s3={20506:0}, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1605] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1634] skip = 0 VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1131] COND TRUE 1 VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1133] EXPR s->state [L1133] state = s->state [L1134] EXPR s->state VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4400, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1134] COND FALSE !(s->state == 12292) [L1137] EXPR s->state VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4400, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1137] COND FALSE !(s->state == 16384) [L1140] EXPR s->state VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4400, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1140] COND FALSE !(s->state == 4096) [L1143] EXPR s->state VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4400, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1143] COND FALSE !(s->state == 20480) [L1146] EXPR s->state VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4400, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1146] COND FALSE !(s->state == 4099) [L1149] EXPR s->state VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4400, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1149] COND FALSE !(s->state == 4368) [L1152] EXPR s->state VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4400, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1152] COND FALSE !(s->state == 4369) [L1155] EXPR s->state VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4400, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1155] COND FALSE !(s->state == 4384) [L1158] EXPR s->state VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4400, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1158] COND FALSE !(s->state == 4385) [L1161] EXPR s->state VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4400, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1161] COND TRUE s->state == 4400 [L1331] EXPR s->s3 [L1331] EXPR (s->s3)->tmp.new_cipher [L1331] EXPR ((s->s3)->tmp.new_cipher)->algorithms VAL [={1:0}, ((s->s3)->tmp.new_cipher)->algorithms=20537, (s->s3)->tmp.new_cipher={20502:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->s3={20506:0}, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1331] COND FALSE !(((s->s3)->tmp.new_cipher)->algorithms & 256UL) [L1334] ret = __VERIFIER_nondet_int() [L1335] COND TRUE blastFlag == 2 [L1336] blastFlag = 3 VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1340] COND FALSE !(ret <= 0) VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1346] s->state = 4416 [L1347] s->init_num = 0 VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1605] EXPR s->s3 [L1605] EXPR (s->s3)->tmp.reuse_message VAL [={1:0}, (s->s3)->tmp.reuse_message=20542, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->s3={20506:0}, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1605] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1634] skip = 0 VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1131] COND TRUE 1 VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1133] EXPR s->state [L1133] state = s->state [L1134] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1134] COND FALSE !(s->state == 12292) [L1137] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1137] COND FALSE !(s->state == 16384) [L1140] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1140] COND FALSE !(s->state == 4096) [L1143] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1143] COND FALSE !(s->state == 20480) [L1146] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1146] COND FALSE !(s->state == 4099) [L1149] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1149] COND FALSE !(s->state == 4368) [L1152] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1152] COND FALSE !(s->state == 4369) [L1155] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1155] COND FALSE !(s->state == 4384) [L1158] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1158] COND FALSE !(s->state == 4385) [L1161] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1161] COND FALSE !(s->state == 4400) [L1164] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1164] COND FALSE !(s->state == 4401) [L1167] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1167] COND TRUE s->state == 4416 [L1351] ret = __VERIFIER_nondet_int() [L1352] COND TRUE blastFlag == 3 [L1353] blastFlag = 4 VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1357] COND FALSE !(ret <= 0) [L1362] s->state = 4432 [L1363] s->init_num = 0 [L1364] tmp___6 = __VERIFIER_nondet_int() [L1365] COND FALSE !(! tmp___6) VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1605] EXPR s->s3 [L1605] EXPR (s->s3)->tmp.reuse_message VAL [={1:0}, (s->s3)->tmp.reuse_message=20542, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->s3={20506:0}, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1605] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1634] skip = 0 VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1131] COND TRUE 1 VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1133] EXPR s->state [L1133] state = s->state [L1134] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1134] COND FALSE !(s->state == 12292) [L1137] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1137] COND FALSE !(s->state == 16384) [L1140] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1140] COND FALSE !(s->state == 4096) [L1143] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1143] COND FALSE !(s->state == 20480) [L1146] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1146] COND FALSE !(s->state == 4099) [L1149] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1149] COND FALSE !(s->state == 4368) [L1152] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1152] COND FALSE !(s->state == 4369) [L1155] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1155] COND FALSE !(s->state == 4384) [L1158] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1158] COND FALSE !(s->state == 4385) [L1161] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1161] COND FALSE !(s->state == 4400) [L1164] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1164] COND FALSE !(s->state == 4401) [L1167] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1167] COND FALSE !(s->state == 4416) [L1170] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1170] COND FALSE !(s->state == 4417) [L1173] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1173] COND TRUE s->state == 4432 [L1374] ret = __VERIFIER_nondet_int() [L1375] COND FALSE !(blastFlag == 5) VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1380] COND FALSE !