java -ea -Xmx8000000000 -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc ../../../trunk/examples/toolchains/AutomizerCInline_WitnessPrinter.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf -i ../../../trunk/examples/svcomp/loops/s3_false-unreach-call.i -------------------------------------------------------------------------------- This is Ultimate 0.1.23-61f4311 [2018-11-23 13:02:32,578 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 13:02:32,581 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 13:02:32,596 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 13:02:32,596 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 13:02:32,597 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 13:02:32,599 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 13:02:32,601 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 13:02:32,603 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 13:02:32,603 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 13:02:32,604 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 13:02:32,605 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 13:02:32,606 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 13:02:32,607 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 13:02:32,608 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 13:02:32,610 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 13:02:32,611 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 13:02:32,615 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 13:02:32,620 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 13:02:32,621 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 13:02:32,626 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 13:02:32,627 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 13:02:32,630 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 13:02:32,630 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 13:02:32,630 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 13:02:32,631 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 13:02:32,632 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 13:02:32,633 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 13:02:32,634 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 13:02:32,635 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 13:02:32,635 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 13:02:32,636 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 13:02:32,636 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 13:02:32,636 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 13:02:32,637 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 13:02:32,638 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 13:02:32,638 INFO L98 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf [2018-11-23 13:02:32,654 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 13:02:32,654 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 13:02:32,655 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 13:02:32,655 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 13:02:32,656 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 13:02:32,656 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 13:02:32,657 INFO L133 SettingsManager]: * Use SBE=true [2018-11-23 13:02:32,657 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 13:02:32,657 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-23 13:02:32,657 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 13:02:32,657 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-23 13:02:32,658 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 13:02:32,658 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 13:02:32,658 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 13:02:32,658 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 13:02:32,658 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-23 13:02:32,659 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 13:02:32,659 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 13:02:32,659 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 13:02:32,659 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 13:02:32,659 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 13:02:32,660 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 13:02:32,660 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 13:02:32,660 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 13:02:32,660 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 13:02:32,660 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 13:02:32,661 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 13:02:32,661 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-23 13:02:32,661 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 13:02:32,661 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 13:02:32,661 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 13:02:32,730 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 13:02:32,751 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 13:02:32,756 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 13:02:32,757 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 13:02:32,758 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 13:02:32,759 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/loops/s3_false-unreach-call.i [2018-11-23 13:02:32,832 INFO L221 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/be38f597d/8a7f14fe3a6244b9857aa3dc2c02b685/FLAG9c9b7cb3d [2018-11-23 13:02:33,476 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 13:02:33,476 INFO L161 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/loops/s3_false-unreach-call.i [2018-11-23 13:02:33,507 INFO L355 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/be38f597d/8a7f14fe3a6244b9857aa3dc2c02b685/FLAG9c9b7cb3d [2018-11-23 13:02:33,695 INFO L363 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/be38f597d/8a7f14fe3a6244b9857aa3dc2c02b685 [2018-11-23 13:02:33,705 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 13:02:33,706 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 13:02:33,707 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 13:02:33,707 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 13:02:33,711 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 13:02:33,713 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:02:33" (1/1) ... [2018-11-23 13:02:33,716 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@18a676ec and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:02:33, skipping insertion in model container [2018-11-23 13:02:33,716 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:02:33" (1/1) ... [2018-11-23 13:02:33,727 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 13:02:33,800 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 13:02:34,504 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 13:02:34,527 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 13:02:34,841 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 13:02:34,868 INFO L195 MainTranslator]: Completed translation [2018-11-23 13:02:34,869 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:02:34 WrapperNode [2018-11-23 13:02:34,869 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 13:02:34,870 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 13:02:34,870 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 13:02:34,871 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 13:02:34,881 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:02:34" (1/1) ... [2018-11-23 13:02:34,909 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:02:34" (1/1) ... [2018-11-23 13:02:34,920 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 13:02:34,921 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 13:02:34,921 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 13:02:34,921 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 13:02:34,940 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:02:34" (1/1) ... [2018-11-23 13:02:34,941 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:02:34" (1/1) ... [2018-11-23 13:02:34,963 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:02:34" (1/1) ... [2018-11-23 13:02:34,964 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:02:34" (1/1) ... [2018-11-23 13:02:35,073 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:02:34" (1/1) ... [2018-11-23 13:02:35,092 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:02:34" (1/1) ... [2018-11-23 13:02:35,101 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:02:34" (1/1) ... [2018-11-23 13:02:35,115 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 13:02:35,116 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 13:02:35,116 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 13:02:35,116 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 13:02:35,117 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:02:34" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 13:02:35,183 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 13:02:35,183 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 13:02:35,183 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 13:02:35,183 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 13:02:35,183 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-23 13:02:35,184 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 13:02:35,184 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-23 13:02:35,184 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 13:02:35,184 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 13:02:35,185 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 13:02:35,185 INFO L130 BoogieDeclarations]: Found specification of procedure ssl3_connect [2018-11-23 13:02:35,185 INFO L138 BoogieDeclarations]: Found implementation of procedure ssl3_connect [2018-11-23 13:02:35,185 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 13:02:35,185 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 13:02:35,186 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-23 13:02:35,605 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 13:02:35,606 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 13:02:38,056 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 13:02:38,056 INFO L280 CfgBuilder]: Removed 1 assue(true) statements. [2018-11-23 13:02:38,057 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:02:38 BoogieIcfgContainer [2018-11-23 13:02:38,057 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 13:02:38,058 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 13:02:38,058 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 13:02:38,061 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 13:02:38,062 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 01:02:33" (1/3) ... [2018-11-23 13:02:38,063 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3c79aee9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 01:02:38, skipping insertion in model container [2018-11-23 13:02:38,063 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:02:34" (2/3) ... [2018-11-23 13:02:38,063 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3c79aee9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 01:02:38, skipping insertion in model container [2018-11-23 13:02:38,063 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:02:38" (3/3) ... [2018-11-23 13:02:38,065 INFO L112 eAbstractionObserver]: Analyzing ICFG s3_false-unreach-call.i [2018-11-23 13:02:38,075 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 13:02:38,084 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 13:02:38,102 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 13:02:38,139 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 13:02:38,140 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 13:02:38,140 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 13:02:38,140 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 13:02:38,140 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 13:02:38,140 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 13:02:38,141 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 13:02:38,141 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 13:02:38,141 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 13:02:38,164 INFO L276 IsEmpty]: Start isEmpty. Operand 140 states. [2018-11-23 13:02:38,172 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2018-11-23 13:02:38,173 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:02:38,174 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:02:38,177 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:02:38,183 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:02:38,183 INFO L82 PathProgramCache]: Analyzing trace with hash -1513562951, now seen corresponding path program 1 times [2018-11-23 13:02:38,185 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:02:38,186 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:02:38,251 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:02:38,252 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:02:38,252 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:02:38,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:02:38,704 INFO L256 TraceCheckUtils]: 0: Hoare triple {143#true} call ULTIMATE.init(); {143#true} is VALID [2018-11-23 13:02:38,709 INFO L273 TraceCheckUtils]: 1: Hoare triple {143#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {143#true} is VALID [2018-11-23 13:02:38,710 INFO L273 TraceCheckUtils]: 2: Hoare triple {143#true} assume true; {143#true} is VALID [2018-11-23 13:02:38,711 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {143#true} {143#true} #542#return; {143#true} is VALID [2018-11-23 13:02:38,711 INFO L256 TraceCheckUtils]: 4: Hoare triple {143#true} call #t~ret138 := main(); {143#true} is VALID [2018-11-23 13:02:38,712 INFO L273 TraceCheckUtils]: 5: Hoare triple {143#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {143#true} is VALID [2018-11-23 13:02:38,712 INFO L256 TraceCheckUtils]: 6: Hoare triple {143#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {143#true} is VALID [2018-11-23 13:02:38,733 INFO L273 TraceCheckUtils]: 7: Hoare triple {143#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:38,751 INFO L273 TraceCheckUtils]: 8: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:38,768 INFO L273 TraceCheckUtils]: 9: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:38,783 INFO L273 TraceCheckUtils]: 10: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:38,798 INFO L273 TraceCheckUtils]: 11: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !false; {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:38,812 INFO L273 TraceCheckUtils]: 12: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:38,826 INFO L273 TraceCheckUtils]: 13: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:38,835 INFO L273 TraceCheckUtils]: 14: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:38,848 INFO L273 TraceCheckUtils]: 15: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:38,864 INFO L273 TraceCheckUtils]: 16: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:38,880 INFO L273 TraceCheckUtils]: 17: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:38,889 INFO L273 TraceCheckUtils]: 18: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:38,902 INFO L273 TraceCheckUtils]: 19: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:38,916 INFO L273 TraceCheckUtils]: 20: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:38,929 INFO L273 TraceCheckUtils]: 21: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:38,943 INFO L273 TraceCheckUtils]: 22: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:38,961 INFO L273 TraceCheckUtils]: 23: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:38,970 INFO L273 TraceCheckUtils]: 24: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:38,983 INFO L273 TraceCheckUtils]: 25: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:38,997 INFO L273 TraceCheckUtils]: 26: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume 4432 == #t~mem35;havoc #t~mem35; {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:39,010 INFO L273 TraceCheckUtils]: 27: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {145#(= 0 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:39,027 INFO L273 TraceCheckUtils]: 28: Hoare triple {145#(= 0 ssl3_connect_~blastFlag~0)} assume 5 == ~blastFlag~0; {144#false} is VALID [2018-11-23 13:02:39,028 INFO L273 TraceCheckUtils]: 29: Hoare triple {144#false} assume !false; {144#false} is VALID [2018-11-23 13:02:39,034 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:02:39,038 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:02:39,038 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 13:02:39,043 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 30 [2018-11-23 13:02:39,046 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:02:39,049 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 13:02:39,268 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 30 edges. 30 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:02:39,268 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 13:02:39,277 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 13:02:39,278 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:02:39,280 INFO L87 Difference]: Start difference. First operand 140 states. Second operand 3 states. [2018-11-23 13:02:40,452 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:02:40,453 INFO L93 Difference]: Finished difference Result 385 states and 637 transitions. [2018-11-23 13:02:40,453 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 13:02:40,453 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 30 [2018-11-23 13:02:40,454 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:02:40,455 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 13:02:40,483 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 637 transitions. [2018-11-23 13:02:40,483 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 13:02:40,497 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 637 transitions. [2018-11-23 13:02:40,497 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 637 transitions. [2018-11-23 13:02:41,754 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 637 edges. 637 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:02:41,785 INFO L225 Difference]: With dead ends: 385 [2018-11-23 13:02:41,785 INFO L226 Difference]: Without dead ends: 223 [2018-11-23 13:02:41,790 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:02:41,812 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2018-11-23 13:02:41,942 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 223. [2018-11-23 13:02:41,942 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:02:41,943 INFO L82 GeneralOperation]: Start isEquivalent. First operand 223 states. Second operand 223 states. [2018-11-23 13:02:41,943 INFO L74 IsIncluded]: Start isIncluded. First operand 223 states. Second operand 223 states. [2018-11-23 13:02:41,943 INFO L87 Difference]: Start difference. First operand 223 states. Second operand 223 states. [2018-11-23 13:02:41,957 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:02:41,958 INFO L93 Difference]: Finished difference Result 223 states and 327 transitions. [2018-11-23 13:02:41,958 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 327 transitions. [2018-11-23 13:02:41,961 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:02:41,961 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:02:41,962 INFO L74 IsIncluded]: Start isIncluded. First operand 223 states. Second operand 223 states. [2018-11-23 13:02:41,962 INFO L87 Difference]: Start difference. First operand 223 states. Second operand 223 states. [2018-11-23 13:02:41,975 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:02:41,975 INFO L93 Difference]: Finished difference Result 223 states and 327 transitions. [2018-11-23 13:02:41,975 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 327 transitions. [2018-11-23 13:02:41,978 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:02:41,978 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:02:41,978 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:02:41,979 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:02:41,979 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 223 states. [2018-11-23 13:02:41,990 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 223 states to 223 states and 327 transitions. [2018-11-23 13:02:41,992 INFO L78 Accepts]: Start accepts. Automaton has 223 states and 327 transitions. Word has length 30 [2018-11-23 13:02:41,992 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:02:41,992 INFO L480 AbstractCegarLoop]: Abstraction has 223 states and 327 transitions. [2018-11-23 13:02:41,993 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 13:02:41,993 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 327 transitions. [2018-11-23 13:02:41,995 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-11-23 13:02:41,995 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:02:41,995 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:02:41,996 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:02:41,996 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:02:41,996 INFO L82 PathProgramCache]: Analyzing trace with hash -959560751, now seen corresponding path program 1 times [2018-11-23 13:02:41,997 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:02:41,997 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:02:41,999 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:02:41,999 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:02:42,000 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:02:42,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:02:42,213 INFO L256 TraceCheckUtils]: 0: Hoare triple {1306#true} call ULTIMATE.init(); {1306#true} is VALID [2018-11-23 13:02:42,213 INFO L273 TraceCheckUtils]: 1: Hoare triple {1306#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {1306#true} is VALID [2018-11-23 13:02:42,214 INFO L273 TraceCheckUtils]: 2: Hoare triple {1306#true} assume true; {1306#true} is VALID [2018-11-23 13:02:42,214 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1306#true} {1306#true} #542#return; {1306#true} is VALID [2018-11-23 13:02:42,214 INFO L256 TraceCheckUtils]: 4: Hoare triple {1306#true} call #t~ret138 := main(); {1306#true} is VALID [2018-11-23 13:02:42,215 INFO L273 TraceCheckUtils]: 5: Hoare triple {1306#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {1306#true} is VALID [2018-11-23 13:02:42,215 INFO L256 TraceCheckUtils]: 6: Hoare triple {1306#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {1306#true} is VALID [2018-11-23 13:02:42,215 INFO L273 TraceCheckUtils]: 7: Hoare triple {1306#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {1306#true} is VALID [2018-11-23 13:02:42,215 INFO L273 TraceCheckUtils]: 8: Hoare triple {1306#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {1306#true} is VALID [2018-11-23 13:02:42,216 INFO L273 TraceCheckUtils]: 9: Hoare triple {1306#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {1306#true} is VALID [2018-11-23 13:02:42,216 INFO L273 TraceCheckUtils]: 10: Hoare triple {1306#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {1306#true} is VALID [2018-11-23 13:02:42,216 INFO L273 TraceCheckUtils]: 11: Hoare triple {1306#true} assume !false; {1306#true} is VALID [2018-11-23 13:02:42,217 INFO L273 TraceCheckUtils]: 12: Hoare triple {1306#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {1306#true} is VALID [2018-11-23 13:02:42,217 INFO L273 TraceCheckUtils]: 13: Hoare triple {1306#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {1306#true} is VALID [2018-11-23 13:02:42,217 INFO L273 TraceCheckUtils]: 14: Hoare triple {1306#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1306#true} is VALID [2018-11-23 13:02:42,218 INFO L273 TraceCheckUtils]: 15: Hoare triple {1306#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {1306#true} is VALID [2018-11-23 13:02:42,218 INFO L273 TraceCheckUtils]: 16: Hoare triple {1306#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {1306#true} is VALID [2018-11-23 13:02:42,218 INFO L273 TraceCheckUtils]: 17: Hoare triple {1306#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {1306#true} is VALID [2018-11-23 13:02:42,219 INFO L273 TraceCheckUtils]: 18: Hoare triple {1306#true} assume 4368 == #t~mem27;havoc #t~mem27; {1306#true} is VALID [2018-11-23 13:02:42,219 INFO L273 TraceCheckUtils]: 19: Hoare triple {1306#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {1306#true} is VALID [2018-11-23 13:02:42,236 INFO L273 TraceCheckUtils]: 20: Hoare triple {1306#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:42,245 INFO L273 TraceCheckUtils]: 21: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:42,252 INFO L273 TraceCheckUtils]: 22: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:42,254 INFO L273 TraceCheckUtils]: 23: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:42,254 INFO L273 TraceCheckUtils]: 24: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:42,256 INFO L273 TraceCheckUtils]: 25: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} ~skip~0 := 0; {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:42,256 INFO L273 TraceCheckUtils]: 26: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !false; {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:42,258 INFO L273 TraceCheckUtils]: 27: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:42,259 INFO L273 TraceCheckUtils]: 28: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:42,260 INFO L273 TraceCheckUtils]: 29: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:42,260 INFO L273 TraceCheckUtils]: 30: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:42,262 INFO L273 TraceCheckUtils]: 31: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:42,264 INFO L273 TraceCheckUtils]: 32: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:42,269 INFO L273 TraceCheckUtils]: 33: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:42,269 INFO L273 TraceCheckUtils]: 34: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:42,272 INFO L273 TraceCheckUtils]: 35: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:42,272 INFO L273 TraceCheckUtils]: 36: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:42,274 INFO L273 TraceCheckUtils]: 37: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:42,275 INFO L273 TraceCheckUtils]: 38: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:42,277 INFO L273 TraceCheckUtils]: 39: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:42,278 INFO L273 TraceCheckUtils]: 40: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:42,279 INFO L273 TraceCheckUtils]: 41: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume 4432 == #t~mem35;havoc #t~mem35; {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:42,283 INFO L273 TraceCheckUtils]: 42: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {1308#(= 1 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:02:42,286 INFO L273 TraceCheckUtils]: 43: Hoare triple {1308#(= 1 ssl3_connect_~blastFlag~0)} assume 5 == ~blastFlag~0; {1307#false} is VALID [2018-11-23 13:02:42,286 INFO L273 TraceCheckUtils]: 44: Hoare triple {1307#false} assume !false; {1307#false} is VALID [2018-11-23 13:02:42,290 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 13:02:42,290 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:02:42,290 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 13:02:42,292 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 45 [2018-11-23 13:02:42,293 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:02:42,293 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 13:02:42,379 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:02:42,380 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 13:02:42,380 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 13:02:42,380 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:02:42,380 INFO L87 Difference]: Start difference. First operand 223 states and 327 transitions. Second operand 3 states. [2018-11-23 13:02:43,753 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:02:43,754 INFO L93 Difference]: Finished difference Result 432 states and 642 transitions. [2018-11-23 13:02:43,754 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 13:02:43,754 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 45 [2018-11-23 13:02:43,755 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:02:43,755 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 13:02:43,761 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 492 transitions. [2018-11-23 13:02:43,762 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 13:02:43,768 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 492 transitions. [2018-11-23 13:02:43,768 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 492 transitions. [2018-11-23 13:02:44,611 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 492 edges. 492 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:02:44,624 INFO L225 Difference]: With dead ends: 432 [2018-11-23 13:02:44,624 INFO L226 Difference]: Without dead ends: 325 [2018-11-23 13:02:44,626 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:02:44,627 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2018-11-23 13:02:44,730 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 325. [2018-11-23 13:02:44,730 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:02:44,730 INFO L82 GeneralOperation]: Start isEquivalent. First operand 325 states. Second operand 325 states. [2018-11-23 13:02:44,730 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand 325 states. [2018-11-23 13:02:44,731 INFO L87 Difference]: Start difference. First operand 325 states. Second operand 325 states. [2018-11-23 13:02:44,746 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:02:44,746 INFO L93 Difference]: Finished difference Result 325 states and 476 transitions. [2018-11-23 13:02:44,746 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 476 transitions. [2018-11-23 13:02:44,748 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:02:44,748 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:02:44,748 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand 325 states. [2018-11-23 13:02:44,749 INFO L87 Difference]: Start difference. First operand 325 states. Second operand 325 states. [2018-11-23 13:02:44,764 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:02:44,764 INFO L93 Difference]: Finished difference Result 325 states and 476 transitions. [2018-11-23 13:02:44,764 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 476 transitions. [2018-11-23 13:02:44,765 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:02:44,766 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:02:44,766 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:02:44,766 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:02:44,766 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 325 states. [2018-11-23 13:02:44,781 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 325 states to 325 states and 476 transitions. [2018-11-23 13:02:44,781 INFO L78 Accepts]: Start accepts. Automaton has 325 states and 476 transitions. Word has length 45 [2018-11-23 13:02:44,782 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:02:44,782 INFO L480 AbstractCegarLoop]: Abstraction has 325 states and 476 transitions. [2018-11-23 13:02:44,782 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 13:02:44,782 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 476 transitions. [2018-11-23 13:02:44,814 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2018-11-23 13:02:44,820 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:02:44,820 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:02:44,820 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:02:44,822 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:02:44,826 INFO L82 PathProgramCache]: Analyzing trace with hash -1822634295, now seen corresponding path program 1 times [2018-11-23 13:02:44,826 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:02:44,826 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:02:44,831 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:02:44,831 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:02:44,831 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:02:44,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:02:45,100 INFO L256 TraceCheckUtils]: 0: Hoare triple {2845#true} call ULTIMATE.init(); {2845#true} is VALID [2018-11-23 13:02:45,101 INFO L273 TraceCheckUtils]: 1: Hoare triple {2845#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {2845#true} is VALID [2018-11-23 13:02:45,101 INFO L273 TraceCheckUtils]: 2: Hoare triple {2845#true} assume true; {2845#true} is VALID [2018-11-23 13:02:45,102 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {2845#true} {2845#true} #542#return; {2845#true} is VALID [2018-11-23 13:02:45,102 INFO L256 TraceCheckUtils]: 4: Hoare triple {2845#true} call #t~ret138 := main(); {2845#true} is VALID [2018-11-23 13:02:45,103 INFO L273 TraceCheckUtils]: 5: Hoare triple {2845#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {2845#true} is VALID [2018-11-23 13:02:45,103 INFO L256 TraceCheckUtils]: 6: Hoare triple {2845#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {2845#true} is VALID [2018-11-23 13:02:45,104 INFO L273 TraceCheckUtils]: 7: Hoare triple {2845#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 13:02:45,104 INFO L273 TraceCheckUtils]: 8: Hoare triple {2845#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {2845#true} is VALID [2018-11-23 13:02:45,105 INFO L273 TraceCheckUtils]: 9: Hoare triple {2845#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {2845#true} is VALID [2018-11-23 13:02:45,105 INFO L273 TraceCheckUtils]: 10: Hoare triple {2845#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {2845#true} is VALID [2018-11-23 13:02:45,105 INFO L273 TraceCheckUtils]: 11: Hoare triple {2845#true} assume !false; {2845#true} is VALID [2018-11-23 13:02:45,105 INFO L273 TraceCheckUtils]: 12: Hoare triple {2845#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 13:02:45,106 INFO L273 TraceCheckUtils]: 13: Hoare triple {2845#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 13:02:45,106 INFO L273 TraceCheckUtils]: 14: Hoare triple {2845#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 13:02:45,106 INFO L273 TraceCheckUtils]: 15: Hoare triple {2845#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 13:02:45,106 INFO L273 TraceCheckUtils]: 16: Hoare triple {2845#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 13:02:45,107 INFO L273 TraceCheckUtils]: 17: Hoare triple {2845#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 13:02:45,107 INFO L273 TraceCheckUtils]: 18: Hoare triple {2845#true} assume 4368 == #t~mem27;havoc #t~mem27; {2845#true} is VALID [2018-11-23 13:02:45,107 INFO L273 TraceCheckUtils]: 19: Hoare triple {2845#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {2845#true} is VALID [2018-11-23 13:02:45,107 INFO L273 TraceCheckUtils]: 20: Hoare triple {2845#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {2845#true} is VALID [2018-11-23 13:02:45,108 INFO L273 TraceCheckUtils]: 21: Hoare triple {2845#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 13:02:45,108 INFO L273 TraceCheckUtils]: 22: Hoare triple {2845#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {2845#true} is VALID [2018-11-23 13:02:45,108 INFO L273 TraceCheckUtils]: 23: Hoare triple {2845#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {2845#true} is VALID [2018-11-23 13:02:45,109 INFO L273 TraceCheckUtils]: 24: Hoare triple {2845#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {2845#true} is VALID [2018-11-23 13:02:45,109 INFO L273 TraceCheckUtils]: 25: Hoare triple {2845#true} ~skip~0 := 0; {2845#true} is VALID [2018-11-23 13:02:45,109 INFO L273 TraceCheckUtils]: 26: Hoare triple {2845#true} assume !false; {2845#true} is VALID [2018-11-23 13:02:45,109 INFO L273 TraceCheckUtils]: 27: Hoare triple {2845#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 13:02:45,110 INFO L273 TraceCheckUtils]: 28: Hoare triple {2845#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 13:02:45,110 INFO L273 TraceCheckUtils]: 29: Hoare triple {2845#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 13:02:45,110 INFO L273 TraceCheckUtils]: 30: Hoare triple {2845#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 13:02:45,110 INFO L273 TraceCheckUtils]: 31: Hoare triple {2845#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 13:02:45,111 INFO L273 TraceCheckUtils]: 32: Hoare triple {2845#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 13:02:45,111 INFO L273 TraceCheckUtils]: 33: Hoare triple {2845#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 13:02:45,111 INFO L273 TraceCheckUtils]: 34: Hoare triple {2845#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 13:02:45,111 INFO L273 TraceCheckUtils]: 35: Hoare triple {2845#true} assume 4384 == #t~mem29;havoc #t~mem29; {2845#true} is VALID [2018-11-23 13:02:45,112 INFO L273 TraceCheckUtils]: 36: Hoare triple {2845#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {2845#true} is VALID [2018-11-23 13:02:45,112 INFO L273 TraceCheckUtils]: 37: Hoare triple {2845#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {2845#true} is VALID [2018-11-23 13:02:45,112 INFO L273 TraceCheckUtils]: 38: Hoare triple {2845#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {2845#true} is VALID [2018-11-23 13:02:45,113 INFO L273 TraceCheckUtils]: 39: Hoare triple {2845#true} assume 0 != #t~mem68;havoc #t~mem68;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:45,114 INFO L273 TraceCheckUtils]: 40: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:45,118 INFO L273 TraceCheckUtils]: 41: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:45,118 INFO L273 TraceCheckUtils]: 42: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:45,121 INFO L273 TraceCheckUtils]: 43: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} ~skip~0 := 0; {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:45,121 INFO L273 TraceCheckUtils]: 44: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !false; {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:45,124 INFO L273 TraceCheckUtils]: 45: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:45,132 INFO L273 TraceCheckUtils]: 46: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:45,142 INFO L273 TraceCheckUtils]: 47: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:45,143 INFO L273 TraceCheckUtils]: 48: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:45,143 INFO L273 TraceCheckUtils]: 49: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:45,144 INFO L273 TraceCheckUtils]: 50: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:45,144 INFO L273 TraceCheckUtils]: 51: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:45,149 INFO L273 TraceCheckUtils]: 52: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:45,158 INFO L273 TraceCheckUtils]: 53: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:45,158 INFO L273 TraceCheckUtils]: 54: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:45,159 INFO L273 TraceCheckUtils]: 55: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:45,163 INFO L273 TraceCheckUtils]: 56: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:45,163 INFO L273 TraceCheckUtils]: 57: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:45,165 INFO L273 TraceCheckUtils]: 58: Hoare triple {2847#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {2848#(= 4560 |ssl3_connect_#t~mem35|)} is VALID [2018-11-23 13:02:45,165 INFO L273 TraceCheckUtils]: 59: Hoare triple {2848#(= 4560 |ssl3_connect_#t~mem35|)} assume 4432 == #t~mem35;havoc #t~mem35; {2846#false} is VALID [2018-11-23 13:02:45,165 INFO L273 TraceCheckUtils]: 60: Hoare triple {2846#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {2846#false} is VALID [2018-11-23 13:02:45,165 INFO L273 TraceCheckUtils]: 61: Hoare triple {2846#false} assume 5 == ~blastFlag~0; {2846#false} is VALID [2018-11-23 13:02:45,166 INFO L273 TraceCheckUtils]: 62: Hoare triple {2846#false} assume !false; {2846#false} is VALID [2018-11-23 13:02:45,177 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 13:02:45,178 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:02:45,178 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:02:45,178 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 63 [2018-11-23 13:02:45,179 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:02:45,179 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:02:45,261 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:02:45,261 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:02:45,261 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:02:45,262 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:02:45,262 INFO L87 Difference]: Start difference. First operand 325 states and 476 transitions. Second operand 4 states. [2018-11-23 13:02:47,283 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:02:47,284 INFO L93 Difference]: Finished difference Result 825 states and 1216 transitions. [2018-11-23 13:02:47,284 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:02:47,284 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 63 [2018-11-23 13:02:47,284 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:02:47,285 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:02:47,291 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 481 transitions. [2018-11-23 13:02:47,291 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:02:47,296 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 481 transitions. [2018-11-23 13:02:47,296 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 481 transitions. [2018-11-23 13:02:48,063 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 481 edges. 481 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:02:48,083 INFO L225 Difference]: With dead ends: 825 [2018-11-23 13:02:48,084 INFO L226 Difference]: Without dead ends: 513 [2018-11-23 13:02:48,085 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:02:48,086 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 513 states. [2018-11-23 13:02:48,210 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 513 to 375. [2018-11-23 13:02:48,210 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:02:48,210 INFO L82 GeneralOperation]: Start isEquivalent. First operand 513 states. Second operand 375 states. [2018-11-23 13:02:48,211 INFO L74 IsIncluded]: Start isIncluded. First operand 513 states. Second operand 375 states. [2018-11-23 13:02:48,211 INFO L87 Difference]: Start difference. First operand 513 states. Second operand 375 states. [2018-11-23 13:02:48,234 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:02:48,235 INFO L93 Difference]: Finished difference Result 513 states and 755 transitions. [2018-11-23 13:02:48,235 INFO L276 IsEmpty]: Start isEmpty. Operand 513 states and 755 transitions. [2018-11-23 13:02:48,236 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:02:48,236 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:02:48,237 INFO L74 IsIncluded]: Start isIncluded. First operand 375 states. Second operand 513 states. [2018-11-23 13:02:48,237 INFO L87 Difference]: Start difference. First operand 375 states. Second operand 513 states. [2018-11-23 13:02:48,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:02:48,259 INFO L93 Difference]: Finished difference Result 513 states and 755 transitions. [2018-11-23 13:02:48,259 INFO L276 IsEmpty]: Start isEmpty. Operand 513 states and 755 transitions. [2018-11-23 13:02:48,260 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:02:48,261 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:02:48,261 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:02:48,261 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:02:48,261 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 375 states. [2018-11-23 13:02:48,276 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 375 states to 375 states and 562 transitions. [2018-11-23 13:02:48,276 INFO L78 Accepts]: Start accepts. Automaton has 375 states and 562 transitions. Word has length 63 [2018-11-23 13:02:48,276 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:02:48,277 INFO L480 AbstractCegarLoop]: Abstraction has 375 states and 562 transitions. [2018-11-23 13:02:48,277 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:02:48,277 INFO L276 IsEmpty]: Start isEmpty. Operand 375 states and 562 transitions. [2018-11-23 13:02:48,278 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2018-11-23 13:02:48,278 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:02:48,279 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:02:48,279 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:02:48,279 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:02:48,279 INFO L82 PathProgramCache]: Analyzing trace with hash -1956647801, now seen corresponding path program 1 times [2018-11-23 13:02:48,279 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:02:48,280 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:02:48,281 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:02:48,281 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:02:48,282 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:02:48,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:02:48,959 INFO L256 TraceCheckUtils]: 0: Hoare triple {5273#true} call ULTIMATE.init(); {5273#true} is VALID [2018-11-23 13:02:48,959 INFO L273 TraceCheckUtils]: 1: Hoare triple {5273#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {5273#true} is VALID [2018-11-23 13:02:48,959 INFO L273 TraceCheckUtils]: 2: Hoare triple {5273#true} assume true; {5273#true} is VALID [2018-11-23 13:02:48,959 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {5273#true} {5273#true} #542#return; {5273#true} is VALID [2018-11-23 13:02:48,960 INFO L256 TraceCheckUtils]: 4: Hoare triple {5273#true} call #t~ret138 := main(); {5273#true} is VALID [2018-11-23 13:02:48,960 INFO L273 TraceCheckUtils]: 5: Hoare triple {5273#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {5273#true} is VALID [2018-11-23 13:02:48,960 INFO L256 TraceCheckUtils]: 6: Hoare triple {5273#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {5273#true} is VALID [2018-11-23 13:02:48,960 INFO L273 TraceCheckUtils]: 7: Hoare triple {5273#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 13:02:48,960 INFO L273 TraceCheckUtils]: 8: Hoare triple {5273#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {5273#true} is VALID [2018-11-23 13:02:48,961 INFO L273 TraceCheckUtils]: 9: Hoare triple {5273#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {5273#true} is VALID [2018-11-23 13:02:48,961 INFO L273 TraceCheckUtils]: 10: Hoare triple {5273#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {5273#true} is VALID [2018-11-23 13:02:48,961 INFO L273 TraceCheckUtils]: 11: Hoare triple {5273#true} assume !false; {5273#true} is VALID [2018-11-23 13:02:48,962 INFO L273 TraceCheckUtils]: 12: Hoare triple {5273#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 13:02:48,962 INFO L273 TraceCheckUtils]: 13: Hoare triple {5273#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 13:02:48,962 INFO L273 TraceCheckUtils]: 14: Hoare triple {5273#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 13:02:48,962 INFO L273 TraceCheckUtils]: 15: Hoare triple {5273#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 13:02:48,963 INFO L273 TraceCheckUtils]: 16: Hoare triple {5273#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 13:02:48,963 INFO L273 TraceCheckUtils]: 17: Hoare triple {5273#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 13:02:48,963 INFO L273 TraceCheckUtils]: 18: Hoare triple {5273#true} assume 4368 == #t~mem27;havoc #t~mem27; {5273#true} is VALID [2018-11-23 13:02:48,963 INFO L273 TraceCheckUtils]: 19: Hoare triple {5273#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {5273#true} is VALID [2018-11-23 13:02:48,964 INFO L273 TraceCheckUtils]: 20: Hoare triple {5273#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {5273#true} is VALID [2018-11-23 13:02:48,964 INFO L273 TraceCheckUtils]: 21: Hoare triple {5273#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 13:02:48,964 INFO L273 TraceCheckUtils]: 22: Hoare triple {5273#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {5273#true} is VALID [2018-11-23 13:02:48,964 INFO L273 TraceCheckUtils]: 23: Hoare triple {5273#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {5273#true} is VALID [2018-11-23 13:02:48,965 INFO L273 TraceCheckUtils]: 24: Hoare triple {5273#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {5273#true} is VALID [2018-11-23 13:02:48,965 INFO L273 TraceCheckUtils]: 25: Hoare triple {5273#true} ~skip~0 := 0; {5273#true} is VALID [2018-11-23 13:02:48,965 INFO L273 TraceCheckUtils]: 26: Hoare triple {5273#true} assume !false; {5273#true} is VALID [2018-11-23 13:02:48,965 INFO L273 TraceCheckUtils]: 27: Hoare triple {5273#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 13:02:48,965 INFO L273 TraceCheckUtils]: 28: Hoare triple {5273#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 13:02:48,966 INFO L273 TraceCheckUtils]: 29: Hoare triple {5273#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 13:02:48,966 INFO L273 TraceCheckUtils]: 30: Hoare triple {5273#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 13:02:48,966 INFO L273 TraceCheckUtils]: 31: Hoare triple {5273#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 13:02:48,966 INFO L273 TraceCheckUtils]: 32: Hoare triple {5273#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 13:02:48,967 INFO L273 TraceCheckUtils]: 33: Hoare triple {5273#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 13:02:48,967 INFO L273 TraceCheckUtils]: 34: Hoare triple {5273#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 13:02:48,967 INFO L273 TraceCheckUtils]: 35: Hoare triple {5273#true} assume 4384 == #t~mem29;havoc #t~mem29; {5273#true} is VALID [2018-11-23 13:02:48,967 INFO L273 TraceCheckUtils]: 36: Hoare triple {5273#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {5273#true} is VALID [2018-11-23 13:02:48,968 INFO L273 TraceCheckUtils]: 37: Hoare triple {5273#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {5273#true} is VALID [2018-11-23 13:02:48,968 INFO L273 TraceCheckUtils]: 38: Hoare triple {5273#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {5273#true} is VALID [2018-11-23 13:02:48,972 INFO L273 TraceCheckUtils]: 39: Hoare triple {5273#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:48,973 INFO L273 TraceCheckUtils]: 40: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:48,974 INFO L273 TraceCheckUtils]: 41: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:48,974 INFO L273 TraceCheckUtils]: 42: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:48,974 INFO L273 TraceCheckUtils]: 43: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} ~skip~0 := 0; {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:48,975 INFO L273 TraceCheckUtils]: 44: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !false; {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:48,975 INFO L273 TraceCheckUtils]: 45: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:48,976 INFO L273 TraceCheckUtils]: 46: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:48,976 INFO L273 TraceCheckUtils]: 47: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:48,976 INFO L273 TraceCheckUtils]: 48: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:48,977 INFO L273 TraceCheckUtils]: 49: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:48,977 INFO L273 TraceCheckUtils]: 50: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:48,978 INFO L273 TraceCheckUtils]: 51: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:48,979 INFO L273 TraceCheckUtils]: 52: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:48,979 INFO L273 TraceCheckUtils]: 53: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:48,982 INFO L273 TraceCheckUtils]: 54: Hoare triple {5275#(= 4400 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {5276#(= |ssl3_connect_#t~mem31| 4400)} is VALID [2018-11-23 13:02:48,982 INFO L273 TraceCheckUtils]: 55: Hoare triple {5276#(= |ssl3_connect_#t~mem31| 4400)} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {5274#false} is VALID [2018-11-23 13:02:48,983 INFO L273 TraceCheckUtils]: 56: Hoare triple {5274#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {5274#false} is VALID [2018-11-23 13:02:48,983 INFO L273 TraceCheckUtils]: 57: Hoare triple {5274#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {5274#false} is VALID [2018-11-23 13:02:48,983 INFO L273 TraceCheckUtils]: 58: Hoare triple {5274#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {5274#false} is VALID [2018-11-23 13:02:48,984 INFO L273 TraceCheckUtils]: 59: Hoare triple {5274#false} assume 4432 == #t~mem35;havoc #t~mem35; {5274#false} is VALID [2018-11-23 13:02:48,984 INFO L273 TraceCheckUtils]: 60: Hoare triple {5274#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {5274#false} is VALID [2018-11-23 13:02:48,984 INFO L273 TraceCheckUtils]: 61: Hoare triple {5274#false} assume 5 == ~blastFlag~0; {5274#false} is VALID [2018-11-23 13:02:48,984 INFO L273 TraceCheckUtils]: 62: Hoare triple {5274#false} assume !false; {5274#false} is VALID [2018-11-23 13:02:48,991 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 13:02:48,991 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:02:48,992 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:02:48,992 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 63 [2018-11-23 13:02:48,992 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:02:48,992 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:02:49,077 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:02:49,078 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:02:49,078 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:02:49,078 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:02:49,079 INFO L87 Difference]: Start difference. First operand 375 states and 562 transitions. Second operand 4 states. [2018-11-23 13:02:50,608 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:02:50,608 INFO L93 Difference]: Finished difference Result 821 states and 1232 transitions. [2018-11-23 13:02:50,608 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:02:50,608 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 63 [2018-11-23 13:02:50,609 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:02:50,609 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:02:50,613 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 402 transitions. [2018-11-23 13:02:50,613 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:02:50,616 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 402 transitions. [2018-11-23 13:02:50,616 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 402 transitions. [2018-11-23 13:02:51,722 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 402 edges. 