(ret <= 0) [L1385] s->state = 4448 [L1386] s->init_num = 0 VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1605] EXPR s->s3 [L1605] EXPR (s->s3)->tmp.reuse_message VAL [={1:0}, (s->s3)->tmp.reuse_message=20542, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->s3={20506:0}, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1605] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1634] skip = 0 VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1131] COND TRUE 1 VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1133] EXPR s->state [L1133] state = s->state [L1134] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1134] COND FALSE !(s->state == 12292) [L1137] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1137] COND FALSE !(s->state == 16384) [L1140] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1140] COND FALSE !(s->state == 4096) [L1143] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1143] COND FALSE !(s->state == 20480) [L1146] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1146] COND FALSE !(s->state == 4099) [L1149] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1149] COND FALSE !(s->state == 4368) [L1152] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1152] COND FALSE !(s->state == 4369) [L1155] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1155] COND FALSE !(s->state == 4384) [L1158] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1158] COND FALSE !(s->state == 4385) [L1161] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1161] COND FALSE !(s->state == 4400) [L1164] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1164] COND FALSE !(s->state == 4401) [L1167] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1167] COND FALSE !(s->state == 4416) [L1170] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1170] COND FALSE !(s->state == 4417) [L1173] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1173] COND FALSE !(s->state == 4432) [L1176] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1176] COND FALSE !(s->state == 4433) [L1179] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1179] COND TRUE s->state == 4448 [L1390] ret = __VERIFIER_nondet_int() [L1391] COND TRUE blastFlag == 4 VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=0, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1646] __VERIFIER_error() VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=0, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] ----- [2018-11-23 12:47:04,488 WARN L170 areAnnotationChecker]: ULTIMATE.initENTRY has no Hoare annotation [2018-11-23 12:47:04,488 WARN L170 areAnnotationChecker]: ssl3_connectENTRY has no Hoare annotation [2018-11-23 12:47:04,488 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2018-11-23 12:47:04,488 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2018-11-23 12:47:04,488 WARN L170 areAnnotationChecker]: mainENTRY has no Hoare annotation [2018-11-23 12:47:04,489 WARN L170 areAnnotationChecker]: ULTIMATE.initFINAL has no Hoare annotation [2018-11-23 12:47:04,489 WARN L170 areAnnotationChecker]: L1111 has no Hoare annotation [2018-11-23 12:47:04,489 WARN L170 areAnnotationChecker]: L1111 has no Hoare annotation [2018-11-23 12:47:04,489 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2018-11-23 12:47:04,489 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2018-11-23 12:47:04,489 WARN L170 areAnnotationChecker]: L1074 has no Hoare annotation [2018-11-23 12:47:04,489 WARN L170 areAnnotationChecker]: L1074 has no Hoare annotation [2018-11-23 12:47:04,489 WARN L170 areAnnotationChecker]: ULTIMATE.initEXIT has no Hoare annotation [2018-11-23 12:47:04,489 WARN L170 areAnnotationChecker]: L1114-2 has no Hoare annotation [2018-11-23 12:47:04,490 WARN L170 areAnnotationChecker]: L1114 has no Hoare annotation [2018-11-23 12:47:04,490 WARN L170 areAnnotationChecker]: L1114 has no Hoare annotation [2018-11-23 12:47:04,490 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2018-11-23 12:47:04,490 WARN L170 areAnnotationChecker]: L1074-1 has no Hoare annotation [2018-11-23 12:47:04,490 WARN L170 areAnnotationChecker]: L1121 has no Hoare annotation [2018-11-23 12:47:04,490 WARN L170 areAnnotationChecker]: L1121 has no Hoare annotation [2018-11-23 12:47:04,490 WARN L170 areAnnotationChecker]: mainFINAL has no Hoare annotation [2018-11-23 12:47:04,490 WARN L170 areAnnotationChecker]: L1122 has no Hoare annotation [2018-11-23 12:47:04,490 WARN L170 areAnnotationChecker]: L1122 has no Hoare annotation [2018-11-23 12:47:04,491 WARN L170 areAnnotationChecker]: L1131-1 has no Hoare annotation [2018-11-23 12:47:04,491 WARN L170 areAnnotationChecker]: L1131-1 has no Hoare annotation [2018-11-23 12:47:04,491 WARN L170 areAnnotationChecker]: L1131-1 has no Hoare annotation [2018-11-23 12:47:04,491 WARN L170 areAnnotationChecker]: mainEXIT has no Hoare annotation [2018-11-23 12:47:04,491 WARN L170 areAnnotationChecker]: L1636 has no Hoare annotation [2018-11-23 12:47:04,491 WARN L170 areAnnotationChecker]: L1132 has no Hoare annotation [2018-11-23 12:47:04,491 WARN L170 areAnnotationChecker]: L1640 has no Hoare annotation [2018-11-23 12:47:04,491 WARN L170 areAnnotationChecker]: L1640 has no Hoare annotation [2018-11-23 12:47:04,491 WARN L170 areAnnotationChecker]: L1134 has no Hoare annotation [2018-11-23 12:47:04,491 WARN L170 areAnnotationChecker]: L1134 has no Hoare annotation [2018-11-23 12:47:04,492 WARN L170 areAnnotationChecker]: L1640-2 has no Hoare annotation [2018-11-23 12:47:04,492 WARN L170 areAnnotationChecker]: L1135 has no Hoare annotation [2018-11-23 12:47:04,492 WARN L170 areAnnotationChecker]: L1137 has no Hoare annotation [2018-11-23 12:47:04,492 WARN L170 areAnnotationChecker]: L1137 has no Hoare annotation [2018-11-23 12:47:04,492 WARN L170 areAnnotationChecker]: ssl3_connectFINAL has no Hoare annotation [2018-11-23 12:47:04,492 WARN L170 areAnnotationChecker]: L1240 has no Hoare annotation [2018-11-23 12:47:04,492 WARN L170 areAnnotationChecker]: L1140 has no Hoare annotation [2018-11-23 12:47:04,492 WARN L170 areAnnotationChecker]: L1140 has no Hoare annotation [2018-11-23 12:47:04,492 WARN L170 areAnnotationChecker]: ssl3_connectEXIT has no Hoare annotation [2018-11-23 12:47:04,493 WARN L170 areAnnotationChecker]: L1245 has no Hoare annotation [2018-11-23 12:47:04,493 WARN L170 areAnnotationChecker]: L1245 has no Hoare annotation [2018-11-23 12:47:04,493 WARN L170 areAnnotationChecker]: L1143 has no Hoare annotation [2018-11-23 12:47:04,493 WARN L170 areAnnotationChecker]: L1143 has no Hoare annotation [2018-11-23 12:47:04,493 WARN L170 areAnnotationChecker]: L1245-2 has no Hoare annotation [2018-11-23 12:47:04,493 WARN L170 areAnnotationChecker]: L1146 has no Hoare annotation [2018-11-23 12:47:04,493 WARN L170 areAnnotationChecker]: L1146 has no Hoare annotation [2018-11-23 12:47:04,493 WARN L170 areAnnotationChecker]: L1250 has no Hoare annotation [2018-11-23 12:47:04,493 WARN L170 areAnnotationChecker]: L1250 has no Hoare annotation [2018-11-23 12:47:04,493 WARN L170 areAnnotationChecker]: L1149 has no Hoare annotation [2018-11-23 12:47:04,494 WARN L170 areAnnotationChecker]: L1149 has no Hoare annotation [2018-11-23 12:47:04,494 WARN L170 areAnnotationChecker]: L1257 has no Hoare annotation [2018-11-23 12:47:04,494 WARN L170 areAnnotationChecker]: L1257 has no Hoare annotation [2018-11-23 12:47:04,494 WARN L170 areAnnotationChecker]: L1153 has no Hoare annotation [2018-11-23 12:47:04,494 WARN L170 areAnnotationChecker]: L1152 has no Hoare annotation [2018-11-23 12:47:04,494 WARN L170 areAnnotationChecker]: L1152 has no Hoare annotation [2018-11-23 12:47:04,494 WARN L170 areAnnotationChecker]: L1259 has no Hoare annotation [2018-11-23 12:47:04,494 WARN L170 areAnnotationChecker]: L1259 has no Hoare annotation [2018-11-23 12:47:04,494 WARN L170 areAnnotationChecker]: L1257-2 has no Hoare annotation [2018-11-23 12:47:04,494 WARN L170 areAnnotationChecker]: L1291 has no Hoare annotation [2018-11-23 12:47:04,495 WARN L170 areAnnotationChecker]: L1291 has no Hoare annotation [2018-11-23 12:47:04,495 WARN L170 areAnnotationChecker]: L1155 has no Hoare annotation [2018-11-23 12:47:04,495 WARN L170 areAnnotationChecker]: L1155 has no Hoare annotation [2018-11-23 12:47:04,495 WARN L170 areAnnotationChecker]: L1270 has no Hoare annotation [2018-11-23 12:47:04,495 WARN L170 areAnnotationChecker]: L1270 has no Hoare annotation [2018-11-23 12:47:04,495 WARN L170 areAnnotationChecker]: L1291-2 has no Hoare annotation [2018-11-23 12:47:04,495 WARN L170 areAnnotationChecker]: L1291-2 has no Hoare annotation [2018-11-23 12:47:04,495 WARN L170 areAnnotationChecker]: L1159 has no Hoare annotation [2018-11-23 12:47:04,495 WARN L170 areAnnotationChecker]: L1158 has no Hoare annotation [2018-11-23 12:47:04,496 WARN L170 areAnnotationChecker]: L1158 has no Hoare annotation [2018-11-23 12:47:04,496 WARN L170 areAnnotationChecker]: L1277 has no Hoare annotation [2018-11-23 12:47:04,496 WARN L170 areAnnotationChecker]: L1277 has no Hoare annotation [2018-11-23 12:47:04,496 WARN L170 areAnnotationChecker]: L1303 has no Hoare annotation [2018-11-23 12:47:04,496 WARN L170 areAnnotationChecker]: L1303 has no Hoare annotation [2018-11-23 12:47:04,496 WARN L170 areAnnotationChecker]: L1312 has no Hoare annotation [2018-11-23 12:47:04,496 WARN L170 areAnnotationChecker]: L1312 has no Hoare annotation [2018-11-23 12:47:04,496 WARN L170 areAnnotationChecker]: L1161 has no Hoare annotation [2018-11-23 12:47:04,496 WARN L170 areAnnotationChecker]: L1161 has no Hoare annotation [2018-11-23 12:47:04,496 WARN L170 areAnnotationChecker]: L1569 has no Hoare annotation [2018-11-23 12:47:04,497 WARN L170 areAnnotationChecker]: L1312-2 has no Hoare annotation [2018-11-23 12:47:04,497 WARN L170 areAnnotationChecker]: L1312-2 has no Hoare annotation [2018-11-23 12:47:04,497 WARN L170 areAnnotationChecker]: L1165 has no Hoare annotation [2018-11-23 12:47:04,497 WARN L170 areAnnotationChecker]: L1164 has no Hoare annotation [2018-11-23 12:47:04,497 WARN L170 areAnnotationChecker]: L1164 has no Hoare annotation [2018-11-23 12:47:04,497 WARN L170 areAnnotationChecker]: L1605 has no Hoare annotation [2018-11-23 12:47:04,497 WARN L170 areAnnotationChecker]: L1605 has no Hoare annotation [2018-11-23 12:47:04,497 WARN L170 areAnnotationChecker]: L1322 has no Hoare annotation [2018-11-23 12:47:04,497 WARN L170 areAnnotationChecker]: L1322 has no Hoare annotation [2018-11-23 12:47:04,498 WARN L170 areAnnotationChecker]: L1331 has no Hoare annotation [2018-11-23 12:47:04,498 WARN L170 areAnnotationChecker]: L1331 has no Hoare annotation [2018-11-23 12:47:04,498 WARN L170 areAnnotationChecker]: L1167 has no Hoare annotation [2018-11-23 12:47:04,498 WARN L170 areAnnotationChecker]: L1167 has no Hoare annotation [2018-11-23 12:47:04,498 WARN L170 areAnnotationChecker]: L1606 has no Hoare annotation [2018-11-23 12:47:04,498 WARN L170 areAnnotationChecker]: L1606 has no Hoare annotation [2018-11-23 12:47:04,498 WARN L170 areAnnotationChecker]: L1605-1 has no Hoare annotation [2018-11-23 12:47:04,498 WARN L170 areAnnotationChecker]: L1322-2 has no Hoare annotation [2018-11-23 12:47:04,498 WARN L170 areAnnotationChecker]: L1331-2 has no Hoare annotation [2018-11-23 12:47:04,498 WARN L170 areAnnotationChecker]: L1335 has no Hoare annotation [2018-11-23 12:47:04,499 WARN L170 areAnnotationChecker]: L1335 has no Hoare annotation [2018-11-23 12:47:04,499 WARN L170 areAnnotationChecker]: L1171 has no Hoare annotation [2018-11-23 12:47:04,499 WARN L170 areAnnotationChecker]: L1170 has no Hoare annotation [2018-11-23 12:47:04,499 WARN L170 areAnnotationChecker]: L1170 has no Hoare annotation [2018-11-23 12:47:04,499 WARN L170 areAnnotationChecker]: L1607 has no Hoare annotation [2018-11-23 12:47:04,499 WARN L170 areAnnotationChecker]: L1607 has no Hoare annotation [2018-11-23 12:47:04,499 WARN L170 areAnnotationChecker]: L1335-2 has no Hoare annotation [2018-11-23 12:47:04,499 WARN L170 areAnnotationChecker]: L1335-2 has no Hoare annotation [2018-11-23 12:47:04,499 WARN L170 areAnnotationChecker]: L1352 has no Hoare annotation [2018-11-23 12:47:04,499 WARN L170 areAnnotationChecker]: L1352 has no Hoare annotation [2018-11-23 12:47:04,500 WARN L170 areAnnotationChecker]: L1173 has no Hoare annotation [2018-11-23 12:47:04,500 WARN L170 areAnnotationChecker]: L1173 has no Hoare annotation [2018-11-23 12:47:04,500 WARN L170 areAnnotationChecker]: L1609 has no Hoare annotation [2018-11-23 12:47:04,500 WARN L170 areAnnotationChecker]: L1609 has no Hoare annotation [2018-11-23 12:47:04,500 WARN L170 areAnnotationChecker]: L1607-2 has no Hoare annotation [2018-11-23 12:47:04,500 WARN L170 areAnnotationChecker]: L1607-2 has no Hoare annotation [2018-11-23 12:47:04,500 WARN L170 areAnnotationChecker]: L1352-2 has no Hoare annotation [2018-11-23 12:47:04,500 WARN L170 areAnnotationChecker]: L1352-2 has no Hoare annotation [2018-11-23 12:47:04,500 WARN L170 areAnnotationChecker]: L1177 has no Hoare annotation [2018-11-23 12:47:04,501 WARN L170 areAnnotationChecker]: L1176 has no Hoare annotation [2018-11-23 12:47:04,501 WARN L170 areAnnotationChecker]: L1176 has no Hoare annotation [2018-11-23 12:47:04,501 WARN L170 areAnnotationChecker]: L1618 has no Hoare annotation [2018-11-23 12:47:04,501 WARN L170 areAnnotationChecker]: L1618 has no Hoare annotation [2018-11-23 12:47:04,501 WARN L170 areAnnotationChecker]: L1365 has no