402 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:02:51,739 INFO L225 Difference]: With dead ends: 821 [2018-11-23 13:02:51,740 INFO L226 Difference]: Without dead ends: 459 [2018-11-23 13:02:51,741 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:02:51,742 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 459 states. [2018-11-23 13:02:51,857 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 459 to 415. [2018-11-23 13:02:51,857 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:02:51,857 INFO L82 GeneralOperation]: Start isEquivalent. First operand 459 states. Second operand 415 states. [2018-11-23 13:02:51,857 INFO L74 IsIncluded]: Start isIncluded. First operand 459 states. Second operand 415 states. [2018-11-23 13:02:51,858 INFO L87 Difference]: Start difference. First operand 459 states. Second operand 415 states. [2018-11-23 13:02:51,872 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:02:51,873 INFO L93 Difference]: Finished difference Result 459 states and 685 transitions. [2018-11-23 13:02:51,873 INFO L276 IsEmpty]: Start isEmpty. Operand 459 states and 685 transitions. [2018-11-23 13:02:51,874 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:02:51,874 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:02:51,875 INFO L74 IsIncluded]: Start isIncluded. First operand 415 states. Second operand 459 states. [2018-11-23 13:02:51,875 INFO L87 Difference]: Start difference. First operand 415 states. Second operand 459 states. [2018-11-23 13:02:51,891 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:02:51,892 INFO L93 Difference]: Finished difference Result 459 states and 685 transitions. [2018-11-23 13:02:51,892 INFO L276 IsEmpty]: Start isEmpty. Operand 459 states and 685 transitions. [2018-11-23 13:02:51,894 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:02:51,894 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:02:51,894 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:02:51,894 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:02:51,894 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 415 states. [2018-11-23 13:02:51,907 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 415 states to 415 states and 630 transitions. [2018-11-23 13:02:51,908 INFO L78 Accepts]: Start accepts. Automaton has 415 states and 630 transitions. Word has length 63 [2018-11-23 13:02:51,908 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:02:51,908 INFO L480 AbstractCegarLoop]: Abstraction has 415 states and 630 transitions. [2018-11-23 13:02:51,908 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:02:51,908 INFO L276 IsEmpty]: Start isEmpty. Operand 415 states and 630 transitions. [2018-11-23 13:02:51,910 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2018-11-23 13:02:51,910 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:02:51,910 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:02:51,911 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:02:51,911 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:02:51,911 INFO L82 PathProgramCache]: Analyzing trace with hash -671506196, now seen corresponding path program 1 times [2018-11-23 13:02:51,911 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:02:51,911 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:02:51,913 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:02:51,913 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:02:51,913 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:02:51,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:02:52,583 INFO L256 TraceCheckUtils]: 0: Hoare triple {7614#true} call ULTIMATE.init(); {7614#true} is VALID [2018-11-23 13:02:52,583 INFO L273 TraceCheckUtils]: 1: Hoare triple {7614#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {7614#true} is VALID [2018-11-23 13:02:52,584 INFO L273 TraceCheckUtils]: 2: Hoare triple {7614#true} assume true; {7614#true} is VALID [2018-11-23 13:02:52,584 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {7614#true} {7614#true} #542#return; {7614#true} is VALID [2018-11-23 13:02:52,585 INFO L256 TraceCheckUtils]: 4: Hoare triple {7614#true} call #t~ret138 := main(); {7614#true} is VALID [2018-11-23 13:02:52,585 INFO L273 TraceCheckUtils]: 5: Hoare triple {7614#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {7614#true} is VALID [2018-11-23 13:02:52,585 INFO L256 TraceCheckUtils]: 6: Hoare triple {7614#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {7614#true} is VALID [2018-11-23 13:02:52,585 INFO L273 TraceCheckUtils]: 7: Hoare triple {7614#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 13:02:52,587 INFO L273 TraceCheckUtils]: 8: Hoare triple {7614#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {7614#true} is VALID [2018-11-23 13:02:52,587 INFO L273 TraceCheckUtils]: 9: Hoare triple {7614#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {7614#true} is VALID [2018-11-23 13:02:52,587 INFO L273 TraceCheckUtils]: 10: Hoare triple {7614#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {7614#true} is VALID [2018-11-23 13:02:52,588 INFO L273 TraceCheckUtils]: 11: Hoare triple {7614#true} assume !false; {7614#true} is VALID [2018-11-23 13:02:52,588 INFO L273 TraceCheckUtils]: 12: Hoare triple {7614#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 13:02:52,588 INFO L273 TraceCheckUtils]: 13: Hoare triple {7614#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 13:02:52,588 INFO L273 TraceCheckUtils]: 14: Hoare triple {7614#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 13:02:52,590 INFO L273 TraceCheckUtils]: 15: Hoare triple {7614#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 13:02:52,590 INFO L273 TraceCheckUtils]: 16: Hoare triple {7614#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 13:02:52,590 INFO L273 TraceCheckUtils]: 17: Hoare triple {7614#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 13:02:52,590 INFO L273 TraceCheckUtils]: 18: Hoare triple {7614#true} assume 4368 == #t~mem27;havoc #t~mem27; {7614#true} is VALID [2018-11-23 13:02:52,591 INFO L273 TraceCheckUtils]: 19: Hoare triple {7614#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {7614#true} is VALID [2018-11-23 13:02:52,591 INFO L273 TraceCheckUtils]: 20: Hoare triple {7614#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {7614#true} is VALID [2018-11-23 13:02:52,591 INFO L273 TraceCheckUtils]: 21: Hoare triple {7614#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 13:02:52,591 INFO L273 TraceCheckUtils]: 22: Hoare triple {7614#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {7614#true} is VALID [2018-11-23 13:02:52,594 INFO L273 TraceCheckUtils]: 23: Hoare triple {7614#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {7614#true} is VALID [2018-11-23 13:02:52,594 INFO L273 TraceCheckUtils]: 24: Hoare triple {7614#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {7614#true} is VALID [2018-11-23 13:02:52,594 INFO L273 TraceCheckUtils]: 25: Hoare triple {7614#true} ~skip~0 := 0; {7614#true} is VALID [2018-11-23 13:02:52,594 INFO L273 TraceCheckUtils]: 26: Hoare triple {7614#true} assume !false; {7614#true} is VALID [2018-11-23 13:02:52,595 INFO L273 TraceCheckUtils]: 27: Hoare triple {7614#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 13:02:52,595 INFO L273 TraceCheckUtils]: 28: Hoare triple {7614#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 13:02:52,595 INFO L273 TraceCheckUtils]: 29: Hoare triple {7614#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 13:02:52,595 INFO L273 TraceCheckUtils]: 30: Hoare triple {7614#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 13:02:52,595 INFO L273 TraceCheckUtils]: 31: Hoare triple {7614#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 13:02:52,596 INFO L273 TraceCheckUtils]: 32: Hoare triple {7614#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 13:02:52,596 INFO L273 TraceCheckUtils]: 33: Hoare triple {7614#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 13:02:52,596 INFO L273 TraceCheckUtils]: 34: Hoare triple {7614#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 13:02:52,596 INFO L273 TraceCheckUtils]: 35: Hoare triple {7614#true} assume 4384 == #t~mem29;havoc #t~mem29; {7614#true} is VALID [2018-11-23 13:02:52,597 INFO L273 TraceCheckUtils]: 36: Hoare triple {7614#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {7614#true} is VALID [2018-11-23 13:02:52,598 INFO L273 TraceCheckUtils]: 37: Hoare triple {7614#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {7614#true} is VALID [2018-11-23 13:02:52,598 INFO L273 TraceCheckUtils]: 38: Hoare triple {7614#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {7614#true} is VALID [2018-11-23 13:02:52,611 INFO L273 TraceCheckUtils]: 39: Hoare triple {7614#true} assume 0 != #t~mem68;havoc #t~mem68;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:52,624 INFO L273 TraceCheckUtils]: 40: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:52,641 INFO L273 TraceCheckUtils]: 41: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:52,643 INFO L273 TraceCheckUtils]: 42: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:52,643 INFO L273 TraceCheckUtils]: 43: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} ~skip~0 := 0; {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:52,645 INFO L273 TraceCheckUtils]: 44: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !false; {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:52,645 INFO L273 TraceCheckUtils]: 45: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:52,647 INFO L273 TraceCheckUtils]: 46: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:52,647 INFO L273 TraceCheckUtils]: 47: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:52,649 INFO L273 TraceCheckUtils]: 48: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:52,650 INFO L273 TraceCheckUtils]: 49: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:52,650 INFO L273 TraceCheckUtils]: 50: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:52,651 INFO L273 TraceCheckUtils]: 51: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:52,652 INFO L273 TraceCheckUtils]: 52: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:52,655 INFO L273 TraceCheckUtils]: 53: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:52,658 INFO L273 TraceCheckUtils]: 54: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:52,670 INFO L273 TraceCheckUtils]: 55: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:52,672 INFO L273 TraceCheckUtils]: 56: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:52,674 INFO L273 TraceCheckUtils]: 57: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:52,674 INFO L273 TraceCheckUtils]: 58: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:52,676 INFO L273 TraceCheckUtils]: 59: Hoare triple {7616#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4432 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {7617#(= 4560 |ssl3_connect_#t~mem36|)} is VALID [2018-11-23 13:02:52,676 INFO L273 TraceCheckUtils]: 60: Hoare triple {7617#(= 4560 |ssl3_connect_#t~mem36|)} assume 4433 == #t~mem36;havoc #t~mem36; {7615#false} is VALID [2018-11-23 13:02:52,676 INFO L273 TraceCheckUtils]: 61: Hoare triple {7615#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {7615#false} is VALID [2018-11-23 13:02:52,676 INFO L273 TraceCheckUtils]: 62: Hoare triple {7615#false} assume 5 == ~blastFlag~0; {7615#false} is VALID [2018-11-23 13:02:52,677 INFO L273 TraceCheckUtils]: 63: Hoare triple {7615#false} assume !false; {7615#false} is VALID [2018-11-23 13:02:52,685 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 13:02:52,685 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:02:52,685 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:02:52,686 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 64 [2018-11-23 13:02:52,686 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:02:52,686 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:02:52,789 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:02:52,790 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:02:52,790 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:02:52,790 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:02:52,790 INFO L87 Difference]: Start difference. First operand 415 states and 630 transitions. Second operand 4 states. [2018-11-23 13:02:54,918 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:02:54,918 INFO L93 Difference]: Finished difference Result 949 states and 1429 transitions. [2018-11-23 13:02:54,918 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:02:54,918 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 64 [2018-11-23 13:02:54,919 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:02:54,919 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:02:54,926 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 476 transitions. [2018-11-23 13:02:54,927 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:02:54,934 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 476 transitions. [2018-11-23 13:02:54,934 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 476 transitions. [2018-11-23 13:02:55,957 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 476 edges. 476 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:02:55,979 INFO L225 Difference]: With dead ends: 949 [2018-11-23 13:02:55,979 INFO L226 Difference]: Without dead ends: 547 [2018-11-23 13:02:55,980 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:02:55,981 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 547 states. [2018-11-23 13:02:56,238 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 547 to 417. [2018-11-23 13:02:56,238 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:02:56,238 INFO L82 GeneralOperation]: Start isEquivalent. First operand 547 states. Second operand 417 states. [2018-11-23 13:02:56,239 INFO L74 IsIncluded]: Start isIncluded. First operand 547 states. Second operand 417 states. [2018-11-23 13:02:56,239 INFO L87 Difference]: Start difference. First operand 547 states. Second operand 417 states. [2018-11-23 13:02:56,259 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:02:56,259 INFO L93 Difference]: Finished difference Result 547 states and 814 transitions. [2018-11-23 13:02:56,259 INFO L276 IsEmpty]: Start isEmpty. Operand 547 states and 814 transitions. [2018-11-23 13:02:56,261 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:02:56,261 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:02:56,261 INFO L74 IsIncluded]: Start isIncluded. First operand 417 states. Second operand 547 states. [2018-11-23 13:02:56,261 INFO L87 Difference]: Start difference. First operand 417 states. Second operand 547 states. [2018-11-23 13:02:56,283 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:02:56,283 INFO L93 Difference]: Finished difference Result 547 states and 814 transitions. [2018-11-23 13:02:56,283 INFO L276 IsEmpty]: Start isEmpty. Operand 547 states and 814 transitions. [2018-11-23 13:02:56,285 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:02:56,285 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:02:56,285 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:02:56,285 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:02:56,285 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 417 states. [2018-11-23 13:02:56,300 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 417 states to 417 states and 632 transitions. [2018-11-23 13:02:56,300 INFO L78 Accepts]: Start accepts. Automaton has 417 states and 632 transitions. Word has length 64 [2018-11-23 13:02:56,301 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:02:56,301 INFO L480 AbstractCegarLoop]: Abstraction has 417 states and 632 transitions. [2018-11-23 13:02:56,301 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:02:56,301 INFO L276 IsEmpty]: Start isEmpty. Operand 417 states and 632 transitions. [2018-11-23 13:02:56,302 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2018-11-23 13:02:56,303 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:02:56,303 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:02:56,303 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:02:56,303 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:02:56,303 INFO L82 PathProgramCache]: Analyzing trace with hash 653887364, now seen corresponding path program 1 times [2018-11-23 13:02:56,304 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:02:56,304 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:02:56,305 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:02:56,305 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:02:56,305 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:02:56,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:02:56,952 INFO L256 TraceCheckUtils]: 0: Hoare triple {10282#true} call ULTIMATE.init(); {10282#true} is VALID [2018-11-23 13:02:56,952 INFO L273 TraceCheckUtils]: 1: Hoare triple {10282#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {10282#true} is VALID [2018-11-23 13:02:56,952 INFO L273 TraceCheckUtils]: 2: Hoare triple {10282#true} assume true; {10282#true} is VALID [2018-11-23 13:02:56,953 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {10282#true} {10282#true} #542#return; {10282#true} is VALID [2018-11-23 13:02:56,953 INFO L256 TraceCheckUtils]: 4: Hoare triple {10282#true} call #t~ret138 := main(); {10282#true} is VALID [2018-11-23 13:02:56,953 INFO L273 TraceCheckUtils]: 5: Hoare triple {10282#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {10282#true} is VALID [2018-11-23 13:02:56,954 INFO L256 TraceCheckUtils]: 6: Hoare triple {10282#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {10282#true} is VALID [2018-11-23 13:02:56,954 INFO L273 TraceCheckUtils]: 7: Hoare triple {10282#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 13:02:56,954 INFO L273 TraceCheckUtils]: 8: Hoare triple {10282#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {10282#true} is VALID [2018-11-23 13:02:56,954 INFO L273 TraceCheckUtils]: 9: Hoare triple {10282#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {10282#true} is VALID [2018-11-23 13:02:56,954 INFO L273 TraceCheckUtils]: 10: Hoare triple {10282#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {10282#true} is VALID [2018-11-23 13:02:56,955 INFO L273 TraceCheckUtils]: 11: Hoare triple {10282#true} assume !false; {10282#true} is VALID [2018-11-23 13:02:56,955 INFO L273 TraceCheckUtils]: 12: Hoare triple {10282#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 13:02:56,955 INFO L273 TraceCheckUtils]: 13: Hoare triple {10282#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 13:02:56,955 INFO L273 TraceCheckUtils]: 14: Hoare triple {10282#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 13:02:56,956 INFO L273 TraceCheckUtils]: 15: Hoare triple {10282#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 13:02:56,956 INFO L273 TraceCheckUtils]: 16: Hoare triple {10282#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 13:02:56,956 INFO L273 TraceCheckUtils]: 17: Hoare triple {10282#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 13:02:56,956 INFO L273 TraceCheckUtils]: 18: Hoare triple {10282#true} assume 4368 == #t~mem27;havoc #t~mem27; {10282#true} is VALID [2018-11-23 13:02:56,957 INFO L273 TraceCheckUtils]: 19: Hoare triple {10282#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {10282#true} is VALID [2018-11-23 13:02:56,957 INFO L273 TraceCheckUtils]: 20: Hoare triple {10282#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {10282#true} is VALID [2018-11-23 13:02:56,957 INFO L273 TraceCheckUtils]: 21: Hoare triple {10282#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 13:02:56,957 INFO L273 TraceCheckUtils]: 22: Hoare triple {10282#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {10282#true} is VALID [2018-11-23 13:02:56,957 INFO L273 TraceCheckUtils]: 23: Hoare triple {10282#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {10282#true} is VALID [2018-11-23 13:02:56,959 INFO L273 TraceCheckUtils]: 24: Hoare triple {10282#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {10282#true} is VALID [2018-11-23 13:02:56,959 INFO L273 TraceCheckUtils]: 25: Hoare triple {10282#true} ~skip~0 := 0; {10282#true} is VALID [2018-11-23 13:02:56,959 INFO L273 TraceCheckUtils]: 26: Hoare triple {10282#true} assume !false; {10282#true} is VALID [2018-11-23 13:02:56,960 INFO L273 TraceCheckUtils]: 27: Hoare triple {10282#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 13:02:56,960 INFO L273 TraceCheckUtils]: 28: Hoare triple {10282#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 13:02:56,960 INFO L273 TraceCheckUtils]: 29: Hoare triple {10282#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 13:02:56,960 INFO L273 TraceCheckUtils]: 30: Hoare triple {10282#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 13:02:56,960 INFO L273 TraceCheckUtils]: 31: Hoare triple {10282#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 13:02:56,961 INFO L273 TraceCheckUtils]: 32: Hoare triple {10282#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 13:02:56,961 INFO L273 TraceCheckUtils]: 33: Hoare triple {10282#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 13:02:56,961 INFO L273 TraceCheckUtils]: 34: Hoare triple {10282#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 13:02:56,961 INFO L273 TraceCheckUtils]: 35: Hoare triple {10282#true} assume 4384 == #t~mem29;havoc #t~mem29; {10282#true} is VALID [2018-11-23 13:02:56,962 INFO L273 TraceCheckUtils]: 36: Hoare triple {10282#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {10282#true} is VALID [2018-11-23 13:02:56,962 INFO L273 TraceCheckUtils]: 37: Hoare triple {10282#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {10282#true} is VALID [2018-11-23 13:02:56,962 INFO L273 TraceCheckUtils]: 38: Hoare triple {10282#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {10282#true} is VALID [2018-11-23 13:02:56,975 INFO L273 TraceCheckUtils]: 39: Hoare triple {10282#true} assume 0 != #t~mem68;havoc #t~mem68;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:56,988 INFO L273 TraceCheckUtils]: 40: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:57,001 INFO L273 TraceCheckUtils]: 41: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:57,014 INFO L273 TraceCheckUtils]: 42: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:57,028 INFO L273 TraceCheckUtils]: 43: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} ~skip~0 := 0; {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:57,037 INFO L273 TraceCheckUtils]: 44: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !false; {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:57,050 INFO L273 TraceCheckUtils]: 45: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:57,063 INFO L273 TraceCheckUtils]: 46: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:57,076 INFO L273 TraceCheckUtils]: 47: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:57,087 INFO L273 TraceCheckUtils]: 48: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:57,100 INFO L273 TraceCheckUtils]: 49: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:57,112 INFO L273 TraceCheckUtils]: 50: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:57,125 INFO L273 TraceCheckUtils]: 51: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:57,138 INFO L273 TraceCheckUtils]: 52: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:57,151 INFO L273 TraceCheckUtils]: 53: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:57,164 INFO L273 TraceCheckUtils]: 54: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:57,176 INFO L273 TraceCheckUtils]: 55: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:57,189 INFO L273 TraceCheckUtils]: 56: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:57,202 INFO L273 TraceCheckUtils]: 57: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:57,214 INFO L273 TraceCheckUtils]: 58: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:57,227 INFO L273 TraceCheckUtils]: 59: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4432 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:02:57,240 INFO L273 TraceCheckUtils]: 60: Hoare triple {10284#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4433 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {10285#(= 4560 |ssl3_connect_#t~mem37|)} is VALID [2018-11-23 13:02:57,253 INFO L273 TraceCheckUtils]: 61: Hoare triple {10285#(= 4560 |ssl3_connect_#t~mem37|)} assume 4448 == #t~mem37;havoc #t~mem37; {10283#false} is VALID [2018-11-23 13:02:57,253 INFO L273 TraceCheckUtils]: 62: Hoare triple {10283#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {10283#false} is VALID [2018-11-23 13:02:57,254 INFO L273 TraceCheckUtils]: 63: Hoare triple {10283#false} assume 4 == ~blastFlag~0; {10283#false} is VALID [2018-11-23 13:02:57,254 INFO L273 TraceCheckUtils]: 64: Hoare triple {10283#false} assume !false; {10283#false} is VALID [2018-11-23 13:02:57,261 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 13:02:57,261 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:02:57,262 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:02:57,262 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 65 [2018-11-23 13:02:57,262 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:02:57,263 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:02:57,335 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 58 edges. 58 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:02:57,335 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:02:57,336 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:02:57,336 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:02:57,336 INFO L87 Difference]: Start difference. First operand 417 states and 632 transitions. Second operand 4 states. [2018-11-23 13:03:00,109 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:00,109 INFO L93 Difference]: Finished difference Result 951 states and 1429 transitions. [2018-11-23 13:03:00,109 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:03:00,109 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 65 [2018-11-23 13:03:00,110 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:03:00,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:00,113 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 475 transitions. [2018-11-23 13:03:00,113 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:00,117 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 475 transitions. [2018-11-23 13:03:00,118 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 475 transitions. [2018-11-23 13:03:01,230 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 475 edges. 475 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:01,247 INFO L225 Difference]: With dead ends: 951 [2018-11-23 13:03:01,247 INFO L226 Difference]: Without dead ends: 547 [2018-11-23 13:03:01,248 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:03:01,249 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 547 states. [2018-11-23 13:03:01,418 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 547 to 419. [2018-11-23 13:03:01,418 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:03:01,418 INFO L82 GeneralOperation]: Start isEquivalent. First operand 547 states. Second operand 419 states. [2018-11-23 13:03:01,418 INFO L74 IsIncluded]: Start isIncluded. First operand 547 states. Second operand 419 states. [2018-11-23 13:03:01,419 INFO L87 Difference]: Start difference. First operand 547 states. Second operand 419 states. [2018-11-23 13:03:01,440 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:01,440 INFO L93 Difference]: Finished difference Result 547 states and 812 transitions. [2018-11-23 13:03:01,440 INFO L276 IsEmpty]: Start isEmpty. Operand 547 states and 812 transitions. [2018-11-23 13:03:01,441 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:01,442 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:01,442 INFO L74 IsIncluded]: Start isIncluded. First operand 419 states. Second operand 547 states. [2018-11-23 13:03:01,442 INFO L87 Difference]: Start difference. First operand 419 states. Second operand 547 states. [2018-11-23 13:03:01,465 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:01,465 INFO L93 Difference]: Finished difference Result 547 states and 812 transitions. [2018-11-23 13:03:01,465 INFO L276 IsEmpty]: Start isEmpty. Operand 547 states and 812 transitions. [2018-11-23 13:03:01,467 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:01,467 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:01,467 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:03:01,467 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:03:01,467 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 419 states. [2018-11-23 13:03:01,481 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 419 states to 419 states and 634 transitions. [2018-11-23 13:03:01,482 INFO L78 Accepts]: Start accepts. Automaton has 419 states and 634 transitions. Word has length 65 [2018-11-23 13:03:01,482 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:03:01,482 INFO L480 AbstractCegarLoop]: Abstraction has 419 states and 634 transitions. [2018-11-23 13:03:01,482 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:03:01,482 INFO L276 IsEmpty]: Start isEmpty. Operand 419 states and 634 transitions. [2018-11-23 13:03:01,484 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2018-11-23 13:03:01,484 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:03:01,484 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:03:01,484 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:03:01,485 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:03:01,485 INFO L82 PathProgramCache]: Analyzing trace with hash -1208805305, now seen corresponding path program 1 times [2018-11-23 13:03:01,485 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:03:01,485 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:03:01,488 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:01,488 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:03:01,488 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:01,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:03:01,818 WARN L180 SmtUtils]: Spent 100.00 ms on a formula simplification. DAG size of input: 16 DAG size of output: 13 [2018-11-23 13:03:02,137 INFO L256 TraceCheckUtils]: 0: Hoare triple {12954#true} call ULTIMATE.init(); {12954#true} is VALID [2018-11-23 13:03:02,137 INFO L273 TraceCheckUtils]: 1: Hoare triple {12954#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {12954#true} is VALID [2018-11-23 13:03:02,137 INFO L273 TraceCheckUtils]: 2: Hoare triple {12954#true} assume true; {12954#true} is VALID [2018-11-23 13:03:02,138 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {12954#true} {12954#true} #542#return; {12954#true} is VALID [2018-11-23 13:03:02,138 INFO L256 TraceCheckUtils]: 4: Hoare triple {12954#true} call #t~ret138 := main(); {12954#true} is VALID [2018-11-23 13:03:02,138 INFO L273 TraceCheckUtils]: 5: Hoare triple {12954#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {12954#true} is VALID [2018-11-23 13:03:02,138 INFO L256 TraceCheckUtils]: 6: Hoare triple {12954#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {12954#true} is VALID [2018-11-23 13:03:02,138 INFO L273 TraceCheckUtils]: 7: Hoare triple {12954#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 13:03:02,139 INFO L273 TraceCheckUtils]: 8: Hoare triple {12954#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {12954#true} is VALID [2018-11-23 13:03:02,139 INFO L273 TraceCheckUtils]: 9: Hoare triple {12954#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {12954#true} is VALID [2018-11-23 13:03:02,139 INFO L273 TraceCheckUtils]: 10: Hoare triple {12954#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {12954#true} is VALID [2018-11-23 13:03:02,139 INFO L273 TraceCheckUtils]: 11: Hoare triple {12954#true} assume !false; {12954#true} is VALID [2018-11-23 13:03:02,140 INFO L273 TraceCheckUtils]: 12: Hoare triple {12954#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 13:03:02,140 INFO L273 TraceCheckUtils]: 13: Hoare triple {12954#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 13:03:02,140 INFO L273 TraceCheckUtils]: 14: Hoare triple {12954#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 13:03:02,141 INFO L273 TraceCheckUtils]: 15: Hoare triple {12954#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 13:03:02,141 INFO L273 TraceCheckUtils]: 16: Hoare triple {12954#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 13:03:02,141 INFO L273 TraceCheckUtils]: 17: Hoare triple {12954#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 13:03:02,141 INFO L273 TraceCheckUtils]: 18: Hoare triple {12954#true} assume 4368 == #t~mem27;havoc #t~mem27; {12954#true} is VALID [2018-11-23 13:03:02,141 INFO L273 TraceCheckUtils]: 19: Hoare triple {12954#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {12954#true} is VALID [2018-11-23 13:03:02,142 INFO L273 TraceCheckUtils]: 20: Hoare triple {12954#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {12954#true} is VALID [2018-11-23 13:03:02,142 INFO L273 TraceCheckUtils]: 21: Hoare triple {12954#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 13:03:02,142 INFO L273 TraceCheckUtils]: 22: Hoare triple {12954#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {12954#true} is VALID [2018-11-23 13:03:02,142 INFO L273 TraceCheckUtils]: 23: Hoare triple {12954#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {12954#true} is VALID [2018-11-23 13:03:02,142 INFO L273 TraceCheckUtils]: 24: Hoare triple {12954#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {12954#true} is VALID [2018-11-23 13:03:02,143 INFO L273 TraceCheckUtils]: 25: Hoare triple {12954#true} ~skip~0 := 0; {12954#true} is VALID [2018-11-23 13:03:02,143 INFO L273 TraceCheckUtils]: 26: Hoare triple {12954#true} assume !false; {12954#true} is VALID [2018-11-23 13:03:02,143 INFO L273 TraceCheckUtils]: 27: Hoare triple {12954#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 13:03:02,143 INFO L273 TraceCheckUtils]: 28: Hoare triple {12954#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 13:03:02,143 INFO L273 TraceCheckUtils]: 29: Hoare triple {12954#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 13:03:02,144 INFO L273 TraceCheckUtils]: 30: Hoare triple {12954#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 13:03:02,144 INFO L273 TraceCheckUtils]: 31: Hoare triple {12954#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 13:03:02,144 INFO L273 TraceCheckUtils]: 32: Hoare triple {12954#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 13:03:02,144 INFO L273 TraceCheckUtils]: 33: Hoare triple {12954#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 13:03:02,144 INFO L273 TraceCheckUtils]: 34: Hoare triple {12954#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 13:03:02,145 INFO L273 TraceCheckUtils]: 35: Hoare triple {12954#true} assume 4384 == #t~mem29;havoc #t~mem29; {12954#true} is VALID [2018-11-23 13:03:02,145 INFO L273 TraceCheckUtils]: 36: Hoare triple {12954#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {12954#true} is VALID [2018-11-23 13:03:02,145 INFO L273 TraceCheckUtils]: 37: Hoare triple {12954#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {12954#true} is VALID [2018-11-23 13:03:02,145 INFO L273 TraceCheckUtils]: 38: Hoare triple {12954#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {12954#true} is VALID [2018-11-23 13:03:02,149 INFO L273 TraceCheckUtils]: 39: Hoare triple {12954#true} assume 0 != #t~mem68;havoc #t~mem68;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:02,150 INFO L273 TraceCheckUtils]: 40: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:02,151 INFO L273 TraceCheckUtils]: 41: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:02,151 INFO L273 TraceCheckUtils]: 42: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:02,152 INFO L273 TraceCheckUtils]: 43: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} ~skip~0 := 0; {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:02,152 INFO L273 TraceCheckUtils]: 44: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !false; {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:02,152 INFO L273 TraceCheckUtils]: 45: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:02,153 INFO L273 TraceCheckUtils]: 46: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:02,155 INFO L273 TraceCheckUtils]: 47: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:02,155 INFO L273 TraceCheckUtils]: 48: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:02,160 INFO L273 TraceCheckUtils]: 49: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:02,160 INFO L273 TraceCheckUtils]: 50: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:02,162 INFO L273 TraceCheckUtils]: 51: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:02,164 INFO L273 TraceCheckUtils]: 52: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:02,166 INFO L273 TraceCheckUtils]: 53: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:02,169 INFO L273 TraceCheckUtils]: 54: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:02,169 INFO L273 TraceCheckUtils]: 55: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:02,171 INFO L273 TraceCheckUtils]: 56: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:02,171 INFO L273 TraceCheckUtils]: 57: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:02,171 INFO L273 TraceCheckUtils]: 58: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:02,173 INFO L273 TraceCheckUtils]: 59: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4432 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:02,173 INFO L273 TraceCheckUtils]: 60: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4433 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:02,174 INFO L273 TraceCheckUtils]: 61: Hoare triple {12956#(= 4560 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)))} assume !(4448 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {12957#(= 4560 |ssl3_connect_#t~mem38|)} is VALID [2018-11-23 13:03:02,175 INFO L273 TraceCheckUtils]: 62: Hoare triple {12957#(= 4560 |ssl3_connect_#t~mem38|)} assume 4449 == #t~mem38;havoc #t~mem38; {12955#false} is VALID [2018-11-23 13:03:02,175 INFO L273 TraceCheckUtils]: 63: Hoare triple {12955#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {12955#false} is VALID [2018-11-23 13:03:02,175 INFO L273 TraceCheckUtils]: 64: Hoare triple {12955#false} assume 4 == ~blastFlag~0; {12955#false} is VALID [2018-11-23 13:03:02,176 INFO L273 TraceCheckUtils]: 65: Hoare triple {12955#false} assume !false; {12955#false} is VALID [2018-11-23 13:03:02,187 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 13:03:02,187 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:03:02,187 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:03:02,188 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 66 [2018-11-23 13:03:02,188 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:03:02,188 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:03:02,272 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 59 edges. 59 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:02,272 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:03:02,272 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:03:02,272 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:03:02,273 INFO L87 Difference]: Start difference. First operand 419 states and 634 transitions. Second operand 4 states. [2018-11-23 13:03:04,170 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:04,170 INFO L93 Difference]: Finished difference Result 943 states and 1417 transitions. [2018-11-23 13:03:04,170 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:03:04,170 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 66 [2018-11-23 13:03:04,171 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:03:04,171 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:04,174 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 467 transitions. [2018-11-23 13:03:04,175 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:04,178 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 467 transitions. [2018-11-23 13:03:04,178 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 467 transitions. [2018-11-23 13:03:05,337 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 467 edges. 467 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:05,354 INFO L225 Difference]: With dead ends: 943 [2018-11-23 13:03:05,355 INFO L226 Difference]: Without dead ends: 537 [2018-11-23 13:03:05,356 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:03:05,356 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 537 states. [2018-11-23 13:03:05,571 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 537 to 421. [2018-11-23 13:03:05,571 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:03:05,571 INFO L82 GeneralOperation]: Start isEquivalent. First operand 537 states. Second operand 421 states. [2018-11-23 13:03:05,571 INFO L74 IsIncluded]: Start isIncluded. First operand 537 states. Second operand 421 states. [2018-11-23 13:03:05,572 INFO L87 Difference]: Start difference. First operand 537 states. Second operand 421 states. [2018-11-23 13:03:05,593 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:05,593 INFO L93 Difference]: Finished difference Result 537 states and 798 transitions. [2018-11-23 13:03:05,594 INFO L276 IsEmpty]: Start isEmpty. Operand 537 states and 798 transitions. [2018-11-23 13:03:05,595 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:05,595 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:05,595 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 537 states. [2018-11-23 13:03:05,596 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 537 states. [2018-11-23 13:03:05,619 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:05,619 INFO L93 Difference]: Finished difference Result 537 states and 798 transitions. [2018-11-23 13:03:05,619 INFO L276 IsEmpty]: Start isEmpty. Operand 537 states and 798 transitions. [2018-11-23 13:03:05,621 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:05,621 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:05,621 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:03:05,621 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:03:05,621 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 13:03:05,638 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 636 transitions. [2018-11-23 13:03:05,638 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 636 transitions. Word has length 66 [2018-11-23 13:03:05,638 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:03:05,639 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 636 transitions. [2018-11-23 13:03:05,639 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:03:05,639 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 636 transitions. [2018-11-23 13:03:05,641 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2018-11-23 13:03:05,641 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:03:05,641 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:03:05,641 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:03:05,642 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:03:05,642 INFO L82 PathProgramCache]: Analyzing trace with hash -784316286, now seen corresponding path program 1 times [2018-11-23 13:03:05,642 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:03:05,642 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:03:05,643 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:05,644 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:03:05,644 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:05,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:03:05,964 WARN L180 SmtUtils]: Spent 104.00 ms on a formula simplification. DAG size of input: 16 DAG size of output: 13 [2018-11-23 13:03:06,346 INFO L256 TraceCheckUtils]: 0: Hoare triple {15597#true} call ULTIMATE.init(); {15597#true} is VALID [2018-11-23 13:03:06,346 INFO L273 TraceCheckUtils]: 1: Hoare triple {15597#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {15597#true} is VALID [2018-11-23 13:03:06,346 INFO L273 TraceCheckUtils]: 2: Hoare triple {15597#true} assume true; {15597#true} is VALID [2018-11-23 13:03:06,346 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {15597#true} {15597#true} #542#return; {15597#true} is VALID [2018-11-23 13:03:06,347 INFO L256 TraceCheckUtils]: 4: Hoare triple {15597#true} call #t~ret138 := main(); {15597#true} is VALID [2018-11-23 13:03:06,347 INFO L273 TraceCheckUtils]: 5: Hoare triple {15597#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {15597#true} is VALID [2018-11-23 13:03:06,347 INFO L256 TraceCheckUtils]: 6: Hoare triple {15597#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {15597#true} is VALID [2018-11-23 13:03:06,347 INFO L273 TraceCheckUtils]: 7: Hoare triple {15597#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 13:03:06,347 INFO L273 TraceCheckUtils]: 8: Hoare triple {15597#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {15597#true} is VALID [2018-11-23 13:03:06,347 INFO L273 TraceCheckUtils]: 9: Hoare triple {15597#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {15597#true} is VALID [2018-11-23 13:03:06,348 INFO L273 TraceCheckUtils]: 10: Hoare triple {15597#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {15597#true} is VALID [2018-11-23 13:03:06,348 INFO L273 TraceCheckUtils]: 11: Hoare triple {15597#true} assume !false; {15597#true} is VALID [2018-11-23 13:03:06,348 INFO L273 TraceCheckUtils]: 12: Hoare triple {15597#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 13:03:06,348 INFO L273 TraceCheckUtils]: 13: Hoare triple {15597#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 13:03:06,348 INFO L273 TraceCheckUtils]: 14: Hoare triple {15597#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 13:03:06,348 INFO L273 TraceCheckUtils]: 15: Hoare triple {15597#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 13:03:06,349 INFO L273 TraceCheckUtils]: 16: Hoare triple {15597#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 13:03:06,349 INFO L273 TraceCheckUtils]: 17: Hoare triple {15597#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 13:03:06,349 INFO L273 TraceCheckUtils]: 18: Hoare triple {15597#true} assume 4368 == #t~mem27;havoc #t~mem27; {15597#true} is VALID [2018-11-23 13:03:06,349 INFO L273 TraceCheckUtils]: 19: Hoare triple {15597#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {15597#true} is VALID [2018-11-23 13:03:06,349 INFO L273 TraceCheckUtils]: 20: Hoare triple {15597#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {15597#true} is VALID [2018-11-23 13:03:06,349 INFO L273 TraceCheckUtils]: 21: Hoare triple {15597#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 13:03:06,350 INFO L273 TraceCheckUtils]: 22: Hoare triple {15597#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {15597#true} is VALID [2018-11-23 13:03:06,350 INFO L273 TraceCheckUtils]: 23: Hoare triple {15597#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {15597#true} is VALID [2018-11-23 13:03:06,350 INFO L273 TraceCheckUtils]: 24: Hoare triple {15597#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {15597#true} is VALID [2018-11-23 13:03:06,350 INFO L273 TraceCheckUtils]: 25: Hoare triple {15597#true} ~skip~0 := 0; {15597#true} is VALID [2018-11-23 13:03:06,350 INFO L273 TraceCheckUtils]: 26: Hoare triple {15597#true} assume !false; {15597#true} is VALID [2018-11-23 13:03:06,351 INFO L273 TraceCheckUtils]: 27: Hoare triple {15597#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 13:03:06,351 INFO L273 TraceCheckUtils]: 28: Hoare triple {15597#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 13:03:06,351 INFO L273 TraceCheckUtils]: 29: Hoare triple {15597#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 13:03:06,351 INFO L273 TraceCheckUtils]: 30: Hoare triple {15597#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 13:03:06,351 INFO L273 TraceCheckUtils]: 31: Hoare triple {15597#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 13:03:06,352 INFO L273 TraceCheckUtils]: 32: Hoare triple {15597#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 13:03:06,352 INFO L273 TraceCheckUtils]: 33: Hoare triple {15597#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 13:03:06,352 INFO L273 TraceCheckUtils]: 34: Hoare triple {15597#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 13:03:06,352 INFO L273 TraceCheckUtils]: 35: Hoare triple {15597#true} assume 4384 == #t~mem29;havoc #t~mem29; {15597#true} is VALID [2018-11-23 13:03:06,352 INFO L273 TraceCheckUtils]: 36: Hoare triple {15597#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {15597#true} is VALID [2018-11-23 13:03:06,353 INFO L273 TraceCheckUtils]: 37: Hoare triple {15597#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {15597#true} is VALID [2018-11-23 13:03:06,353 INFO L273 TraceCheckUtils]: 38: Hoare triple {15597#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {15597#true} is VALID [2018-11-23 13:03:06,354 INFO L273 TraceCheckUtils]: 39: Hoare triple {15597#true} assume 0 != #t~mem68;havoc #t~mem68;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:06,371 INFO L273 TraceCheckUtils]: 40: Hoare triple {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:06,372 INFO L273 TraceCheckUtils]: 41: Hoare triple {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:06,376 INFO L273 TraceCheckUtils]: 42: Hoare triple {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:06,376 INFO L273 TraceCheckUtils]: 43: Hoare triple {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} ~skip~0 := 0; {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:06,377 INFO L273 TraceCheckUtils]: 44: Hoare triple {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !false; {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:06,377 INFO L273 TraceCheckUtils]: 45: Hoare triple {15599#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {15600#(= |ssl3_connect_#t~mem22| 4560)} is VALID [2018-11-23 13:03:06,379 INFO L273 TraceCheckUtils]: 46: Hoare triple {15600#(= |ssl3_connect_#t~mem22| 4560)} assume 12292 == #t~mem22;havoc #t~mem22; {15598#false} is VALID [2018-11-23 13:03:06,379 INFO L273 TraceCheckUtils]: 47: Hoare triple {15598#false} call write~int(1, ~s.base, 40 + ~s.offset, 4);call write~int(4096, ~s.base, 52 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem56 := read~int(#t~mem55.base, 64 + #t~mem55.offset, 4);call write~int(1 + #t~mem56, #t~mem55.base, 64 + #t~mem55.offset, 4);havoc #t~mem55.base, #t~mem55.offset;havoc #t~mem56; {15598#false} is VALID [2018-11-23 13:03:06,379 INFO L273 TraceCheckUtils]: 48: Hoare triple {15598#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 13:03:06,379 INFO L273 TraceCheckUtils]: 49: Hoare triple {15598#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {15598#false} is VALID [2018-11-23 13:03:06,380 INFO L273 TraceCheckUtils]: 50: Hoare triple {15598#false} call #t~mem57 := read~int(~s.base, ~s.offset, 4); {15598#false} is VALID [2018-11-23 13:03:06,380 INFO L273 TraceCheckUtils]: 51: Hoare triple {15598#false} assume !(768 != ~bitwiseAnd(#t~mem57, 65280));havoc #t~mem57;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 13:03:06,380 INFO L273 TraceCheckUtils]: 52: Hoare triple {15598#false} assume !(0 == (#t~mem58.base + #t~mem58.offset) % 4294967296);havoc #t~mem58.base, #t~mem58.offset; {15598#false} is VALID [2018-11-23 13:03:06,381 INFO L273 TraceCheckUtils]: 53: Hoare triple {15598#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {15598#false} is VALID [2018-11-23 13:03:06,381 INFO L273 TraceCheckUtils]: 54: Hoare triple {15598#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {15598#false} is VALID [2018-11-23 13:03:06,381 INFO L273 TraceCheckUtils]: 55: Hoare triple {15598#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem63 := read~int(#t~mem62.base, 60 + #t~mem62.offset, 4);call write~int(1 + #t~mem63, #t~mem62.base, 60 + #t~mem62.offset, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, 64 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 13:03:06,382 INFO L273 TraceCheckUtils]: 56: Hoare triple {15598#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {15598#false} is VALID [2018-11-23 13:03:06,382 INFO L273 TraceCheckUtils]: 57: Hoare triple {15598#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {15598#false} is VALID [2018-11-23 13:03:06,382 INFO L273 TraceCheckUtils]: 58: Hoare triple {15598#false} ~skip~0 := 0; {15598#false} is VALID [2018-11-23 13:03:06,382 INFO L273 TraceCheckUtils]: 59: Hoare triple {15598#false} assume !false; {15598#false} is VALID [2018-11-23 13:03:06,383 INFO L273 TraceCheckUtils]: 60: Hoare triple {15598#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 13:03:06,383 INFO L273 TraceCheckUtils]: 61: Hoare triple {15598#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 13:03:06,383 INFO L273 TraceCheckUtils]: 62: Hoare triple {15598#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 13:03:06,383 INFO L273 TraceCheckUtils]: 63: Hoare triple {15598#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 13:03:06,384 INFO L273 TraceCheckUtils]: 64: Hoare triple {15598#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 13:03:06,384 INFO L273 TraceCheckUtils]: 65: Hoare triple {15598#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 13:03:06,384 INFO L273 TraceCheckUtils]: 66: Hoare triple {15598#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 13:03:06,384 INFO L273 TraceCheckUtils]: 67: Hoare triple {15598#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 13:03:06,384 INFO L273 TraceCheckUtils]: 68: Hoare triple {15598#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 13:03:06,385 INFO L273 TraceCheckUtils]: 69: Hoare triple {15598#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 13:03:06,385 INFO L273 TraceCheckUtils]: 70: Hoare triple {15598#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 13:03:06,385 INFO L273 TraceCheckUtils]: 71: Hoare triple {15598#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 13:03:06,385 INFO L273 TraceCheckUtils]: 72: Hoare triple {15598#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 13:03:06,386 INFO L273 TraceCheckUtils]: 73: Hoare triple {15598#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {15598#false} is VALID [2018-11-23 13:03:06,386 INFO L273 TraceCheckUtils]: 74: Hoare triple {15598#false} assume 4432 == #t~mem35;havoc #t~mem35; {15598#false} is VALID [2018-11-23 13:03:06,386 INFO L273 TraceCheckUtils]: 75: Hoare triple {15598#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {15598#false} is VALID [2018-11-23 13:03:06,386 INFO L273 TraceCheckUtils]: 76: Hoare triple {15598#false} assume 5 == ~blastFlag~0; {15598#false} is VALID [2018-11-23 13:03:06,387 INFO L273 TraceCheckUtils]: 77: Hoare triple {15598#false} assume !false; {15598#false} is VALID [2018-11-23 13:03:06,395 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 13:03:06,395 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:03:06,395 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:03:06,396 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 13:03:06,396 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:03:06,396 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:03:06,503 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 71 edges. 