Hoare annotation [2018-11-23 12:47:04,501 WARN L170 areAnnotationChecker]: L1365 has no Hoare annotation [2018-11-23 12:47:04,501 WARN L170 areAnnotationChecker]: L1375 has no Hoare annotation [2018-11-23 12:47:04,501 WARN L170 areAnnotationChecker]: L1375 has no Hoare annotation [2018-11-23 12:47:04,501 WARN L170 areAnnotationChecker]: L1179 has no Hoare annotation [2018-11-23 12:47:04,501 WARN L170 areAnnotationChecker]: L1179 has no Hoare annotation [2018-11-23 12:47:04,502 WARN L170 areAnnotationChecker]: L1392 has no Hoare annotation [2018-11-23 12:47:04,502 WARN L170 areAnnotationChecker]: L1392 has no Hoare annotation [2018-11-23 12:47:04,502 WARN L170 areAnnotationChecker]: L1380 has no Hoare annotation [2018-11-23 12:47:04,502 WARN L170 areAnnotationChecker]: L1380 has no Hoare annotation [2018-11-23 12:47:04,502 WARN L170 areAnnotationChecker]: L1183 has no Hoare annotation [2018-11-23 12:47:04,502 WARN L170 areAnnotationChecker]: L1182 has no Hoare annotation [2018-11-23 12:47:04,502 WARN L170 areAnnotationChecker]: L1182 has no Hoare annotation [2018-11-23 12:47:04,502 WARN L170 areAnnotationChecker]: L1391 has no Hoare annotation [2018-11-23 12:47:04,502 WARN L170 areAnnotationChecker]: L1391 has no Hoare annotation [2018-11-23 12:47:04,502 WARN L170 areAnnotationChecker]: L1185 has no Hoare annotation [2018-11-23 12:47:04,503 WARN L170 areAnnotationChecker]: L1185 has no Hoare annotation [2018-11-23 12:47:04,503 WARN L170 areAnnotationChecker]: L1396 has no Hoare annotation [2018-11-23 12:47:04,503 WARN L170 areAnnotationChecker]: L1396 has no Hoare annotation [2018-11-23 12:47:04,503 WARN L170 areAnnotationChecker]: L1195 has no Hoare annotation [2018-11-23 12:47:04,503 WARN L170 areAnnotationChecker]: L1188 has no Hoare annotation [2018-11-23 12:47:04,503 WARN L170 areAnnotationChecker]: L1188 has no Hoare annotation [2018-11-23 12:47:04,503 WARN L170 areAnnotationChecker]: L1401 has no Hoare annotation [2018-11-23 12:47:04,503 WARN L170 areAnnotationChecker]: L1401 has no Hoare annotation [2018-11-23 12:47:04,503 WARN L170 areAnnotationChecker]: L1413 has no Hoare annotation [2018-11-23 12:47:04,504 WARN L170 areAnnotationChecker]: L1413 has no Hoare annotation [2018-11-23 12:47:04,504 WARN L170 areAnnotationChecker]: L1191 has no Hoare annotation [2018-11-23 12:47:04,504 WARN L170 areAnnotationChecker]: L1191 has no Hoare annotation [2018-11-23 12:47:04,504 WARN L170 areAnnotationChecker]: L1401-2 has no Hoare annotation [2018-11-23 12:47:04,504 WARN L170 areAnnotationChecker]: L1194 has no Hoare annotation [2018-11-23 12:47:04,504 WARN L170 areAnnotationChecker]: L1194 has no Hoare annotation [2018-11-23 12:47:04,504 WARN L170 areAnnotationChecker]: L1197 has no Hoare annotation [2018-11-23 12:47:04,504 WARN L170 areAnnotationChecker]: L1197 has no Hoare annotation [2018-11-23 12:47:04,504 WARN L170 areAnnotationChecker]: L1201 has no Hoare annotation [2018-11-23 12:47:04,504 WARN L170 areAnnotationChecker]: L1200 has no Hoare annotation [2018-11-23 12:47:04,505 WARN L170 areAnnotationChecker]: L1200 has no Hoare annotation [2018-11-23 12:47:04,505 WARN L170 areAnnotationChecker]: L1424 has no Hoare annotation [2018-11-23 12:47:04,505 WARN L170 areAnnotationChecker]: L1424 has no Hoare annotation [2018-11-23 12:47:04,505 WARN L170 areAnnotationChecker]: L1203 has no Hoare annotation [2018-11-23 12:47:04,505 WARN L170 areAnnotationChecker]: L1203 has no Hoare annotation [2018-11-23 12:47:04,505 WARN L170 areAnnotationChecker]: L1430 has no Hoare annotation [2018-11-23 12:47:04,505 WARN L170 areAnnotationChecker]: L1430 has no Hoare annotation [2018-11-23 12:47:04,505 WARN L170 areAnnotationChecker]: L1207 has no Hoare annotation [2018-11-23 12:47:04,505 WARN L170 areAnnotationChecker]: L1206 has no Hoare annotation [2018-11-23 12:47:04,505 WARN L170 areAnnotationChecker]: L1206 has no Hoare annotation [2018-11-23 12:47:04,506 WARN L170 areAnnotationChecker]: L1430-2 has no Hoare annotation [2018-11-23 12:47:04,506 WARN L170 areAnnotationChecker]: L1441 has no Hoare annotation [2018-11-23 12:47:04,506 WARN L170 areAnnotationChecker]: L1441 has no Hoare annotation [2018-11-23 12:47:04,506 WARN L170 areAnnotationChecker]: L1209 has no Hoare annotation [2018-11-23 12:47:04,506 WARN L170 areAnnotationChecker]: L1209 has no Hoare annotation [2018-11-23 12:47:04,506 WARN L170 areAnnotationChecker]: L1213 has no Hoare annotation [2018-11-23 12:47:04,506 WARN L170 areAnnotationChecker]: L1212 has no Hoare annotation [2018-11-23 12:47:04,506 WARN L170 areAnnotationChecker]: L1212 has no Hoare annotation [2018-11-23 12:47:04,506 WARN L170 areAnnotationChecker]: L1453 has no Hoare annotation [2018-11-23 12:47:04,507 WARN L170 areAnnotationChecker]: L1453 has no Hoare annotation [2018-11-23 12:47:04,507 WARN L170 areAnnotationChecker]: L1215 has no Hoare annotation [2018-11-23 12:47:04,507 WARN L170 areAnnotationChecker]: L1215 has no Hoare annotation [2018-11-23 12:47:04,507 WARN L170 areAnnotationChecker]: L1461 has no Hoare annotation [2018-11-23 12:47:04,507 WARN L170 areAnnotationChecker]: L1461 has no Hoare annotation [2018-11-23 12:47:04,507 WARN L170 areAnnotationChecker]: L1219 has no Hoare annotation [2018-11-23 12:47:04,507 WARN L170 areAnnotationChecker]: L1218 has no Hoare annotation [2018-11-23 12:47:04,507 WARN L170 areAnnotationChecker]: L1218 has no Hoare annotation [2018-11-23 12:47:04,507 WARN L170 areAnnotationChecker]: L1461-2 has no Hoare annotation [2018-11-23 12:47:04,507 WARN L170 areAnnotationChecker]: L1484 has no Hoare annotation [2018-11-23 12:47:04,508 WARN L170 areAnnotationChecker]: L1484 has no Hoare annotation [2018-11-23 12:47:04,508 WARN L170 areAnnotationChecker]: L1221 has no Hoare annotation [2018-11-23 12:47:04,508 WARN L170 areAnnotationChecker]: L1221 has no Hoare annotation [2018-11-23 12:47:04,508 WARN L170 areAnnotationChecker]: L1467 has no Hoare annotation [2018-11-23 12:47:04,508 WARN L170 areAnnotationChecker]: L1467 has no Hoare annotation [2018-11-23 12:47:04,508 WARN L170 areAnnotationChecker]: L1491 has no Hoare annotation [2018-11-23 12:47:04,508 WARN L170 areAnnotationChecker]: L1491 has no Hoare annotation [2018-11-23 12:47:04,508 WARN L170 areAnnotationChecker]: L1225 has no Hoare annotation [2018-11-23 12:47:04,508 WARN L170 areAnnotationChecker]: L1224 has no Hoare annotation [2018-11-23 12:47:04,508 WARN L170 areAnnotationChecker]: L1224 has no Hoare annotation [2018-11-23 12:47:04,509 WARN L170 areAnnotationChecker]: L1474 has no Hoare annotation [2018-11-23 12:47:04,509 WARN L170 areAnnotationChecker]: L1474 has no Hoare annotation [2018-11-23 12:47:04,509 WARN L170 areAnnotationChecker]: L1493 has no Hoare