71 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:06,504 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:03:06,504 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:03:06,504 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:03:06,505 INFO L87 Difference]: Start difference. First operand 421 states and 636 transitions. Second operand 4 states. [2018-11-23 13:03:08,297 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:08,297 INFO L93 Difference]: Finished difference Result 943 states and 1415 transitions. [2018-11-23 13:03:08,297 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:03:08,297 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 13:03:08,298 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:03:08,298 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:08,302 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 465 transitions. [2018-11-23 13:03:08,302 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:08,307 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 465 transitions. [2018-11-23 13:03:08,307 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 465 transitions. [2018-11-23 13:03:09,969 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 465 edges. 465 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:09,984 INFO L225 Difference]: With dead ends: 943 [2018-11-23 13:03:09,984 INFO L226 Difference]: Without dead ends: 535 [2018-11-23 13:03:09,985 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:03:09,986 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 535 states. [2018-11-23 13:03:10,102 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 535 to 421. [2018-11-23 13:03:10,102 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:03:10,103 INFO L82 GeneralOperation]: Start isEquivalent. First operand 535 states. Second operand 421 states. [2018-11-23 13:03:10,103 INFO L74 IsIncluded]: Start isIncluded. First operand 535 states. Second operand 421 states. [2018-11-23 13:03:10,103 INFO L87 Difference]: Start difference. First operand 535 states. Second operand 421 states. [2018-11-23 13:03:10,121 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:10,122 INFO L93 Difference]: Finished difference Result 535 states and 794 transitions. [2018-11-23 13:03:10,122 INFO L276 IsEmpty]: Start isEmpty. Operand 535 states and 794 transitions. [2018-11-23 13:03:10,123 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:10,123 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:10,123 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 535 states. [2018-11-23 13:03:10,123 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 535 states. [2018-11-23 13:03:10,141 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:10,141 INFO L93 Difference]: Finished difference Result 535 states and 794 transitions. [2018-11-23 13:03:10,141 INFO L276 IsEmpty]: Start isEmpty. Operand 535 states and 794 transitions. [2018-11-23 13:03:10,142 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:10,142 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:10,142 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:03:10,142 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:03:10,142 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 13:03:10,155 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 634 transitions. [2018-11-23 13:03:10,155 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 634 transitions. Word has length 78 [2018-11-23 13:03:10,155 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:03:10,155 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 634 transitions. [2018-11-23 13:03:10,155 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:03:10,156 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 634 transitions. [2018-11-23 13:03:10,157 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2018-11-23 13:03:10,157 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:03:10,157 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:03:10,157 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:03:10,157 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:03:10,157 INFO L82 PathProgramCache]: Analyzing trace with hash -802971744, now seen corresponding path program 1 times [2018-11-23 13:03:10,158 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:03:10,158 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:03:10,159 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:10,159 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:03:10,159 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:10,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:03:10,361 INFO L256 TraceCheckUtils]: 0: Hoare triple {18234#true} call ULTIMATE.init(); {18234#true} is VALID [2018-11-23 13:03:10,362 INFO L273 TraceCheckUtils]: 1: Hoare triple {18234#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {18234#true} is VALID [2018-11-23 13:03:10,362 INFO L273 TraceCheckUtils]: 2: Hoare triple {18234#true} assume true; {18234#true} is VALID [2018-11-23 13:03:10,362 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {18234#true} {18234#true} #542#return; {18234#true} is VALID [2018-11-23 13:03:10,362 INFO L256 TraceCheckUtils]: 4: Hoare triple {18234#true} call #t~ret138 := main(); {18234#true} is VALID [2018-11-23 13:03:10,363 INFO L273 TraceCheckUtils]: 5: Hoare triple {18234#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {18234#true} is VALID [2018-11-23 13:03:10,363 INFO L256 TraceCheckUtils]: 6: Hoare triple {18234#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {18234#true} is VALID [2018-11-23 13:03:10,363 INFO L273 TraceCheckUtils]: 7: Hoare triple {18234#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 13:03:10,364 INFO L273 TraceCheckUtils]: 8: Hoare triple {18234#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {18234#true} is VALID [2018-11-23 13:03:10,364 INFO L273 TraceCheckUtils]: 9: Hoare triple {18234#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {18234#true} is VALID [2018-11-23 13:03:10,364 INFO L273 TraceCheckUtils]: 10: Hoare triple {18234#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {18234#true} is VALID [2018-11-23 13:03:10,364 INFO L273 TraceCheckUtils]: 11: Hoare triple {18234#true} assume !false; {18234#true} is VALID [2018-11-23 13:03:10,364 INFO L273 TraceCheckUtils]: 12: Hoare triple {18234#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 13:03:10,365 INFO L273 TraceCheckUtils]: 13: Hoare triple {18234#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 13:03:10,365 INFO L273 TraceCheckUtils]: 14: Hoare triple {18234#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 13:03:10,365 INFO L273 TraceCheckUtils]: 15: Hoare triple {18234#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 13:03:10,365 INFO L273 TraceCheckUtils]: 16: Hoare triple {18234#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 13:03:10,365 INFO L273 TraceCheckUtils]: 17: Hoare triple {18234#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 13:03:10,366 INFO L273 TraceCheckUtils]: 18: Hoare triple {18234#true} assume 4368 == #t~mem27;havoc #t~mem27; {18234#true} is VALID [2018-11-23 13:03:10,366 INFO L273 TraceCheckUtils]: 19: Hoare triple {18234#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {18234#true} is VALID [2018-11-23 13:03:10,366 INFO L273 TraceCheckUtils]: 20: Hoare triple {18234#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {18234#true} is VALID [2018-11-23 13:03:10,366 INFO L273 TraceCheckUtils]: 21: Hoare triple {18234#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 13:03:10,366 INFO L273 TraceCheckUtils]: 22: Hoare triple {18234#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {18234#true} is VALID [2018-11-23 13:03:10,366 INFO L273 TraceCheckUtils]: 23: Hoare triple {18234#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {18234#true} is VALID [2018-11-23 13:03:10,367 INFO L273 TraceCheckUtils]: 24: Hoare triple {18234#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {18234#true} is VALID [2018-11-23 13:03:10,367 INFO L273 TraceCheckUtils]: 25: Hoare triple {18234#true} ~skip~0 := 0; {18234#true} is VALID [2018-11-23 13:03:10,367 INFO L273 TraceCheckUtils]: 26: Hoare triple {18234#true} assume !false; {18234#true} is VALID [2018-11-23 13:03:10,367 INFO L273 TraceCheckUtils]: 27: Hoare triple {18234#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 13:03:10,367 INFO L273 TraceCheckUtils]: 28: Hoare triple {18234#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 13:03:10,368 INFO L273 TraceCheckUtils]: 29: Hoare triple {18234#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 13:03:10,368 INFO L273 TraceCheckUtils]: 30: Hoare triple {18234#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 13:03:10,368 INFO L273 TraceCheckUtils]: 31: Hoare triple {18234#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 13:03:10,368 INFO L273 TraceCheckUtils]: 32: Hoare triple {18234#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 13:03:10,368 INFO L273 TraceCheckUtils]: 33: Hoare triple {18234#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 13:03:10,368 INFO L273 TraceCheckUtils]: 34: Hoare triple {18234#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 13:03:10,369 INFO L273 TraceCheckUtils]: 35: Hoare triple {18234#true} assume 4384 == #t~mem29;havoc #t~mem29; {18234#true} is VALID [2018-11-23 13:03:10,369 INFO L273 TraceCheckUtils]: 36: Hoare triple {18234#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {18234#true} is VALID [2018-11-23 13:03:10,369 INFO L273 TraceCheckUtils]: 37: Hoare triple {18234#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {18234#true} is VALID [2018-11-23 13:03:10,369 INFO L273 TraceCheckUtils]: 38: Hoare triple {18234#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {18234#true} is VALID [2018-11-23 13:03:10,373 INFO L273 TraceCheckUtils]: 39: Hoare triple {18234#true} assume 0 != #t~mem68;havoc #t~mem68;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:10,374 INFO L273 TraceCheckUtils]: 40: Hoare triple {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:10,375 INFO L273 TraceCheckUtils]: 41: Hoare triple {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:10,375 INFO L273 TraceCheckUtils]: 42: Hoare triple {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:10,375 INFO L273 TraceCheckUtils]: 43: Hoare triple {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} ~skip~0 := 0; {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:10,376 INFO L273 TraceCheckUtils]: 44: Hoare triple {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !false; {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:10,376 INFO L273 TraceCheckUtils]: 45: Hoare triple {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:10,376 INFO L273 TraceCheckUtils]: 46: Hoare triple {18236#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {18237#(= |ssl3_connect_#t~mem23| 4560)} is VALID [2018-11-23 13:03:10,377 INFO L273 TraceCheckUtils]: 47: Hoare triple {18237#(= |ssl3_connect_#t~mem23| 4560)} assume 16384 == #t~mem23;havoc #t~mem23; {18235#false} is VALID [2018-11-23 13:03:10,377 INFO L273 TraceCheckUtils]: 48: Hoare triple {18235#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 13:03:10,377 INFO L273 TraceCheckUtils]: 49: Hoare triple {18235#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {18235#false} is VALID [2018-11-23 13:03:10,377 INFO L273 TraceCheckUtils]: 50: Hoare triple {18235#false} call #t~mem57 := read~int(~s.base, ~s.offset, 4); {18235#false} is VALID [2018-11-23 13:03:10,377 INFO L273 TraceCheckUtils]: 51: Hoare triple {18235#false} assume !(768 != ~bitwiseAnd(#t~mem57, 65280));havoc #t~mem57;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 13:03:10,378 INFO L273 TraceCheckUtils]: 52: Hoare triple {18235#false} assume !(0 == (#t~mem58.base + #t~mem58.offset) % 4294967296);havoc #t~mem58.base, #t~mem58.offset; {18235#false} is VALID [2018-11-23 13:03:10,378 INFO L273 TraceCheckUtils]: 53: Hoare triple {18235#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {18235#false} is VALID [2018-11-23 13:03:10,378 INFO L273 TraceCheckUtils]: 54: Hoare triple {18235#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {18235#false} is VALID [2018-11-23 13:03:10,378 INFO L273 TraceCheckUtils]: 55: Hoare triple {18235#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem63 := read~int(#t~mem62.base, 60 + #t~mem62.offset, 4);call write~int(1 + #t~mem63, #t~mem62.base, 60 + #t~mem62.offset, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, 64 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 13:03:10,378 INFO L273 TraceCheckUtils]: 56: Hoare triple {18235#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {18235#false} is VALID [2018-11-23 13:03:10,378 INFO L273 TraceCheckUtils]: 57: Hoare triple {18235#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {18235#false} is VALID [2018-11-23 13:03:10,379 INFO L273 TraceCheckUtils]: 58: Hoare triple {18235#false} ~skip~0 := 0; {18235#false} is VALID [2018-11-23 13:03:10,379 INFO L273 TraceCheckUtils]: 59: Hoare triple {18235#false} assume !false; {18235#false} is VALID [2018-11-23 13:03:10,379 INFO L273 TraceCheckUtils]: 60: Hoare triple {18235#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 13:03:10,379 INFO L273 TraceCheckUtils]: 61: Hoare triple {18235#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 13:03:10,380 INFO L273 TraceCheckUtils]: 62: Hoare triple {18235#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 13:03:10,380 INFO L273 TraceCheckUtils]: 63: Hoare triple {18235#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 13:03:10,380 INFO L273 TraceCheckUtils]: 64: Hoare triple {18235#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 13:03:10,380 INFO L273 TraceCheckUtils]: 65: Hoare triple {18235#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 13:03:10,380 INFO L273 TraceCheckUtils]: 66: Hoare triple {18235#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 13:03:10,381 INFO L273 TraceCheckUtils]: 67: Hoare triple {18235#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 13:03:10,381 INFO L273 TraceCheckUtils]: 68: Hoare triple {18235#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 13:03:10,381 INFO L273 TraceCheckUtils]: 69: Hoare triple {18235#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 13:03:10,381 INFO L273 TraceCheckUtils]: 70: Hoare triple {18235#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 13:03:10,381 INFO L273 TraceCheckUtils]: 71: Hoare triple {18235#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 13:03:10,381 INFO L273 TraceCheckUtils]: 72: Hoare triple {18235#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 13:03:10,381 INFO L273 TraceCheckUtils]: 73: Hoare triple {18235#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {18235#false} is VALID [2018-11-23 13:03:10,382 INFO L273 TraceCheckUtils]: 74: Hoare triple {18235#false} assume 4432 == #t~mem35;havoc #t~mem35; {18235#false} is VALID [2018-11-23 13:03:10,382 INFO L273 TraceCheckUtils]: 75: Hoare triple {18235#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {18235#false} is VALID [2018-11-23 13:03:10,382 INFO L273 TraceCheckUtils]: 76: Hoare triple {18235#false} assume 5 == ~blastFlag~0; {18235#false} is VALID [2018-11-23 13:03:10,382 INFO L273 TraceCheckUtils]: 77: Hoare triple {18235#false} assume !false; {18235#false} is VALID [2018-11-23 13:03:10,386 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 13:03:10,386 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:03:10,386 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:03:10,386 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 13:03:10,387 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:03:10,387 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:03:10,461 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 71 edges. 71 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:10,461 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:03:10,461 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:03:10,461 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:03:10,462 INFO L87 Difference]: Start difference. First operand 421 states and 634 transitions. Second operand 4 states. [2018-11-23 13:03:12,006 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:12,006 INFO L93 Difference]: Finished difference Result 943 states and 1411 transitions. [2018-11-23 13:03:12,006 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:03:12,006 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 13:03:12,006 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:03:12,006 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:12,010 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 464 transitions. [2018-11-23 13:03:12,010 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:12,013 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 464 transitions. [2018-11-23 13:03:12,013 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 464 transitions. [2018-11-23 13:03:12,503 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 464 edges. 464 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:12,524 INFO L225 Difference]: With dead ends: 943 [2018-11-23 13:03:12,524 INFO L226 Difference]: Without dead ends: 535 [2018-11-23 13:03:12,525 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:03:12,526 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 535 states. [2018-11-23 13:03:12,986 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 535 to 421. [2018-11-23 13:03:12,986 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:03:12,986 INFO L82 GeneralOperation]: Start isEquivalent. First operand 535 states. Second operand 421 states. [2018-11-23 13:03:12,987 INFO L74 IsIncluded]: Start isIncluded. First operand 535 states. Second operand 421 states. [2018-11-23 13:03:12,987 INFO L87 Difference]: Start difference. First operand 535 states. Second operand 421 states. [2018-11-23 13:03:13,003 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:13,003 INFO L93 Difference]: Finished difference Result 535 states and 792 transitions. [2018-11-23 13:03:13,003 INFO L276 IsEmpty]: Start isEmpty. Operand 535 states and 792 transitions. [2018-11-23 13:03:13,004 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:13,004 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:13,004 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 535 states. [2018-11-23 13:03:13,004 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 535 states. [2018-11-23 13:03:13,021 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:13,022 INFO L93 Difference]: Finished difference Result 535 states and 792 transitions. [2018-11-23 13:03:13,022 INFO L276 IsEmpty]: Start isEmpty. Operand 535 states and 792 transitions. [2018-11-23 13:03:13,023 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:13,023 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:13,023 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:03:13,023 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:03:13,023 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 13:03:13,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 632 transitions. [2018-11-23 13:03:13,036 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 632 transitions. Word has length 78 [2018-11-23 13:03:13,036 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:03:13,036 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 632 transitions. [2018-11-23 13:03:13,036 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:03:13,036 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 632 transitions. [2018-11-23 13:03:13,037 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2018-11-23 13:03:13,038 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:03:13,038 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:03:13,038 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:03:13,038 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:03:13,038 INFO L82 PathProgramCache]: Analyzing trace with hash -1508472381, now seen corresponding path program 1 times [2018-11-23 13:03:13,038 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:03:13,039 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:03:13,040 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:13,040 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:03:13,040 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:13,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:03:13,270 INFO L256 TraceCheckUtils]: 0: Hoare triple {20871#true} call ULTIMATE.init(); {20871#true} is VALID [2018-11-23 13:03:13,270 INFO L273 TraceCheckUtils]: 1: Hoare triple {20871#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {20871#true} is VALID [2018-11-23 13:03:13,270 INFO L273 TraceCheckUtils]: 2: Hoare triple {20871#true} assume true; {20871#true} is VALID [2018-11-23 13:03:13,271 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {20871#true} {20871#true} #542#return; {20871#true} is VALID [2018-11-23 13:03:13,271 INFO L256 TraceCheckUtils]: 4: Hoare triple {20871#true} call #t~ret138 := main(); {20871#true} is VALID [2018-11-23 13:03:13,271 INFO L273 TraceCheckUtils]: 5: Hoare triple {20871#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {20871#true} is VALID [2018-11-23 13:03:13,271 INFO L256 TraceCheckUtils]: 6: Hoare triple {20871#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {20871#true} is VALID [2018-11-23 13:03:13,271 INFO L273 TraceCheckUtils]: 7: Hoare triple {20871#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 13:03:13,271 INFO L273 TraceCheckUtils]: 8: Hoare triple {20871#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {20871#true} is VALID [2018-11-23 13:03:13,271 INFO L273 TraceCheckUtils]: 9: Hoare triple {20871#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {20871#true} is VALID [2018-11-23 13:03:13,272 INFO L273 TraceCheckUtils]: 10: Hoare triple {20871#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {20871#true} is VALID [2018-11-23 13:03:13,272 INFO L273 TraceCheckUtils]: 11: Hoare triple {20871#true} assume !false; {20871#true} is VALID [2018-11-23 13:03:13,272 INFO L273 TraceCheckUtils]: 12: Hoare triple {20871#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 13:03:13,272 INFO L273 TraceCheckUtils]: 13: Hoare triple {20871#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 13:03:13,272 INFO L273 TraceCheckUtils]: 14: Hoare triple {20871#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 13:03:13,272 INFO L273 TraceCheckUtils]: 15: Hoare triple {20871#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 13:03:13,272 INFO L273 TraceCheckUtils]: 16: Hoare triple {20871#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 13:03:13,272 INFO L273 TraceCheckUtils]: 17: Hoare triple {20871#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 13:03:13,272 INFO L273 TraceCheckUtils]: 18: Hoare triple {20871#true} assume 4368 == #t~mem27;havoc #t~mem27; {20871#true} is VALID [2018-11-23 13:03:13,273 INFO L273 TraceCheckUtils]: 19: Hoare triple {20871#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {20871#true} is VALID [2018-11-23 13:03:13,273 INFO L273 TraceCheckUtils]: 20: Hoare triple {20871#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {20871#true} is VALID [2018-11-23 13:03:13,273 INFO L273 TraceCheckUtils]: 21: Hoare triple {20871#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 13:03:13,273 INFO L273 TraceCheckUtils]: 22: Hoare triple {20871#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {20871#true} is VALID [2018-11-23 13:03:13,273 INFO L273 TraceCheckUtils]: 23: Hoare triple {20871#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {20871#true} is VALID [2018-11-23 13:03:13,273 INFO L273 TraceCheckUtils]: 24: Hoare triple {20871#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {20871#true} is VALID [2018-11-23 13:03:13,273 INFO L273 TraceCheckUtils]: 25: Hoare triple {20871#true} ~skip~0 := 0; {20871#true} is VALID [2018-11-23 13:03:13,274 INFO L273 TraceCheckUtils]: 26: Hoare triple {20871#true} assume !false; {20871#true} is VALID [2018-11-23 13:03:13,274 INFO L273 TraceCheckUtils]: 27: Hoare triple {20871#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 13:03:13,274 INFO L273 TraceCheckUtils]: 28: Hoare triple {20871#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 13:03:13,274 INFO L273 TraceCheckUtils]: 29: Hoare triple {20871#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 13:03:13,274 INFO L273 TraceCheckUtils]: 30: Hoare triple {20871#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 13:03:13,274 INFO L273 TraceCheckUtils]: 31: Hoare triple {20871#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 13:03:13,274 INFO L273 TraceCheckUtils]: 32: Hoare triple {20871#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 13:03:13,274 INFO L273 TraceCheckUtils]: 33: Hoare triple {20871#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 13:03:13,275 INFO L273 TraceCheckUtils]: 34: Hoare triple {20871#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 13:03:13,275 INFO L273 TraceCheckUtils]: 35: Hoare triple {20871#true} assume 4384 == #t~mem29;havoc #t~mem29; {20871#true} is VALID [2018-11-23 13:03:13,275 INFO L273 TraceCheckUtils]: 36: Hoare triple {20871#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {20871#true} is VALID [2018-11-23 13:03:13,275 INFO L273 TraceCheckUtils]: 37: Hoare triple {20871#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {20871#true} is VALID [2018-11-23 13:03:13,275 INFO L273 TraceCheckUtils]: 38: Hoare triple {20871#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {20871#true} is VALID [2018-11-23 13:03:13,281 INFO L273 TraceCheckUtils]: 39: Hoare triple {20871#true} assume 0 != #t~mem68;havoc #t~mem68;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:13,283 INFO L273 TraceCheckUtils]: 40: Hoare triple {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:13,283 INFO L273 TraceCheckUtils]: 41: Hoare triple {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:13,283 INFO L273 TraceCheckUtils]: 42: Hoare triple {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:13,285 INFO L273 TraceCheckUtils]: 43: Hoare triple {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} ~skip~0 := 0; {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:13,285 INFO L273 TraceCheckUtils]: 44: Hoare triple {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !false; {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:13,287 INFO L273 TraceCheckUtils]: 45: Hoare triple {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:13,287 INFO L273 TraceCheckUtils]: 46: Hoare triple {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:13,289 INFO L273 TraceCheckUtils]: 47: Hoare triple {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:13,289 INFO L273 TraceCheckUtils]: 48: Hoare triple {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:13,292 INFO L273 TraceCheckUtils]: 49: Hoare triple {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:13,292 INFO L273 TraceCheckUtils]: 50: Hoare triple {20873#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20874#(= |ssl3_connect_#t~mem27| 4560)} is VALID [2018-11-23 13:03:13,294 INFO L273 TraceCheckUtils]: 51: Hoare triple {20874#(= |ssl3_connect_#t~mem27| 4560)} assume 4368 == #t~mem27;havoc #t~mem27; {20872#false} is VALID [2018-11-23 13:03:13,294 INFO L273 TraceCheckUtils]: 52: Hoare triple {20872#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {20872#false} is VALID [2018-11-23 13:03:13,294 INFO L273 TraceCheckUtils]: 53: Hoare triple {20872#false} assume !