annotation [2018-11-23 12:47:04,509 WARN L170 areAnnotationChecker]: L1493 has no Hoare annotation [2018-11-23 12:47:04,509 WARN L170 areAnnotationChecker]: L1491-1 has no Hoare annotation [2018-11-23 12:47:04,509 WARN L170 areAnnotationChecker]: L1508 has no Hoare annotation [2018-11-23 12:47:04,509 WARN L170 areAnnotationChecker]: L1508 has no Hoare annotation [2018-11-23 12:47:04,509 WARN L170 areAnnotationChecker]: L1227 has no Hoare annotation [2018-11-23 12:47:04,509 WARN L170 areAnnotationChecker]: L1227 has no Hoare annotation [2018-11-23 12:47:04,509 WARN L170 areAnnotationChecker]: L1513 has no Hoare annotation [2018-11-23 12:47:04,510 WARN L170 areAnnotationChecker]: L1513 has no Hoare annotation [2018-11-23 12:47:04,510 WARN L170 areAnnotationChecker]: L1228 has no Hoare annotation [2018-11-23 12:47:04,510 WARN L170 areAnnotationChecker]: L1230 has no Hoare annotation [2018-11-23 12:47:04,510 WARN L170 areAnnotationChecker]: L1230 has no Hoare annotation [2018-11-23 12:47:04,510 WARN L170 areAnnotationChecker]: L1513-2 has no Hoare annotation [2018-11-23 12:47:04,510 WARN L170 areAnnotationChecker]: L1522 has no Hoare annotation [2018-11-23 12:47:04,510 WARN L170 areAnnotationChecker]: L1522 has no Hoare annotation [2018-11-23 12:47:04,510 WARN L170 areAnnotationChecker]: L1231 has no Hoare annotation [2018-11-23 12:47:04,510 WARN L170 areAnnotationChecker]: L1234 has no Hoare annotation [2018-11-23 12:47:04,511 WARN L170 areAnnotationChecker]: L1526 has no Hoare annotation [2018-11-23 12:47:04,511 WARN L170 areAnnotationChecker]: L1526 has no Hoare annotation [2018-11-23 12:47:04,511 WARN L170 areAnnotationChecker]: L1522-2 has no Hoare annotation [2018-11-23 12:47:04,511 WARN L170 areAnnotationChecker]: L1539 has no Hoare annotation [2018-11-23 12:47:04,511 WARN L170 areAnnotationChecker]: L1539 has no Hoare annotation [2018-11-23 12:47:04,511 WARN L170 areAnnotationChecker]: L1539-2 has no Hoare annotation [2018-11-23 12:47:04,511 WARN L170 areAnnotationChecker]: L1544 has no Hoare annotation [2018-11-23 12:47:04,511 WARN L170 areAnnotationChecker]: L1544 has no Hoare annotation [2018-11-23 12:47:04,511 WARN L170 areAnnotationChecker]: L1544-2 has no Hoare annotation [2018-11-23 12:47:04,511 WARN L170 areAnnotationChecker]: L1551 has no Hoare annotation [2018-11-23 12:47:04,512 WARN L170 areAnnotationChecker]: L1551 has no Hoare annotation [2018-11-23 12:47:04,512 WARN L170 areAnnotationChecker]: L1551-2 has no Hoare annotation [2018-11-23 12:47:04,512 WARN L170 areAnnotationChecker]: L1559 has no Hoare annotation [2018-11-23 12:47:04,512 WARN L170 areAnnotationChecker]: L1559 has no Hoare annotation [2018-11-23 12:47:04,512 INFO L163 areAnnotationChecker]: CFG has 0 edges. 0 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2018-11-23 12:47:04,515 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 12:47:04 BoogieIcfgContainer [2018-11-23 12:47:04,515 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 12:47:04,515 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 12:47:04,515 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 12:47:04,515 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 12:47:04,516 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:45:24" (3/4) ... [2018-11-23 12:47:04,520 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-23 12:47:04,520 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 12:47:04,521 INFO L168 Benchmark]: Toolchain (without parser) took 104053.76 ms. Allocated memory was 1.5 GB in the beginning and 3.0 GB in the end (delta: 1.5 GB). Free memory was 1.4 GB in the beginning and 2.6 GB in the end (delta: -1.2 GB). Peak memory consumption was 307.0 MB. Max. memory is 7.1 GB. [2018-11-23 12:47:04,522 INFO L168 Benchmark]: CDTParser took 0.21 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-11-23 12:47:04,522 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1018.26 ms. Allocated memory was 1.5 GB in the beginning and 2.3 GB in the end (delta: 769.7 MB). Free memory was 1.4 GB in the beginning and 2.2 GB in the end (delta: -816.0 MB). Peak memory consumption was 51.6 MB. Max. memory is 7.1 GB. [2018-11-23 12:47:04,523 INFO L168 Benchmark]: Boogie Procedure Inliner took 47.96 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 13.7 MB). Peak memory consumption was 13.7 MB. Max. memory is 7.1 GB. [2018-11-23 12:47:04,523 INFO L168 Benchmark]: Boogie Preprocessor took 168.33 ms. Allocated memory is still 2.3 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-11-23 12:47:04,524 INFO L168 Benchmark]: RCFGBuilder took 2828.22 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.1 GB in the end (delta: 147.6 MB). Peak memory consumption was 147.6 MB. Max. memory is 7.1 GB. [2018-11-23 12:47:04,524 INFO L168 Benchmark]: TraceAbstraction took 99980.73 ms. Allocated memory was 2.3 GB in the beginning and 3.0 GB in the end (delta: 688.9 MB). Free memory was 2.1 GB in the beginning and 2.6 GB in the end (delta: -496.8 MB). Peak memory consumption was 192.1 MB. Max. memory is 7.1 GB. [2018-11-23 12:47:04,525 INFO L168 Benchmark]: Witness Printer took 5.01 ms. Allocated memory is still 3.0 GB. Free memory is still 2.6 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-11-23 12:47:04,528 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - GenericResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 7.1 GB. * CACSL2BoogieTranslator took 1018.26 ms. Allocated memory was 1.5 GB in the beginning and 2.3 GB in the end (delta: 769.7 MB). Free memory was 1.4 GB in the beginning and 2.2 GB in the end (delta: -816.0 MB). Peak memory consumption was 51.6 MB. Max. memory is 7.1 GB. * Boogie Procedure Inliner took 47.96 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 13.7 MB). Peak memory consumption was 13.7 MB. Max. memory is 7.1 GB. * Boogie Preprocessor took 168.33 ms. Allocated memory is still 2.3 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 7.1 GB. * RCFGBuilder took 2828.22 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.1 GB in the end (delta: 147.6 MB). Peak memory consumption was 147.6 MB. Max. memory is 7.1 GB. * TraceAbstraction took 99980.73 ms. Allocated memory was 2.3 GB in the beginning and 3.0 GB in the end (delta: 688.9 MB). Free memory was 2.1 GB in the beginning and 2.6 GB in the end (delta: -496.8 MB). Peak memory consumption was 192.1 MB. Max. memory is 7.1 GB. * Witness Printer took 5.01 ms. Allocated memory is still 3.0 GB. Free memory is still 2.6 GB. There was no memory consumed. Max. memory is 7.