(0 == ~blastFlag~0); {20872#false} is VALID [2018-11-23 13:03:13,294 INFO L273 TraceCheckUtils]: 54: Hoare triple {20872#false} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 13:03:13,294 INFO L273 TraceCheckUtils]: 55: Hoare triple {20872#false} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {20872#false} is VALID [2018-11-23 13:03:13,294 INFO L273 TraceCheckUtils]: 56: Hoare triple {20872#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {20872#false} is VALID [2018-11-23 13:03:13,295 INFO L273 TraceCheckUtils]: 57: Hoare triple {20872#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {20872#false} is VALID [2018-11-23 13:03:13,295 INFO L273 TraceCheckUtils]: 58: Hoare triple {20872#false} ~skip~0 := 0; {20872#false} is VALID [2018-11-23 13:03:13,295 INFO L273 TraceCheckUtils]: 59: Hoare triple {20872#false} assume !false; {20872#false} is VALID [2018-11-23 13:03:13,295 INFO L273 TraceCheckUtils]: 60: Hoare triple {20872#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 13:03:13,295 INFO L273 TraceCheckUtils]: 61: Hoare triple {20872#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 13:03:13,295 INFO L273 TraceCheckUtils]: 62: Hoare triple {20872#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 13:03:13,295 INFO L273 TraceCheckUtils]: 63: Hoare triple {20872#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 13:03:13,295 INFO L273 TraceCheckUtils]: 64: Hoare triple {20872#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 13:03:13,296 INFO L273 TraceCheckUtils]: 65: Hoare triple {20872#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 13:03:13,296 INFO L273 TraceCheckUtils]: 66: Hoare triple {20872#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 13:03:13,296 INFO L273 TraceCheckUtils]: 67: Hoare triple {20872#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 13:03:13,296 INFO L273 TraceCheckUtils]: 68: Hoare triple {20872#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 13:03:13,296 INFO L273 TraceCheckUtils]: 69: Hoare triple {20872#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 13:03:13,296 INFO L273 TraceCheckUtils]: 70: Hoare triple {20872#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 13:03:13,296 INFO L273 TraceCheckUtils]: 71: Hoare triple {20872#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 13:03:13,296 INFO L273 TraceCheckUtils]: 72: Hoare triple {20872#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 13:03:13,297 INFO L273 TraceCheckUtils]: 73: Hoare triple {20872#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {20872#false} is VALID [2018-11-23 13:03:13,297 INFO L273 TraceCheckUtils]: 74: Hoare triple {20872#false} assume 4432 == #t~mem35;havoc #t~mem35; {20872#false} is VALID [2018-11-23 13:03:13,297 INFO L273 TraceCheckUtils]: 75: Hoare triple {20872#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {20872#false} is VALID [2018-11-23 13:03:13,297 INFO L273 TraceCheckUtils]: 76: Hoare triple {20872#false} assume 5 == ~blastFlag~0; {20872#false} is VALID [2018-11-23 13:03:13,297 INFO L273 TraceCheckUtils]: 77: Hoare triple {20872#false} assume !false; {20872#false} is VALID [2018-11-23 13:03:13,302 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 13:03:13,302 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:03:13,302 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:03:13,302 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 13:03:13,302 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:03:13,303 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:03:13,387 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 71 edges. 71 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:13,387 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:03:13,387 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:03:13,387 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:03:13,388 INFO L87 Difference]: Start difference. First operand 421 states and 632 transitions. Second operand 4 states. [2018-11-23 13:03:15,298 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:15,298 INFO L93 Difference]: Finished difference Result 794 states and 1181 transitions. [2018-11-23 13:03:15,298 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:03:15,298 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 13:03:15,298 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:03:15,299 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:15,301 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 463 transitions. [2018-11-23 13:03:15,301 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:15,303 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 463 transitions. [2018-11-23 13:03:15,303 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 463 transitions. [2018-11-23 13:03:15,815 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 463 edges. 463 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:15,830 INFO L225 Difference]: With dead ends: 794 [2018-11-23 13:03:15,830 INFO L226 Difference]: Without dead ends: 535 [2018-11-23 13:03:15,831 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:03:15,832 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 535 states. [2018-11-23 13:03:16,027 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 535 to 421. [2018-11-23 13:03:16,027 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:03:16,027 INFO L82 GeneralOperation]: Start isEquivalent. First operand 535 states. Second operand 421 states. [2018-11-23 13:03:16,028 INFO L74 IsIncluded]: Start isIncluded. First operand 535 states. Second operand 421 states. [2018-11-23 13:03:16,028 INFO L87 Difference]: Start difference. First operand 535 states. Second operand 421 states. [2018-11-23 13:03:16,043 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:16,043 INFO L93 Difference]: Finished difference Result 535 states and 790 transitions. [2018-11-23 13:03:16,043 INFO L276 IsEmpty]: Start isEmpty. Operand 535 states and 790 transitions. [2018-11-23 13:03:16,044 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:16,044 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:16,044 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 535 states. [2018-11-23 13:03:16,044 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 535 states. [2018-11-23 13:03:16,058 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:16,058 INFO L93 Difference]: Finished difference Result 535 states and 790 transitions. [2018-11-23 13:03:16,058 INFO L276 IsEmpty]: Start isEmpty. Operand 535 states and 790 transitions. [2018-11-23 13:03:16,059 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:16,059 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:16,059 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:03:16,060 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:03:16,060 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 13:03:16,072 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 630 transitions. [2018-11-23 13:03:16,072 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 630 transitions. Word has length 78 [2018-11-23 13:03:16,073 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:03:16,073 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 630 transitions. [2018-11-23 13:03:16,073 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:03:16,073 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 630 transitions. [2018-11-23 13:03:16,074 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2018-11-23 13:03:16,074 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:03:16,075 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:03:16,075 INFO L423 AbstractCegarLoop]: === Iteration 11 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:03:16,075 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:03:16,075 INFO L82 PathProgramCache]: Analyzing trace with hash 1665283844, now seen corresponding path program 1 times [2018-11-23 13:03:16,075 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:03:16,075 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:03:16,076 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:16,076 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:03:16,077 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:16,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:03:16,335 INFO L256 TraceCheckUtils]: 0: Hoare triple {23342#true} call ULTIMATE.init(); {23342#true} is VALID [2018-11-23 13:03:16,335 INFO L273 TraceCheckUtils]: 1: Hoare triple {23342#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {23342#true} is VALID [2018-11-23 13:03:16,335 INFO L273 TraceCheckUtils]: 2: Hoare triple {23342#true} assume true; {23342#true} is VALID [2018-11-23 13:03:16,336 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {23342#true} {23342#true} #542#return; {23342#true} is VALID [2018-11-23 13:03:16,336 INFO L256 TraceCheckUtils]: 4: Hoare triple {23342#true} call #t~ret138 := main(); {23342#true} is VALID [2018-11-23 13:03:16,336 INFO L273 TraceCheckUtils]: 5: Hoare triple {23342#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {23342#true} is VALID [2018-11-23 13:03:16,336 INFO L256 TraceCheckUtils]: 6: Hoare triple {23342#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {23342#true} is VALID [2018-11-23 13:03:16,337 INFO L273 TraceCheckUtils]: 7: Hoare triple {23342#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 13:03:16,337 INFO L273 TraceCheckUtils]: 8: Hoare triple {23342#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {23342#true} is VALID [2018-11-23 13:03:16,337 INFO L273 TraceCheckUtils]: 9: Hoare triple {23342#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {23342#true} is VALID [2018-11-23 13:03:16,337 INFO L273 TraceCheckUtils]: 10: Hoare triple {23342#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {23342#true} is VALID [2018-11-23 13:03:16,337 INFO L273 TraceCheckUtils]: 11: Hoare triple {23342#true} assume !false; {23342#true} is VALID [2018-11-23 13:03:16,337 INFO L273 TraceCheckUtils]: 12: Hoare triple {23342#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 13:03:16,338 INFO L273 TraceCheckUtils]: 13: Hoare triple {23342#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 13:03:16,338 INFO L273 TraceCheckUtils]: 14: Hoare triple {23342#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 13:03:16,338 INFO L273 TraceCheckUtils]: 15: Hoare triple {23342#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 13:03:16,338 INFO L273 TraceCheckUtils]: 16: Hoare triple {23342#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 13:03:16,338 INFO L273 TraceCheckUtils]: 17: Hoare triple {23342#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 13:03:16,338 INFO L273 TraceCheckUtils]: 18: Hoare triple {23342#true} assume 4368 == #t~mem27;havoc #t~mem27; {23342#true} is VALID [2018-11-23 13:03:16,338 INFO L273 TraceCheckUtils]: 19: Hoare triple {23342#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {23342#true} is VALID [2018-11-23 13:03:16,338 INFO L273 TraceCheckUtils]: 20: Hoare triple {23342#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {23342#true} is VALID [2018-11-23 13:03:16,338 INFO L273 TraceCheckUtils]: 21: Hoare triple {23342#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 13:03:16,339 INFO L273 TraceCheckUtils]: 22: Hoare triple {23342#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {23342#true} is VALID [2018-11-23 13:03:16,339 INFO L273 TraceCheckUtils]: 23: Hoare triple {23342#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {23342#true} is VALID [2018-11-23 13:03:16,339 INFO L273 TraceCheckUtils]: 24: Hoare triple {23342#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {23342#true} is VALID [2018-11-23 13:03:16,339 INFO L273 TraceCheckUtils]: 25: Hoare triple {23342#true} ~skip~0 := 0; {23342#true} is VALID [2018-11-23 13:03:16,339 INFO L273 TraceCheckUtils]: 26: Hoare triple {23342#true} assume !false; {23342#true} is VALID [2018-11-23 13:03:16,339 INFO L273 TraceCheckUtils]: 27: Hoare triple {23342#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 13:03:16,339 INFO L273 TraceCheckUtils]: 28: Hoare triple {23342#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 13:03:16,339 INFO L273 TraceCheckUtils]: 29: Hoare triple {23342#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 13:03:16,340 INFO L273 TraceCheckUtils]: 30: Hoare triple {23342#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 13:03:16,340 INFO L273 TraceCheckUtils]: 31: Hoare triple {23342#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 13:03:16,340 INFO L273 TraceCheckUtils]: 32: Hoare triple {23342#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 13:03:16,340 INFO L273 TraceCheckUtils]: 33: Hoare triple {23342#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 13:03:16,340 INFO L273 TraceCheckUtils]: 34: Hoare triple {23342#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 13:03:16,340 INFO L273 TraceCheckUtils]: 35: Hoare triple {23342#true} assume 4384 == #t~mem29;havoc #t~mem29; {23342#true} is VALID [2018-11-23 13:03:16,340 INFO L273 TraceCheckUtils]: 36: Hoare triple {23342#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {23342#true} is VALID [2018-11-23 13:03:16,340 INFO L273 TraceCheckUtils]: 37: Hoare triple {23342#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {23342#true} is VALID [2018-11-23 13:03:16,341 INFO L273 TraceCheckUtils]: 38: Hoare triple {23342#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {23342#true} is VALID [2018-11-23 13:03:16,341 INFO L273 TraceCheckUtils]: 39: Hoare triple {23342#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:16,342 INFO L273 TraceCheckUtils]: 40: Hoare triple {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:16,342 INFO L273 TraceCheckUtils]: 41: Hoare triple {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:16,343 INFO L273 TraceCheckUtils]: 42: Hoare triple {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:16,343 INFO L273 TraceCheckUtils]: 43: Hoare triple {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} ~skip~0 := 0; {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:16,344 INFO L273 TraceCheckUtils]: 44: Hoare triple {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !false; {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:16,344 INFO L273 TraceCheckUtils]: 45: Hoare triple {23344#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {23345#(= |ssl3_connect_#t~mem22| 4400)} is VALID [2018-11-23 13:03:16,345 INFO L273 TraceCheckUtils]: 46: Hoare triple {23345#(= |ssl3_connect_#t~mem22| 4400)} assume 12292 == #t~mem22;havoc #t~mem22; {23343#false} is VALID [2018-11-23 13:03:16,345 INFO L273 TraceCheckUtils]: 47: Hoare triple {23343#false} call write~int(1, ~s.base, 40 + ~s.offset, 4);call write~int(4096, ~s.base, 52 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem56 := read~int(#t~mem55.base, 64 + #t~mem55.offset, 4);call write~int(1 + #t~mem56, #t~mem55.base, 64 + #t~mem55.offset, 4);havoc #t~mem55.base, #t~mem55.offset;havoc #t~mem56; {23343#false} is VALID [2018-11-23 13:03:16,345 INFO L273 TraceCheckUtils]: 48: Hoare triple {23343#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 13:03:16,346 INFO L273 TraceCheckUtils]: 49: Hoare triple {23343#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {23343#false} is VALID [2018-11-23 13:03:16,346 INFO L273 TraceCheckUtils]: 50: Hoare triple {23343#false} call #t~mem57 := read~int(~s.base, ~s.offset, 4); {23343#false} is VALID [2018-11-23 13:03:16,346 INFO L273 TraceCheckUtils]: 51: Hoare triple {23343#false} assume !(768 != ~bitwiseAnd(#t~mem57, 65280));havoc #t~mem57;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 13:03:16,346 INFO L273 TraceCheckUtils]: 52: Hoare triple {23343#false} assume !(0 == (#t~mem58.base + #t~mem58.offset) % 4294967296);havoc #t~mem58.base, #t~mem58.offset; {23343#false} is VALID [2018-11-23 13:03:16,346 INFO L273 TraceCheckUtils]: 53: Hoare triple {23343#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {23343#false} is VALID [2018-11-23 13:03:16,347 INFO L273 TraceCheckUtils]: 54: Hoare triple {23343#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {23343#false} is VALID [2018-11-23 13:03:16,347 INFO L273 TraceCheckUtils]: 55: Hoare triple {23343#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem63 := read~int(#t~mem62.base, 60 + #t~mem62.offset, 4);call write~int(1 + #t~mem63, #t~mem62.base, 60 + #t~mem62.offset, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, 64 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 13:03:16,347 INFO L273 TraceCheckUtils]: 56: Hoare triple {23343#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {23343#false} is VALID [2018-11-23 13:03:16,347 INFO L273 TraceCheckUtils]: 57: Hoare triple {23343#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {23343#false} is VALID [2018-11-23 13:03:16,347 INFO L273 TraceCheckUtils]: 58: Hoare triple {23343#false} ~skip~0 := 0; {23343#false} is VALID [2018-11-23 13:03:16,347 INFO L273 TraceCheckUtils]: 59: Hoare triple {23343#false} assume !false; {23343#false} is VALID [2018-11-23 13:03:16,348 INFO L273 TraceCheckUtils]: 60: Hoare triple {23343#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 13:03:16,348 INFO L273 TraceCheckUtils]: 61: Hoare triple {23343#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 13:03:16,348 INFO L273 TraceCheckUtils]: 62: Hoare triple {23343#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 13:03:16,348 INFO L273 TraceCheckUtils]: 63: Hoare triple {23343#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 13:03:16,348 INFO L273 TraceCheckUtils]: 64: Hoare triple {23343#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 13:03:16,348 INFO L273 TraceCheckUtils]: 65: Hoare triple {23343#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 13:03:16,348 INFO L273 TraceCheckUtils]: 66: Hoare triple {23343#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 13:03:16,348 INFO L273 TraceCheckUtils]: 67: Hoare triple {23343#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 13:03:16,349 INFO L273 TraceCheckUtils]: 68: Hoare triple {23343#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 13:03:16,349 INFO L273 TraceCheckUtils]: 69: Hoare triple {23343#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 13:03:16,349 INFO L273 TraceCheckUtils]: 70: Hoare triple {23343#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 13:03:16,349 INFO L273 TraceCheckUtils]: 71: Hoare triple {23343#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 13:03:16,349 INFO L273 TraceCheckUtils]: 72: Hoare triple {23343#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 13:03:16,349 INFO L273 TraceCheckUtils]: 73: Hoare triple {23343#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {23343#false} is VALID [2018-11-23 13:03:16,349 INFO L273 TraceCheckUtils]: 74: Hoare triple {23343#false} assume 4432 == #t~mem35;havoc #t~mem35; {23343#false} is VALID [2018-11-23 13:03:16,349 INFO L273 TraceCheckUtils]: 75: Hoare triple {23343#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {23343#false} is VALID [2018-11-23 13:03:16,350 INFO L273 TraceCheckUtils]: 76: Hoare triple {23343#false} assume 5 == ~blastFlag~0; {23343#false} is VALID [2018-11-23 13:03:16,350 INFO L273 TraceCheckUtils]: 77: Hoare triple {23343#false} assume !false; {23343#false} is VALID [2018-11-23 13:03:16,354 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 13:03:16,355 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:03:16,355 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:03:16,355 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 13:03:16,355 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:03:16,356 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:03:16,445 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 71 edges. 71 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:16,446 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:03:16,446 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:03:16,446 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:03:16,447 INFO L87 Difference]: Start difference. First operand 421 states and 630 transitions. Second operand 4 states. [2018-11-23 13:03:17,574 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:17,575 INFO L93 Difference]: Finished difference Result 871 states and 1296 transitions. [2018-11-23 13:03:17,575 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:03:17,575 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 13:03:17,575 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:03:17,575 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:17,578 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 400 transitions. [2018-11-23 13:03:17,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:17,580 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 400 transitions. [2018-11-23 13:03:17,580 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 400 transitions. [2018-11-23 13:03:17,977 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 400 edges. 400 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:17,991 INFO L225 Difference]: With dead ends: 871 [2018-11-23 13:03:17,991 INFO L226 Difference]: Without dead ends: 463 [2018-11-23 13:03:17,992 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:03:17,992 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 463 states. [2018-11-23 13:03:18,122 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 463 to 421. [2018-11-23 13:03:18,122 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:03:18,122 INFO L82 GeneralOperation]: Start isEquivalent. First operand 463 states. Second operand 421 states. [2018-11-23 13:03:18,123 INFO L74 IsIncluded]: Start isIncluded. First operand 463 states. Second operand 421 states. [2018-11-23 13:03:18,123 INFO L87 Difference]: Start difference. First operand 463 states. Second operand 421 states. [2018-11-23 13:03:18,134 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:18,135 INFO L93 Difference]: Finished difference Result 463 states and 681 transitions. [2018-11-23 13:03:18,135 INFO L276 IsEmpty]: Start isEmpty. Operand 463 states and 681 transitions. [2018-11-23 13:03:18,135 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:18,135 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:18,136 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 463 states. [2018-11-23 13:03:18,136 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 463 states. [2018-11-23 13:03:18,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:18,150 INFO L93 Difference]: Finished difference Result 463 states and 681 transitions. [2018-11-23 13:03:18,150 INFO L276 IsEmpty]: Start isEmpty. Operand 463 states and 681 transitions. [2018-11-23 13:03:18,150 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:18,151 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:18,151 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:03:18,151 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:03:18,151 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 13:03:18,163 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 628 transitions. [2018-11-23 13:03:18,163 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 628 transitions. Word has length 78 [2018-11-23 13:03:18,163 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:03:18,164 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 628 transitions. [2018-11-23 13:03:18,164 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:03:18,164 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 628 transitions. [2018-11-23 13:03:18,165 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2018-11-23 13:03:18,165 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:03:18,165 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:03:18,165 INFO L423 AbstractCegarLoop]: === Iteration 12 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:03:18,166 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:03:18,166 INFO L82 PathProgramCache]: Analyzing trace with hash 1646628386, now seen corresponding path program 1 times [2018-11-23 13:03:18,166 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:03:18,166 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:03:18,167 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:18,167 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:03:18,167 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:18,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:03:18,430 INFO L256 TraceCheckUtils]: 0: Hoare triple {25747#true} call ULTIMATE.init(); {25747#true} is VALID [2018-11-23 13:03:18,430 INFO L273 TraceCheckUtils]: 1: Hoare triple {25747#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {25747#true} is VALID [2018-11-23 13:03:18,430 INFO L273 TraceCheckUtils]: 2: Hoare triple {25747#true} assume true; {25747#true} is VALID [2018-11-23 13:03:18,431 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {25747#true} {25747#true} #542#return; {25747#true} is VALID [2018-11-23 13:03:18,431 INFO L256 TraceCheckUtils]: 4: Hoare triple {25747#true} call #t~ret138 := main(); {25747#true} is VALID [2018-11-23 13:03:18,431 INFO L273 TraceCheckUtils]: 5: Hoare triple {25747#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {25747#true} is VALID [2018-11-23 13:03:18,431 INFO L256 TraceCheckUtils]: 6: Hoare triple {25747#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {25747#true} is VALID [2018-11-23 13:03:18,431 INFO L273 TraceCheckUtils]: 7: Hoare triple {25747#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 13:03:18,431 INFO L273 TraceCheckUtils]: 8: Hoare triple {25747#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {25747#true} is VALID [2018-11-23 13:03:18,431 INFO L273 TraceCheckUtils]: 9: Hoare triple {25747#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {25747#true} is VALID [2018-11-23 13:03:18,431 INFO L273 TraceCheckUtils]: 10: Hoare triple {25747#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {25747#true} is VALID [2018-11-23 13:03:18,432 INFO L273 TraceCheckUtils]: 11: Hoare triple {25747#true} assume !false; {25747#true} is