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 20492 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 20488 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - UnprovableResult [Line: 1646]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of bitwiseAnd at line 1331. Possible FailurePath: [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_client_data ; VAL [\old(init)=20541, \old(SSLv3_client_data)=null, \old(SSLv3_client_data)=null, init=1, SSLv3_client_data={20494:0}] [L1065] SSL *s = (SSL*)malloc(sizeof(SSL)) ; [L1069] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1070] s->ctx = malloc(sizeof(SSL_CTX)) [L1071] s->session = malloc(sizeof(SSL_SESSION)) [L1072] s->state = 12292 [L1073] s->version = __VERIFIER_nondet_int() [L1074] CALL ssl3_connect(s) VAL [init=1, s={20501:0}, SSLv3_client_data={20494:0}] [L1080] BUF_MEM *buf = __VERIFIER_nondet_pointer() ; [L1081] unsigned long tmp ; [L1082] unsigned long l ; [L1083] long num1 ; [L1084] void (*cb)() ; [L1085] int ret ; [L1086] int new_state ; [L1087] int state ; [L1088] int skip ; [L1089] int *tmp___0 = __VERIFIER_nondet_pointer() ; [L1090] int tmp___1 = __VERIFIER_nondet_int() ; [L1091] int tmp___2 = __VERIFIER_nondet_int() ; [L1092] int tmp___3 ; [L1093] int tmp___4 ; [L1094] int tmp___5 ; [L1095] int tmp___6 ; [L1096] int tmp___7 ; [L1097] int tmp___8 ; [L1098] long tmp___9 ; [L1100] int blastFlag ; [L1103] blastFlag = 0 [L1104] s->hit=__VERIFIER_nondet_int () [L1105] s->state = 12292 [L1106] tmp = __VERIFIER_nondet_int() [L1107] cb = (void (*)())((void *)0) [L1108] ret = -1 [L1109] skip = 0 [L1110] *tmp___0 = 0 [L1111] EXPR s->info_callback VAL [={0:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, s->info_callback={1:0}, skip=0, SSLv3_client_data={20494:0}, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0] [L1111] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1112] EXPR s->info_callback [L1112] cb = s->info_callback [L1120] EXPR s->in_handshake [L1120] s->in_handshake += 1 [L1121] COND FALSE !(tmp___1 & 12288) VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0] [L1131] COND TRUE 1 VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0] [L1133] EXPR s->state [L1133] state = s->state [L1134] EXPR s->state VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, s->state=12292, skip=0, SSLv3_client_data={20494:0}, state=12292, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0] [L1134] COND TRUE s->state == 12292 [L1237] s->new_session = 1 [L1238] s->state = 4096 [L1239] EXPR s->ctx [L1239] EXPR (s->ctx)->stats.sess_connect_renegotiate [L1239] (s->ctx)->stats.sess_connect_renegotiate += 1 [L1244] s->server = 0 VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=12292, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0] [L1245] COND TRUE (unsigned long )cb != (unsigned long )((void *)0) VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=12292, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0] [L1250] EXPR s->version VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, s->version=0, skip=0, SSLv3_client_data={20494:0}, state=12292, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0] [L1250] COND FALSE !((s->version & 65280) != 768) [L1256] s->type = 4096 [L1257] EXPR s->init_buf VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, s->init_buf={-1:2}, skip=0, SSLv3_client_data={20494:0}, state=12292, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0] [L1257] COND FALSE !((unsigned long )s->init_buf == (unsigned long )((void *)0)) [L1269] tmp___4 = __VERIFIER_nondet_int() [L1270] COND FALSE !(! tmp___4) [L1276] tmp___5 = __VERIFIER_nondet_int() [L1277] COND FALSE !(! tmp___5) [L1283] s->state = 4368 [L1284] EXPR s->ctx [L1284] EXPR (s->ctx)->stats.sess_connect [L1284] (s->ctx)->stats.sess_connect += 1 [L1285] s->init_num = 0 VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=12292, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1605] EXPR s->s3 [L1605] EXPR (s->s3)->tmp.reuse_message VAL [={1:0}, (s->s3)->tmp.reuse_message=20542, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, s->s3={20506:0}, skip=0, SSLv3_client_data={20494:0}, state=12292, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1605] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1634] skip = 0 VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=12292, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1131] COND TRUE 1 VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=12292, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1133] EXPR s->state [L1133] state = s->state [L1134] EXPR s->state VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, s->state=4368, skip=0, SSLv3_client_data={20494:0}, state=4368, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1134] COND FALSE !(s->state == 12292) [L1137] EXPR s->state VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, s->state=4368, skip=0, SSLv3_client_data={20494:0}, state=4368, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1137] COND FALSE !(s->state == 16384) [L1140] EXPR s->state VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, s->state=4368, skip=0, SSLv3_client_data={20494:0}, state=4368, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1140] COND FALSE !(s->state == 4096) [L1143] EXPR s->state VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, s->state=4368, skip=0, SSLv3_client_data={20494:0}, state=4368, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1143] COND FALSE !(s->state == 20480) [L1146] EXPR s->state VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, s->state=4368, skip=0, SSLv3_client_data={20494:0}, state=4368, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1146] COND FALSE !(s->state == 4099) [L1149] EXPR s->state VAL [={1:0}, blastFlag=0, buf={20511:20517}, init=1, ret=-1, s={20501:0}, s={20501:0}, s->state=4368, skip=0, SSLv3_client_data={20494:0}, state=4368, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1149] COND TRUE s->state == 4368 [L1289] s->shutdown = 0 [L1290] ret = __VERIFIER_nondet_int() [L1291] COND TRUE blastFlag == 0 [L1292] blastFlag = 1 VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4368, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1296] COND FALSE !(ret <= 0) [L1301] s->state = 4384 [L1302] s->init_num = 0 [L1303] EXPR s->bbio [L1303] EXPR s->wbio VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->bbio={0:1}, s->wbio={0:0}, skip=0, SSLv3_client_data={20494:0}, state=4368, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1303] COND TRUE (unsigned long )s->bbio != (unsigned long )s->wbio [L1605] EXPR s->s3 [L1605] EXPR (s->s3)->tmp.reuse_message VAL [={1:0}, (s->s3)->tmp.reuse_message=20542, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->s3={20506:0}, skip=0, SSLv3_client_data={20494:0}, state=4368, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1605] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1634] skip = 0 VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4368, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1131] COND TRUE 1 VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4368, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1133] EXPR s->state [L1133] state = s->state [L1134] EXPR s->state VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4384, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1134] COND FALSE !(s->state == 12292) [L1137] EXPR s->state VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4384, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1137] COND FALSE !(s->state == 16384) [L1140] EXPR s->state VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4384, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1140] COND FALSE !(s->state == 4096) [L1143] EXPR s->state VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4384, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1143] COND FALSE !(s->state == 20480) [L1146] EXPR s->state VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4384, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1146] COND FALSE !(s->state == 4099) [L1149] EXPR s->state VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4384, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1149] COND FALSE !(s->state == 4368) [L1152] EXPR s->state VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4384, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1152] COND FALSE !(s->state == 4369) [L1155] EXPR s->state VAL [={1:0}, blastFlag=1, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4384, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1155] COND TRUE s->state == 4384 [L1311] ret = __VERIFIER_nondet_int() [L1312] COND TRUE blastFlag == 1 [L1313] blastFlag = 2 VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1317] COND FALSE !(ret <= 0) [L1322] s->hit VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->hit=0, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1322] COND FALSE !(s->hit) [L1325] s->state = 4400 VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1327] s->init_num = 0 VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1605] EXPR s->s3 [L1605] EXPR (s->s3)->tmp.reuse_message VAL [={1:0}, (s->s3)->tmp.reuse_message=20542, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->s3={20506:0}, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1605] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1634] skip = 0 VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1131] COND TRUE 1 VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4384, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1133] EXPR s->state [L1133] state = s->state [L1134] EXPR s->state VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4400, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1134] COND FALSE !(s->state == 12292) [L1137] EXPR s->state VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4400, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1137] COND FALSE !(s->state == 16384) [L1140] EXPR s->state VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4400, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1140] COND FALSE !(s->state == 4096) [L1143] EXPR s->state VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4400, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1143] COND FALSE !(s->state == 20480) [L1146] EXPR s->state VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4400, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1146] COND FALSE !(s->state == 4099) [L1149] EXPR s->state VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4400, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1149] COND FALSE !(s->state == 4368) [L1152] EXPR s->state VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4400, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1152] COND FALSE !(s->state == 4369) [L1155] EXPR s->state VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4400, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1155] COND FALSE !(s->state == 4384) [L1158] EXPR s->state VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4400, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1158] COND FALSE !(s->state == 4385) [L1161] EXPR s->state VAL [={1:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->state=4400, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1161] COND TRUE s->state == 4400 [L1331] EXPR s->s3 [L1331] EXPR (s->s3)->tmp.new_cipher [L1331] EXPR ((s->s3)->tmp.new_cipher)->algorithms VAL [={1:0}, ((s->s3)->tmp.new_cipher)->algorithms=20537, (s->s3)->tmp.new_cipher={20502:0}, blastFlag=2, buf={20511:20517}, init=1, ret=1, s={20501:0}, s={20501:0}, s->s3={20506:0}, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1331] COND FALSE !(((s->s3)->tmp.new_cipher)->algorithms & 256UL) [L1334] ret = __VERIFIER_nondet_int() [L1335] COND TRUE blastFlag == 2 [L1336] blastFlag = 3 VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1340] COND FALSE !(ret <= 0) VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1346] s->state = 4416 [L1347] s->init_num = 0 VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1605] EXPR s->s3 [L1605] EXPR (s->s3)->tmp.reuse_message VAL [={1:0}, (s->s3)->tmp.reuse_message=20542, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->s3={20506:0}, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1605] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1634] skip = 0 VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1131] COND TRUE 1 VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4400, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1133] EXPR s->state [L1133] state = s->state [L1134] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1134] COND FALSE !(s->state == 12292) [L1137] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1137] COND FALSE !(s->state == 16384) [L1140] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1140] COND FALSE !(s->state == 4096) [L1143] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1143] COND FALSE !(s->state == 20480) [L1146] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1146] COND FALSE !(s->state == 4099) [L1149] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1149] COND FALSE !(s->state == 4368) [L1152] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1152] COND FALSE !(s->state == 4369) [L1155] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1155] COND FALSE !(s->state == 4384) [L1158] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1158] COND FALSE !(s->state == 4385) [L1161] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1161] COND FALSE !