VALID [2018-11-23 13:03:18,432 INFO L273 TraceCheckUtils]: 12: Hoare triple {25747#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 13:03:18,432 INFO L273 TraceCheckUtils]: 13: Hoare triple {25747#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 13:03:18,432 INFO L273 TraceCheckUtils]: 14: Hoare triple {25747#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 13:03:18,432 INFO L273 TraceCheckUtils]: 15: Hoare triple {25747#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 13:03:18,432 INFO L273 TraceCheckUtils]: 16: Hoare triple {25747#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 13:03:18,432 INFO L273 TraceCheckUtils]: 17: Hoare triple {25747#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 13:03:18,432 INFO L273 TraceCheckUtils]: 18: Hoare triple {25747#true} assume 4368 == #t~mem27;havoc #t~mem27; {25747#true} is VALID [2018-11-23 13:03:18,433 INFO L273 TraceCheckUtils]: 19: Hoare triple {25747#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {25747#true} is VALID [2018-11-23 13:03:18,433 INFO L273 TraceCheckUtils]: 20: Hoare triple {25747#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {25747#true} is VALID [2018-11-23 13:03:18,433 INFO L273 TraceCheckUtils]: 21: Hoare triple {25747#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 13:03:18,433 INFO L273 TraceCheckUtils]: 22: Hoare triple {25747#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {25747#true} is VALID [2018-11-23 13:03:18,433 INFO L273 TraceCheckUtils]: 23: Hoare triple {25747#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {25747#true} is VALID [2018-11-23 13:03:18,433 INFO L273 TraceCheckUtils]: 24: Hoare triple {25747#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {25747#true} is VALID [2018-11-23 13:03:18,433 INFO L273 TraceCheckUtils]: 25: Hoare triple {25747#true} ~skip~0 := 0; {25747#true} is VALID [2018-11-23 13:03:18,433 INFO L273 TraceCheckUtils]: 26: Hoare triple {25747#true} assume !false; {25747#true} is VALID [2018-11-23 13:03:18,434 INFO L273 TraceCheckUtils]: 27: Hoare triple {25747#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 13:03:18,434 INFO L273 TraceCheckUtils]: 28: Hoare triple {25747#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 13:03:18,434 INFO L273 TraceCheckUtils]: 29: Hoare triple {25747#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 13:03:18,434 INFO L273 TraceCheckUtils]: 30: Hoare triple {25747#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 13:03:18,434 INFO L273 TraceCheckUtils]: 31: Hoare triple {25747#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 13:03:18,434 INFO L273 TraceCheckUtils]: 32: Hoare triple {25747#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 13:03:18,434 INFO L273 TraceCheckUtils]: 33: Hoare triple {25747#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 13:03:18,434 INFO L273 TraceCheckUtils]: 34: Hoare triple {25747#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 13:03:18,434 INFO L273 TraceCheckUtils]: 35: Hoare triple {25747#true} assume 4384 == #t~mem29;havoc #t~mem29; {25747#true} is VALID [2018-11-23 13:03:18,435 INFO L273 TraceCheckUtils]: 36: Hoare triple {25747#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {25747#true} is VALID [2018-11-23 13:03:18,435 INFO L273 TraceCheckUtils]: 37: Hoare triple {25747#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {25747#true} is VALID [2018-11-23 13:03:18,435 INFO L273 TraceCheckUtils]: 38: Hoare triple {25747#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {25747#true} is VALID [2018-11-23 13:03:18,436 INFO L273 TraceCheckUtils]: 39: Hoare triple {25747#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:18,438 INFO L273 TraceCheckUtils]: 40: Hoare triple {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:18,438 INFO L273 TraceCheckUtils]: 41: Hoare triple {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:18,440 INFO L273 TraceCheckUtils]: 42: Hoare triple {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:18,440 INFO L273 TraceCheckUtils]: 43: Hoare triple {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} ~skip~0 := 0; {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:18,442 INFO L273 TraceCheckUtils]: 44: Hoare triple {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !false; {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:18,442 INFO L273 TraceCheckUtils]: 45: Hoare triple {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:18,445 INFO L273 TraceCheckUtils]: 46: Hoare triple {25749#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {25750#(= |ssl3_connect_#t~mem23| 4400)} is VALID [2018-11-23 13:03:18,445 INFO L273 TraceCheckUtils]: 47: Hoare triple {25750#(= |ssl3_connect_#t~mem23| 4400)} assume 16384 == #t~mem23;havoc #t~mem23; {25748#false} is VALID [2018-11-23 13:03:18,445 INFO L273 TraceCheckUtils]: 48: Hoare triple {25748#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 13:03:18,445 INFO L273 TraceCheckUtils]: 49: Hoare triple {25748#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {25748#false} is VALID [2018-11-23 13:03:18,445 INFO L273 TraceCheckUtils]: 50: Hoare triple {25748#false} call #t~mem57 := read~int(~s.base, ~s.offset, 4); {25748#false} is VALID [2018-11-23 13:03:18,446 INFO L273 TraceCheckUtils]: 51: Hoare triple {25748#false} assume !(768 != ~bitwiseAnd(#t~mem57, 65280));havoc #t~mem57;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 13:03:18,446 INFO L273 TraceCheckUtils]: 52: Hoare triple {25748#false} assume !(0 == (#t~mem58.base + #t~mem58.offset) % 4294967296);havoc #t~mem58.base, #t~mem58.offset; {25748#false} is VALID [2018-11-23 13:03:18,446 INFO L273 TraceCheckUtils]: 53: Hoare triple {25748#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {25748#false} is VALID [2018-11-23 13:03:18,446 INFO L273 TraceCheckUtils]: 54: Hoare triple {25748#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {25748#false} is VALID [2018-11-23 13:03:18,446 INFO L273 TraceCheckUtils]: 55: Hoare triple {25748#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem63 := read~int(#t~mem62.base, 60 + #t~mem62.offset, 4);call write~int(1 + #t~mem63, #t~mem62.base, 60 + #t~mem62.offset, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, 64 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 13:03:18,446 INFO L273 TraceCheckUtils]: 56: Hoare triple {25748#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {25748#false} is VALID [2018-11-23 13:03:18,446 INFO L273 TraceCheckUtils]: 57: Hoare triple {25748#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {25748#false} is VALID [2018-11-23 13:03:18,446 INFO L273 TraceCheckUtils]: 58: Hoare triple {25748#false} ~skip~0 := 0; {25748#false} is VALID [2018-11-23 13:03:18,446 INFO L273 TraceCheckUtils]: 59: Hoare triple {25748#false} assume !false; {25748#false} is VALID [2018-11-23 13:03:18,447 INFO L273 TraceCheckUtils]: 60: Hoare triple {25748#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 13:03:18,447 INFO L273 TraceCheckUtils]: 61: Hoare triple {25748#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 13:03:18,447 INFO L273 TraceCheckUtils]: 62: Hoare triple {25748#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 13:03:18,447 INFO L273 TraceCheckUtils]: 63: Hoare triple {25748#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 13:03:18,447 INFO L273 TraceCheckUtils]: 64: Hoare triple {25748#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 13:03:18,447 INFO L273 TraceCheckUtils]: 65: Hoare triple {25748#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 13:03:18,447 INFO L273 TraceCheckUtils]: 66: Hoare triple {25748#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 13:03:18,447 INFO L273 TraceCheckUtils]: 67: Hoare triple {25748#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 13:03:18,448 INFO L273 TraceCheckUtils]: 68: Hoare triple {25748#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 13:03:18,448 INFO L273 TraceCheckUtils]: 69: Hoare triple {25748#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 13:03:18,448 INFO L273 TraceCheckUtils]: 70: Hoare triple {25748#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 13:03:18,448 INFO L273 TraceCheckUtils]: 71: Hoare triple {25748#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 13:03:18,448 INFO L273 TraceCheckUtils]: 72: Hoare triple {25748#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 13:03:18,448 INFO L273 TraceCheckUtils]: 73: Hoare triple {25748#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {25748#false} is VALID [2018-11-23 13:03:18,449 INFO L273 TraceCheckUtils]: 74: Hoare triple {25748#false} assume 4432 == #t~mem35;havoc #t~mem35; {25748#false} is VALID [2018-11-23 13:03:18,449 INFO L273 TraceCheckUtils]: 75: Hoare triple {25748#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {25748#false} is VALID [2018-11-23 13:03:18,449 INFO L273 TraceCheckUtils]: 76: Hoare triple {25748#false} assume 5 == ~blastFlag~0; {25748#false} is VALID [2018-11-23 13:03:18,449 INFO L273 TraceCheckUtils]: 77: Hoare triple {25748#false} assume !false; {25748#false} is VALID [2018-11-23 13:03:18,454 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 13:03:18,455 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:03:18,455 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:03:18,455 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 13:03:18,455 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:03:18,455 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:03:18,584 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 71 edges. 71 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:18,584 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:03:18,585 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:03:18,585 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:03:18,585 INFO L87 Difference]: Start difference. First operand 421 states and 628 transitions. Second operand 4 states. [2018-11-23 13:03:19,710 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:19,710 INFO L93 Difference]: Finished difference Result 871 states and 1292 transitions. [2018-11-23 13:03:19,710 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:03:19,710 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 13:03:19,711 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:03:19,711 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:19,713 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 399 transitions. [2018-11-23 13:03:19,713 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:19,715 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 399 transitions. [2018-11-23 13:03:19,716 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 399 transitions. [2018-11-23 13:03:20,122 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 399 edges. 399 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:20,135 INFO L225 Difference]: With dead ends: 871 [2018-11-23 13:03:20,136 INFO L226 Difference]: Without dead ends: 463 [2018-11-23 13:03:20,136 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:03:20,137 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 463 states. [2018-11-23 13:03:20,538 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 463 to 421. [2018-11-23 13:03:20,539 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:03:20,539 INFO L82 GeneralOperation]: Start isEquivalent. First operand 463 states. Second operand 421 states. [2018-11-23 13:03:20,539 INFO L74 IsIncluded]: Start isIncluded. First operand 463 states. Second operand 421 states. [2018-11-23 13:03:20,539 INFO L87 Difference]: Start difference. First operand 463 states. Second operand 421 states. [2018-11-23 13:03:20,551 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:20,551 INFO L93 Difference]: Finished difference Result 463 states and 679 transitions. [2018-11-23 13:03:20,552 INFO L276 IsEmpty]: Start isEmpty. Operand 463 states and 679 transitions. [2018-11-23 13:03:20,552 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:20,552 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:20,553 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 463 states. [2018-11-23 13:03:20,553 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 463 states. [2018-11-23 13:03:20,566 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:20,567 INFO L93 Difference]: Finished difference Result 463 states and 679 transitions. [2018-11-23 13:03:20,567 INFO L276 IsEmpty]: Start isEmpty. Operand 463 states and 679 transitions. [2018-11-23 13:03:20,567 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:20,568 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:20,568 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:03:20,568 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:03:20,568 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 13:03:20,580 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 626 transitions. [2018-11-23 13:03:20,580 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 626 transitions. Word has length 78 [2018-11-23 13:03:20,580 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:03:20,580 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 626 transitions. [2018-11-23 13:03:20,581 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:03:20,581 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 626 transitions. [2018-11-23 13:03:20,582 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2018-11-23 13:03:20,582 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:03:20,582 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:03:20,582 INFO L423 AbstractCegarLoop]: === Iteration 13 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:03:20,582 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:03:20,583 INFO L82 PathProgramCache]: Analyzing trace with hash 941127749, now seen corresponding path program 1 times [2018-11-23 13:03:20,583 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:03:20,583 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:03:20,584 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:20,584 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:03:20,584 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:20,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:03:21,190 INFO L256 TraceCheckUtils]: 0: Hoare triple {28152#true} call ULTIMATE.init(); {28152#true} is VALID [2018-11-23 13:03:21,191 INFO L273 TraceCheckUtils]: 1: Hoare triple {28152#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {28152#true} is VALID [2018-11-23 13:03:21,191 INFO L273 TraceCheckUtils]: 2: Hoare triple {28152#true} assume true; {28152#true} is VALID [2018-11-23 13:03:21,191 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {28152#true} {28152#true} #542#return; {28152#true} is VALID [2018-11-23 13:03:21,191 INFO L256 TraceCheckUtils]: 4: Hoare triple {28152#true} call #t~ret138 := main(); {28152#true} is VALID [2018-11-23 13:03:21,192 INFO L273 TraceCheckUtils]: 5: Hoare triple {28152#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {28152#true} is VALID [2018-11-23 13:03:21,192 INFO L256 TraceCheckUtils]: 6: Hoare triple {28152#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {28152#true} is VALID [2018-11-23 13:03:21,192 INFO L273 TraceCheckUtils]: 7: Hoare triple {28152#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 13:03:21,192 INFO L273 TraceCheckUtils]: 8: Hoare triple {28152#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {28152#true} is VALID [2018-11-23 13:03:21,192 INFO L273 TraceCheckUtils]: 9: Hoare triple {28152#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {28152#true} is VALID [2018-11-23 13:03:21,193 INFO L273 TraceCheckUtils]: 10: Hoare triple {28152#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {28152#true} is VALID [2018-11-23 13:03:21,193 INFO L273 TraceCheckUtils]: 11: Hoare triple {28152#true} assume !false; {28152#true} is VALID [2018-11-23 13:03:21,193 INFO L273 TraceCheckUtils]: 12: Hoare triple {28152#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 13:03:21,193 INFO L273 TraceCheckUtils]: 13: Hoare triple {28152#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 13:03:21,193 INFO L273 TraceCheckUtils]: 14: Hoare triple {28152#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 13:03:21,194 INFO L273 TraceCheckUtils]: 15: Hoare triple {28152#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 13:03:21,194 INFO L273 TraceCheckUtils]: 16: Hoare triple {28152#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 13:03:21,194 INFO L273 TraceCheckUtils]: 17: Hoare triple {28152#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 13:03:21,194 INFO L273 TraceCheckUtils]: 18: Hoare triple {28152#true} assume 4368 == #t~mem27;havoc #t~mem27; {28152#true} is VALID [2018-11-23 13:03:21,194 INFO L273 TraceCheckUtils]: 19: Hoare triple {28152#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {28152#true} is VALID [2018-11-23 13:03:21,194 INFO L273 TraceCheckUtils]: 20: Hoare triple {28152#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {28152#true} is VALID [2018-11-23 13:03:21,194 INFO L273 TraceCheckUtils]: 21: Hoare triple {28152#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 13:03:21,194 INFO L273 TraceCheckUtils]: 22: Hoare triple {28152#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {28152#true} is VALID [2018-11-23 13:03:21,195 INFO L273 TraceCheckUtils]: 23: Hoare triple {28152#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {28152#true} is VALID [2018-11-23 13:03:21,195 INFO L273 TraceCheckUtils]: 24: Hoare triple {28152#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {28152#true} is VALID [2018-11-23 13:03:21,195 INFO L273 TraceCheckUtils]: 25: Hoare triple {28152#true} ~skip~0 := 0; {28152#true} is VALID [2018-11-23 13:03:21,195 INFO L273 TraceCheckUtils]: 26: Hoare triple {28152#true} assume !false; {28152#true} is VALID [2018-11-23 13:03:21,195 INFO L273 TraceCheckUtils]: 27: Hoare triple {28152#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 13:03:21,195 INFO L273 TraceCheckUtils]: 28: Hoare triple {28152#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 13:03:21,196 INFO L273 TraceCheckUtils]: 29: Hoare triple {28152#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 13:03:21,196 INFO L273 TraceCheckUtils]: 30: Hoare triple {28152#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 13:03:21,196 INFO L273 TraceCheckUtils]: 31: Hoare triple {28152#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 13:03:21,196 INFO L273 TraceCheckUtils]: 32: Hoare triple {28152#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 13:03:21,196 INFO L273 TraceCheckUtils]: 33: Hoare triple {28152#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 13:03:21,196 INFO L273 TraceCheckUtils]: 34: Hoare triple {28152#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 13:03:21,197 INFO L273 TraceCheckUtils]: 35: Hoare triple {28152#true} assume 4384 == #t~mem29;havoc #t~mem29; {28152#true} is VALID [2018-11-23 13:03:21,197 INFO L273 TraceCheckUtils]: 36: Hoare triple {28152#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {28152#true} is VALID [2018-11-23 13:03:21,197 INFO L273 TraceCheckUtils]: 37: Hoare triple {28152#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {28152#true} is VALID [2018-11-23 13:03:21,197 INFO L273 TraceCheckUtils]: 38: Hoare triple {28152#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {28152#true} is VALID [2018-11-23 13:03:21,212 INFO L273 TraceCheckUtils]: 39: Hoare triple {28152#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:21,228 INFO L273 TraceCheckUtils]: 40: Hoare triple {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:21,234 INFO L273 TraceCheckUtils]: 41: Hoare triple {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:21,236 INFO L273 TraceCheckUtils]: 42: Hoare triple {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:21,236 INFO L273 TraceCheckUtils]: 43: Hoare triple {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} ~skip~0 := 0; {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:21,239 INFO L273 TraceCheckUtils]: 44: Hoare triple {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !false; {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:21,239 INFO L273 TraceCheckUtils]: 45: Hoare triple {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:21,242 INFO L273 TraceCheckUtils]: 46: Hoare triple {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:21,242 INFO L273 TraceCheckUtils]: 47: Hoare triple {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:21,242 INFO L273 TraceCheckUtils]: 48: Hoare triple {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:21,243 INFO L273 TraceCheckUtils]: 49: Hoare triple {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:21,243 INFO L273 TraceCheckUtils]: 50: Hoare triple {28154#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {28155#(= |ssl3_connect_#t~mem27| 4400)} is VALID [2018-11-23 13:03:21,243 INFO L273 TraceCheckUtils]: 51: Hoare triple {28155#(= |ssl3_connect_#t~mem27| 4400)} assume 4368 == #t~mem27;havoc #t~mem27; {28153#false} is VALID [2018-11-23 13:03:21,244 INFO L273 TraceCheckUtils]: 52: Hoare triple {28153#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {28153#false} is VALID [2018-11-23 13:03:21,244 INFO L273 TraceCheckUtils]: 53: Hoare triple {28153#false} assume !(0 == ~blastFlag~0); {28153#false} is VALID [2018-11-23 13:03:21,244 INFO L273 TraceCheckUtils]: 54: Hoare triple {28153#false} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 13:03:21,244 INFO L273 TraceCheckUtils]: 55: Hoare triple {28153#false} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {28153#false} is VALID [2018-11-23 13:03:21,244 INFO L273 TraceCheckUtils]: 56: Hoare triple {28153#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {28153#false} is VALID [2018-11-23 13:03:21,244 INFO L273 TraceCheckUtils]: 57: Hoare triple {28153#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {28153#false} is VALID [2018-11-23 13:03:21,244 INFO L273 TraceCheckUtils]: 58: Hoare triple {28153#false} ~skip~0 := 0; {28153#false} is VALID [2018-11-23 13:03:21,244 INFO L273 TraceCheckUtils]: 59: Hoare triple {28153#false} assume !false; {28153#false} is VALID [2018-11-23 13:03:21,245 INFO L273 TraceCheckUtils]: 60: Hoare triple {28153#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 13:03:21,245 INFO L273 TraceCheckUtils]: 61: Hoare triple {28153#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 13:03:21,245 INFO L273 TraceCheckUtils]: 62: Hoare triple {28153#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 13:03:21,245 INFO L273 TraceCheckUtils]: 63: Hoare triple {28153#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 13:03:21,245 INFO L273 TraceCheckUtils]: 64: Hoare triple {28153#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 13:03:21,245 INFO L273 TraceCheckUtils]: 65: Hoare triple {28153#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 13:03:21,245 INFO L273 TraceCheckUtils]: 66: Hoare triple {28153#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 13:03:21,245 INFO L273 TraceCheckUtils]: 67: Hoare triple {28153#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 13:03:21,246 INFO L273 TraceCheckUtils]: 68: Hoare triple {28153#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 13:03:21,246 INFO L273 TraceCheckUtils]: 69: Hoare triple {28153#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 13:03:21,246 INFO L273 TraceCheckUtils]: 70: Hoare triple {28153#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 13:03:21,246 INFO L273 TraceCheckUtils]: 71: Hoare triple {28153#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 13:03:21,246 INFO L273 TraceCheckUtils]: 72: Hoare triple {28153#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 13:03:21,246 INFO L273 TraceCheckUtils]: 73: Hoare triple {28153#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {28153#false} is VALID [2018-11-23 13:03:21,246 INFO L273 TraceCheckUtils]: 74: Hoare triple {28153#false} assume 4432 == #t~mem35;havoc #t~mem35; {28153#false} is VALID [2018-11-23 13:03:21,246 INFO L273 TraceCheckUtils]: 75: Hoare triple {28153#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {28153#false} is VALID [2018-11-23 13:03:21,246 INFO L273 TraceCheckUtils]: 76: Hoare triple {28153#false} assume 5 == ~blastFlag~0; {28153#false} is VALID [2018-11-23 13:03:21,247 INFO L273 TraceCheckUtils]: 77: Hoare triple {28153#false} assume !false; {28153#false} is VALID [2018-11-23 13:03:21,252 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 13:03:21,252 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:03:21,252 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:03:21,253 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 13:03:21,253 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:03:21,253 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:03:21,327 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 71 edges. 71 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:21,327 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:03:21,327 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:03:21,327 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:03:21,328 INFO L87 Difference]: Start difference. First operand 421 states and 626 transitions. Second operand 4 states. [2018-11-23 13:03:22,451 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:22,451 INFO L93 Difference]: Finished difference Result 722 states and 1065 transitions. [2018-11-23 13:03:22,451 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:03:22,452 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 78 [2018-11-23 13:03:22,452 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:03:22,452 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:22,454 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 398 transitions. [2018-11-23 13:03:22,454 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:22,455 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 398 transitions. [2018-11-23 13:03:22,455 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 398 transitions. [2018-11-23 13:03:22,846 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 398 edges. 