(s->state == 4400) [L1164] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1164] COND FALSE !(s->state == 4401) [L1167] EXPR s->state VAL [={1:0}, blastFlag=3, buf={20511:20517}, init=1, ret=5, s={20501:0}, s={20501:0}, s->state=4416, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1167] COND TRUE s->state == 4416 [L1351] ret = __VERIFIER_nondet_int() [L1352] COND TRUE blastFlag == 3 [L1353] blastFlag = 4 VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1357] COND FALSE !(ret <= 0) [L1362] s->state = 4432 [L1363] s->init_num = 0 [L1364] tmp___6 = __VERIFIER_nondet_int() [L1365] COND FALSE !(! tmp___6) VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1605] EXPR s->s3 [L1605] EXPR (s->s3)->tmp.reuse_message VAL [={1:0}, (s->s3)->tmp.reuse_message=20542, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->s3={20506:0}, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1605] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1634] skip = 0 VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1131] COND TRUE 1 VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4416, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1133] EXPR s->state [L1133] state = s->state [L1134] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1134] COND FALSE !(s->state == 12292) [L1137] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1137] COND FALSE !(s->state == 16384) [L1140] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1140] COND FALSE !(s->state == 4096) [L1143] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1143] COND FALSE !(s->state == 20480) [L1146] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1146] COND FALSE !(s->state == 4099) [L1149] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1149] COND FALSE !(s->state == 4368) [L1152] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1152] COND FALSE !(s->state == 4369) [L1155] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1155] COND FALSE !(s->state == 4384) [L1158] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1158] COND FALSE !(s->state == 4385) [L1161] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1161] COND FALSE !(s->state == 4400) [L1164] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1164] COND FALSE !(s->state == 4401) [L1167] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1167] COND FALSE !(s->state == 4416) [L1170] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1170] COND FALSE !(s->state == 4417) [L1173] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=6, s={20501:0}, s={20501:0}, s->state=4432, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1173] COND TRUE s->state == 4432 [L1374] ret = __VERIFIER_nondet_int() [L1375] COND FALSE !(blastFlag == 5) VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1380] COND FALSE !(ret <= 0) [L1385] s->state = 4448 [L1386] s->init_num = 0 VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1605] EXPR s->s3 [L1605] EXPR (s->s3)->tmp.reuse_message VAL [={1:0}, (s->s3)->tmp.reuse_message=20542, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->s3={20506:0}, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1605] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1634] skip = 0 VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1131] COND TRUE 1 VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4432, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1133] EXPR s->state [L1133] state = s->state [L1134] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1134] COND FALSE !(s->state == 12292) [L1137] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1137] COND FALSE !(s->state == 16384) [L1140] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1140] COND FALSE !(s->state == 4096) [L1143] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1143] COND FALSE !(s->state == 20480) [L1146] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1146] COND FALSE !(s->state == 4099) [L1149] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1149] COND FALSE !(s->state == 4368) [L1152] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1152] COND FALSE !(s->state == 4369) [L1155] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1155] COND FALSE !(s->state == 4384) [L1158] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1158] COND FALSE !(s->state == 4385) [L1161] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1161] COND FALSE !(s->state == 4400) [L1164] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1164] COND FALSE !(s->state == 4401) [L1167] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1167] COND FALSE !(s->state == 4416) [L1170] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1170] COND FALSE !(s->state == 4417) [L1173] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1173] COND FALSE !(s->state == 4432) [L1176] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1176] COND FALSE !(s->state == 4433) [L1179] EXPR s->state VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=7, s={20501:0}, s={20501:0}, s->state=4448, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1179] COND TRUE s->state == 4448 [L1390] ret = __VERIFIER_nondet_int() [L1391] COND TRUE blastFlag == 4 VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=0, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1646] __VERIFIER_error() VAL [={1:0}, blastFlag=4, buf={20511:20517}, init=1, ret=0, s={20501:0}, s={20501:0}, skip=0, SSLv3_client_data={20494:0}, state=4448, tmp=0, tmp___0={20501:204}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 4 procedures, 142 locations, 1 error locations. UNSAFE Result, 99.8s OverallTime, 36 OverallIterations, 7 TraceHistogramMax, 71.7s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 7485 SDtfs, 2869 SDslu, 10084 SDs, 0 SdLazy, 5808 SolverSat, 229 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 9.8s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 217 GetRequests, 70 SyntacticMatches, 46 SemanticMatches, 101 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 5.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1038occurred in iteration=35, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 11.0s AutomataMinimizationTime, 35 MinimizatonAttempts, 2754 StatesRemovedByMinimization, 30 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.1s SsaConstructionTime, 0.9s SatisfiabilityAnalysisTime, 11.6s InterpolantComputationTime, 3213 NumberOfCodeBlocks, 3213 NumberOfCodeBlocksAsserted, 36 NumberOfCheckSat, 3035 ConstructedInterpolants, 0 QuantifiedInterpolants, 683183 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 35 InterpolantComputations, 35 PerfectInterpolantSequences, 2861/2861 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request...