398 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:22,859 INFO L225 Difference]: With dead ends: 722 [2018-11-23 13:03:22,859 INFO L226 Difference]: Without dead ends: 463 [2018-11-23 13:03:22,860 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:03:22,861 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 463 states. [2018-11-23 13:03:22,989 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 463 to 421. [2018-11-23 13:03:22,989 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:03:22,989 INFO L82 GeneralOperation]: Start isEquivalent. First operand 463 states. Second operand 421 states. [2018-11-23 13:03:22,990 INFO L74 IsIncluded]: Start isIncluded. First operand 463 states. Second operand 421 states. [2018-11-23 13:03:22,990 INFO L87 Difference]: Start difference. First operand 463 states. Second operand 421 states. [2018-11-23 13:03:23,002 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:23,002 INFO L93 Difference]: Finished difference Result 463 states and 677 transitions. [2018-11-23 13:03:23,003 INFO L276 IsEmpty]: Start isEmpty. Operand 463 states and 677 transitions. [2018-11-23 13:03:23,003 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:23,003 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:23,004 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 463 states. [2018-11-23 13:03:23,004 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 463 states. [2018-11-23 13:03:23,018 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:23,018 INFO L93 Difference]: Finished difference Result 463 states and 677 transitions. [2018-11-23 13:03:23,019 INFO L276 IsEmpty]: Start isEmpty. Operand 463 states and 677 transitions. [2018-11-23 13:03:23,020 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:23,020 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:23,020 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:03:23,020 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:03:23,020 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 13:03:23,030 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 624 transitions. [2018-11-23 13:03:23,031 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 624 transitions. Word has length 78 [2018-11-23 13:03:23,031 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:03:23,031 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 624 transitions. [2018-11-23 13:03:23,031 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:03:23,031 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 624 transitions. [2018-11-23 13:03:23,032 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2018-11-23 13:03:23,032 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:03:23,032 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:03:23,033 INFO L423 AbstractCegarLoop]: === Iteration 14 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:03:23,033 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:03:23,033 INFO L82 PathProgramCache]: Analyzing trace with hash -1290131619, now seen corresponding path program 1 times [2018-11-23 13:03:23,033 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:03:23,033 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:03:23,035 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:23,035 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:03:23,035 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:23,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:03:23,211 INFO L256 TraceCheckUtils]: 0: Hoare triple {30391#true} call ULTIMATE.init(); {30391#true} is VALID [2018-11-23 13:03:23,212 INFO L273 TraceCheckUtils]: 1: Hoare triple {30391#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {30391#true} is VALID [2018-11-23 13:03:23,212 INFO L273 TraceCheckUtils]: 2: Hoare triple {30391#true} assume true; {30391#true} is VALID [2018-11-23 13:03:23,212 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {30391#true} {30391#true} #542#return; {30391#true} is VALID [2018-11-23 13:03:23,212 INFO L256 TraceCheckUtils]: 4: Hoare triple {30391#true} call #t~ret138 := main(); {30391#true} is VALID [2018-11-23 13:03:23,213 INFO L273 TraceCheckUtils]: 5: Hoare triple {30391#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {30391#true} is VALID [2018-11-23 13:03:23,213 INFO L256 TraceCheckUtils]: 6: Hoare triple {30391#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {30391#true} is VALID [2018-11-23 13:03:23,213 INFO L273 TraceCheckUtils]: 7: Hoare triple {30391#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 13:03:23,213 INFO L273 TraceCheckUtils]: 8: Hoare triple {30391#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {30391#true} is VALID [2018-11-23 13:03:23,214 INFO L273 TraceCheckUtils]: 9: Hoare triple {30391#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {30391#true} is VALID [2018-11-23 13:03:23,214 INFO L273 TraceCheckUtils]: 10: Hoare triple {30391#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {30391#true} is VALID [2018-11-23 13:03:23,214 INFO L273 TraceCheckUtils]: 11: Hoare triple {30391#true} assume !false; {30391#true} is VALID [2018-11-23 13:03:23,214 INFO L273 TraceCheckUtils]: 12: Hoare triple {30391#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 13:03:23,214 INFO L273 TraceCheckUtils]: 13: Hoare triple {30391#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 13:03:23,215 INFO L273 TraceCheckUtils]: 14: Hoare triple {30391#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 13:03:23,215 INFO L273 TraceCheckUtils]: 15: Hoare triple {30391#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 13:03:23,215 INFO L273 TraceCheckUtils]: 16: Hoare triple {30391#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 13:03:23,215 INFO L273 TraceCheckUtils]: 17: Hoare triple {30391#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 13:03:23,215 INFO L273 TraceCheckUtils]: 18: Hoare triple {30391#true} assume 4368 == #t~mem27;havoc #t~mem27; {30391#true} is VALID [2018-11-23 13:03:23,215 INFO L273 TraceCheckUtils]: 19: Hoare triple {30391#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {30391#true} is VALID [2018-11-23 13:03:23,215 INFO L273 TraceCheckUtils]: 20: Hoare triple {30391#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {30391#true} is VALID [2018-11-23 13:03:23,216 INFO L273 TraceCheckUtils]: 21: Hoare triple {30391#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 13:03:23,216 INFO L273 TraceCheckUtils]: 22: Hoare triple {30391#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {30391#true} is VALID [2018-11-23 13:03:23,216 INFO L273 TraceCheckUtils]: 23: Hoare triple {30391#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {30391#true} is VALID [2018-11-23 13:03:23,216 INFO L273 TraceCheckUtils]: 24: Hoare triple {30391#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {30391#true} is VALID [2018-11-23 13:03:23,216 INFO L273 TraceCheckUtils]: 25: Hoare triple {30391#true} ~skip~0 := 0; {30391#true} is VALID [2018-11-23 13:03:23,216 INFO L273 TraceCheckUtils]: 26: Hoare triple {30391#true} assume !false; {30391#true} is VALID [2018-11-23 13:03:23,217 INFO L273 TraceCheckUtils]: 27: Hoare triple {30391#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 13:03:23,217 INFO L273 TraceCheckUtils]: 28: Hoare triple {30391#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 13:03:23,217 INFO L273 TraceCheckUtils]: 29: Hoare triple {30391#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 13:03:23,217 INFO L273 TraceCheckUtils]: 30: Hoare triple {30391#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 13:03:23,217 INFO L273 TraceCheckUtils]: 31: Hoare triple {30391#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 13:03:23,217 INFO L273 TraceCheckUtils]: 32: Hoare triple {30391#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 13:03:23,217 INFO L273 TraceCheckUtils]: 33: Hoare triple {30391#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 13:03:23,218 INFO L273 TraceCheckUtils]: 34: Hoare triple {30391#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 13:03:23,218 INFO L273 TraceCheckUtils]: 35: Hoare triple {30391#true} assume 4384 == #t~mem29;havoc #t~mem29; {30391#true} is VALID [2018-11-23 13:03:23,218 INFO L273 TraceCheckUtils]: 36: Hoare triple {30391#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {30391#true} is VALID [2018-11-23 13:03:23,218 INFO L273 TraceCheckUtils]: 37: Hoare triple {30391#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {30391#true} is VALID [2018-11-23 13:03:23,218 INFO L273 TraceCheckUtils]: 38: Hoare triple {30391#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {30391#true} is VALID [2018-11-23 13:03:23,219 INFO L273 TraceCheckUtils]: 39: Hoare triple {30391#true} assume 0 != #t~mem68;havoc #t~mem68;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:23,220 INFO L273 TraceCheckUtils]: 40: Hoare triple {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:23,220 INFO L273 TraceCheckUtils]: 41: Hoare triple {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:23,221 INFO L273 TraceCheckUtils]: 42: Hoare triple {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:23,221 INFO L273 TraceCheckUtils]: 43: Hoare triple {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} ~skip~0 := 0; {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:23,222 INFO L273 TraceCheckUtils]: 44: Hoare triple {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !false; {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:23,222 INFO L273 TraceCheckUtils]: 45: Hoare triple {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:23,223 INFO L273 TraceCheckUtils]: 46: Hoare triple {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:23,224 INFO L273 TraceCheckUtils]: 47: Hoare triple {30393#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {30394#(= |ssl3_connect_#t~mem24| 4560)} is VALID [2018-11-23 13:03:23,225 INFO L273 TraceCheckUtils]: 48: Hoare triple {30394#(= |ssl3_connect_#t~mem24| 4560)} assume 4096 == #t~mem24;havoc #t~mem24; {30392#false} is VALID [2018-11-23 13:03:23,225 INFO L273 TraceCheckUtils]: 49: Hoare triple {30392#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 13:03:23,225 INFO L273 TraceCheckUtils]: 50: Hoare triple {30392#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {30392#false} is VALID [2018-11-23 13:03:23,226 INFO L273 TraceCheckUtils]: 51: Hoare triple {30392#false} call #t~mem57 := read~int(~s.base, ~s.offset, 4); {30392#false} is VALID [2018-11-23 13:03:23,226 INFO L273 TraceCheckUtils]: 52: Hoare triple {30392#false} assume !(768 != ~bitwiseAnd(#t~mem57, 65280));havoc #t~mem57;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 13:03:23,226 INFO L273 TraceCheckUtils]: 53: Hoare triple {30392#false} assume !(0 == (#t~mem58.base + #t~mem58.offset) % 4294967296);havoc #t~mem58.base, #t~mem58.offset; {30392#false} is VALID [2018-11-23 13:03:23,226 INFO L273 TraceCheckUtils]: 54: Hoare triple {30392#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {30392#false} is VALID [2018-11-23 13:03:23,227 INFO L273 TraceCheckUtils]: 55: Hoare triple {30392#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {30392#false} is VALID [2018-11-23 13:03:23,227 INFO L273 TraceCheckUtils]: 56: Hoare triple {30392#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem63 := read~int(#t~mem62.base, 60 + #t~mem62.offset, 4);call write~int(1 + #t~mem63, #t~mem62.base, 60 + #t~mem62.offset, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, 64 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 13:03:23,227 INFO L273 TraceCheckUtils]: 57: Hoare triple {30392#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {30392#false} is VALID [2018-11-23 13:03:23,227 INFO L273 TraceCheckUtils]: 58: Hoare triple {30392#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {30392#false} is VALID [2018-11-23 13:03:23,228 INFO L273 TraceCheckUtils]: 59: Hoare triple {30392#false} ~skip~0 := 0; {30392#false} is VALID [2018-11-23 13:03:23,228 INFO L273 TraceCheckUtils]: 60: Hoare triple {30392#false} assume !false; {30392#false} is VALID [2018-11-23 13:03:23,228 INFO L273 TraceCheckUtils]: 61: Hoare triple {30392#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 13:03:23,228 INFO L273 TraceCheckUtils]: 62: Hoare triple {30392#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 13:03:23,229 INFO L273 TraceCheckUtils]: 63: Hoare triple {30392#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 13:03:23,229 INFO L273 TraceCheckUtils]: 64: Hoare triple {30392#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 13:03:23,229 INFO L273 TraceCheckUtils]: 65: Hoare triple {30392#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 13:03:23,229 INFO L273 TraceCheckUtils]: 66: Hoare triple {30392#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 13:03:23,229 INFO L273 TraceCheckUtils]: 67: Hoare triple {30392#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 13:03:23,230 INFO L273 TraceCheckUtils]: 68: Hoare triple {30392#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 13:03:23,230 INFO L273 TraceCheckUtils]: 69: Hoare triple {30392#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 13:03:23,230 INFO L273 TraceCheckUtils]: 70: Hoare triple {30392#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 13:03:23,230 INFO L273 TraceCheckUtils]: 71: Hoare triple {30392#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 13:03:23,230 INFO L273 TraceCheckUtils]: 72: Hoare triple {30392#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 13:03:23,230 INFO L273 TraceCheckUtils]: 73: Hoare triple {30392#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 13:03:23,230 INFO L273 TraceCheckUtils]: 74: Hoare triple {30392#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {30392#false} is VALID [2018-11-23 13:03:23,231 INFO L273 TraceCheckUtils]: 75: Hoare triple {30392#false} assume 4432 == #t~mem35;havoc #t~mem35; {30392#false} is VALID [2018-11-23 13:03:23,231 INFO L273 TraceCheckUtils]: 76: Hoare triple {30392#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {30392#false} is VALID [2018-11-23 13:03:23,231 INFO L273 TraceCheckUtils]: 77: Hoare triple {30392#false} assume 5 == ~blastFlag~0; {30392#false} is VALID [2018-11-23 13:03:23,231 INFO L273 TraceCheckUtils]: 78: Hoare triple {30392#false} assume !false; {30392#false} is VALID [2018-11-23 13:03:23,240 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 13:03:23,241 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:03:23,241 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:03:23,241 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 79 [2018-11-23 13:03:23,242 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:03:23,242 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:03:23,350 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 72 edges. 72 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:23,350 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:03:23,350 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:03:23,350 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:03:23,351 INFO L87 Difference]: Start difference. First operand 421 states and 624 transitions. Second operand 4 states. [2018-11-23 13:03:25,067 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:25,068 INFO L93 Difference]: Finished difference Result 943 states and 1391 transitions. [2018-11-23 13:03:25,068 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:03:25,068 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 79 [2018-11-23 13:03:25,068 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:03:25,068 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:25,071 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 462 transitions. [2018-11-23 13:03:25,071 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:25,073 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 462 transitions. [2018-11-23 13:03:25,074 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 462 transitions. [2018-11-23 13:03:25,539 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 462 edges. 462 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:25,555 INFO L225 Difference]: With dead ends: 943 [2018-11-23 13:03:25,555 INFO L226 Difference]: Without dead ends: 535 [2018-11-23 13:03:25,556 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:03:25,557 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 535 states. [2018-11-23 13:03:25,747 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 535 to 421. [2018-11-23 13:03:25,747 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:03:25,747 INFO L82 GeneralOperation]: Start isEquivalent. First operand 535 states. Second operand 421 states. [2018-11-23 13:03:25,748 INFO L74 IsIncluded]: Start isIncluded. First operand 535 states. Second operand 421 states. [2018-11-23 13:03:25,748 INFO L87 Difference]: Start difference. First operand 535 states. Second operand 421 states. [2018-11-23 13:03:25,761 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:25,762 INFO L93 Difference]: Finished difference Result 535 states and 782 transitions. [2018-11-23 13:03:25,762 INFO L276 IsEmpty]: Start isEmpty. Operand 535 states and 782 transitions. [2018-11-23 13:03:25,762 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:25,762 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:25,763 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 535 states. [2018-11-23 13:03:25,763 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 535 states. [2018-11-23 13:03:25,776 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:25,776 INFO L93 Difference]: Finished difference Result 535 states and 782 transitions. [2018-11-23 13:03:25,776 INFO L276 IsEmpty]: Start isEmpty. Operand 535 states and 782 transitions. [2018-11-23 13:03:25,777 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:25,777 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:25,777 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:03:25,777 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:03:25,777 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 13:03:25,789 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 622 transitions. [2018-11-23 13:03:25,789 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 622 transitions. Word has length 79 [2018-11-23 13:03:25,789 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:03:25,789 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 622 transitions. [2018-11-23 13:03:25,789 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:03:25,790 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 622 transitions. [2018-11-23 13:03:25,791 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2018-11-23 13:03:25,791 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:03:25,791 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:03:25,791 INFO L423 AbstractCegarLoop]: === Iteration 15 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:03:25,791 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:03:25,792 INFO L82 PathProgramCache]: Analyzing trace with hash 765876928, now seen corresponding path program 1 times [2018-11-23 13:03:25,792 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:03:25,792 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:03:25,793 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:25,793 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:03:25,793 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:25,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:03:26,499 INFO L256 TraceCheckUtils]: 0: Hoare triple {33028#true} call ULTIMATE.init(); {33028#true} is VALID [2018-11-23 13:03:26,499 INFO L273 TraceCheckUtils]: 1: Hoare triple {33028#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {33028#true} is VALID [2018-11-23 13:03:26,500 INFO L273 TraceCheckUtils]: 2: Hoare triple {33028#true} assume true; {33028#true} is VALID [2018-11-23 13:03:26,500 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {33028#true} {33028#true} #542#return; {33028#true} is VALID [2018-11-23 13:03:26,500 INFO L256 TraceCheckUtils]: 4: Hoare triple {33028#true} call #t~ret138 := main(); {33028#true} is VALID [2018-11-23 13:03:26,500 INFO L273 TraceCheckUtils]: 5: Hoare triple {33028#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {33028#true} is VALID [2018-11-23 13:03:26,500 INFO L256 TraceCheckUtils]: 6: Hoare triple {33028#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {33028#true} is VALID [2018-11-23 13:03:26,500 INFO L273 TraceCheckUtils]: 7: Hoare triple {33028#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 13:03:26,501 INFO L273 TraceCheckUtils]: 8: Hoare triple {33028#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {33028#true} is VALID [2018-11-23 13:03:26,501 INFO L273 TraceCheckUtils]: 9: Hoare triple {33028#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {33028#true} is VALID [2018-11-23 13:03:26,501 INFO L273 TraceCheckUtils]: 10: Hoare triple {33028#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {33028#true} is VALID [2018-11-23 13:03:26,501 INFO L273 TraceCheckUtils]: 11: Hoare triple {33028#true} assume !false; {33028#true} is VALID [2018-11-23 13:03:26,501 INFO L273 TraceCheckUtils]: 12: Hoare triple {33028#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 13:03:26,501 INFO L273 TraceCheckUtils]: 13: Hoare triple {33028#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 13:03:26,502 INFO L273 TraceCheckUtils]: 14: Hoare triple {33028#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 13:03:26,502 INFO L273 TraceCheckUtils]: 15: Hoare triple {33028#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 13:03:26,502 INFO L273 TraceCheckUtils]: 16: Hoare triple {33028#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 13:03:26,502 INFO L273 TraceCheckUtils]: 17: Hoare triple {33028#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 13:03:26,502 INFO L273 TraceCheckUtils]: 18: Hoare triple {33028#true} assume 4368 == #t~mem27;havoc #t~mem27; {33028#true} is VALID [2018-11-23 13:03:26,502 INFO L273 TraceCheckUtils]: 19: Hoare triple {33028#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {33028#true} is VALID [2018-11-23 13:03:26,503 INFO L273 TraceCheckUtils]: 20: Hoare triple {33028#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {33028#true} is VALID [2018-11-23 13:03:26,503 INFO L273 TraceCheckUtils]: 21: Hoare triple {33028#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 13:03:26,503 INFO L273 TraceCheckUtils]: 22: Hoare triple {33028#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {33028#true} is VALID [2018-11-23 13:03:26,503 INFO L273 TraceCheckUtils]: 23: Hoare triple {33028#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {33028#true} is VALID [2018-11-23 13:03:26,503 INFO L273 TraceCheckUtils]: 24: Hoare triple {33028#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {33028#true} is VALID [2018-11-23 13:03:26,503 INFO L273 TraceCheckUtils]: 25: Hoare triple {33028#true} ~skip~0 := 0; {33028#true} is VALID [2018-11-23 13:03:26,504 INFO L273 TraceCheckUtils]: 26: Hoare triple {33028#true} assume !false; {33028#true} is VALID [2018-11-23 13:03:26,504 INFO L273 TraceCheckUtils]: 27: Hoare triple {33028#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 13:03:26,504 INFO L273 TraceCheckUtils]: 28: Hoare triple {33028#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 13:03:26,504 INFO L273 TraceCheckUtils]: 29: Hoare triple {33028#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 13:03:26,504 INFO L273 TraceCheckUtils]: 30: Hoare triple {33028#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 13:03:26,504 INFO L273 TraceCheckUtils]: 31: Hoare triple {33028#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 13:03:26,505 INFO L273 TraceCheckUtils]: 32: Hoare triple {33028#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 13:03:26,505 INFO L273 TraceCheckUtils]: 33: Hoare triple {33028#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 13:03:26,505 INFO L273 TraceCheckUtils]: 34: Hoare triple {33028#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 13:03:26,505 INFO L273 TraceCheckUtils]: 35: Hoare triple {33028#true} assume 4384 == #t~mem29;havoc #t~mem29; {33028#true} is VALID [2018-11-23 13:03:26,505 INFO L273 TraceCheckUtils]: 36: Hoare triple {33028#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {33028#true} is VALID [2018-11-23 13:03:26,505 INFO L273 TraceCheckUtils]: 37: Hoare triple {33028#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {33028#true} is VALID [2018-11-23 13:03:26,506 INFO L273 TraceCheckUtils]: 38: Hoare triple {33028#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {33028#true} is VALID [2018-11-23 13:03:26,518 INFO L273 TraceCheckUtils]: 39: Hoare triple {33028#true} assume 0 != #t~mem68;havoc #t~mem68;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:26,531 INFO L273 TraceCheckUtils]: 40: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:26,543 INFO L273 TraceCheckUtils]: 41: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:26,556 INFO L273 TraceCheckUtils]: 42: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:26,568 INFO L273 TraceCheckUtils]: 43: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} ~skip~0 := 0; {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:26,583 INFO L273 TraceCheckUtils]: 44: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !false; {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:26,591 INFO L273 TraceCheckUtils]: 45: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:26,611 INFO L273 TraceCheckUtils]: 46: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:26,619 INFO L273 TraceCheckUtils]: 47: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:26,632 INFO L273 TraceCheckUtils]: 48: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:26,645 INFO L273 TraceCheckUtils]: 49: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:26,657 INFO L273 TraceCheckUtils]: 50: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:26,676 INFO L273 TraceCheckUtils]: 51: Hoare triple {33030#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {33031#(= |ssl3_connect_#t~mem28| 4560)} is VALID [2018-11-23 13:03:26,685 INFO L273 TraceCheckUtils]: 52: Hoare triple {33031#(= |ssl3_connect_#t~mem28| 4560)} assume 4369 == #t~mem28;havoc #t~mem28; {33029#false} is VALID [2018-11-23 13:03:26,685 INFO L273 TraceCheckUtils]: 53: Hoare triple {33029#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {33029#false} is VALID [2018-11-23 13:03:26,685 INFO L273 TraceCheckUtils]: 54: Hoare triple {33029#false} assume !(0 == ~blastFlag~0); {33029#false} is VALID [2018-11-23 13:03:26,685 INFO L273 TraceCheckUtils]: 55: Hoare triple {33029#false} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 13:03:26,685 INFO L273 TraceCheckUtils]: 56: Hoare triple {33029#false} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {33029#false} is VALID [2018-11-23 13:03:26,685 INFO L273 TraceCheckUtils]: 57: Hoare triple {33029#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {33029#false} is VALID [2018-11-23 13:03:26,686 INFO L273 TraceCheckUtils]: 58: Hoare triple {33029#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {33029#false} is VALID [2018-11-23 13:03:26,686 INFO L273 TraceCheckUtils]: 59: Hoare triple {33029#false} ~skip~0 := 0; {33029#false} is VALID [2018-11-23 13:03:26,686 INFO L273 TraceCheckUtils]: 60: Hoare triple {33029#false} assume !false; {33029#false} is VALID [2018-11-23 13:03:26,686 INFO L273 TraceCheckUtils]: 61: Hoare triple {33029#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 13:03:26,686 INFO L273 TraceCheckUtils]: 62: Hoare triple {33029#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 13:03:26,686 INFO L273 TraceCheckUtils]: 63: Hoare triple {33029#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 13:03:26,686 INFO L273 TraceCheckUtils]: 64: Hoare triple {33029#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 13:03:26,686 INFO L273 TraceCheckUtils]: 65: Hoare triple {33029#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 13:03:26,687 INFO L273 TraceCheckUtils]: 66: Hoare triple {33029#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 13:03:26,687 INFO L273 TraceCheckUtils]: 67: Hoare triple {33029#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 13:03:26,687 INFO L273 TraceCheckUtils]: 68: Hoare triple {33029#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 13:03:26,687 INFO L273 TraceCheckUtils]: 69: Hoare triple {33029#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 13:03:26,687 INFO L273 TraceCheckUtils]: 70: Hoare triple {33029#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 13:03:26,687 INFO L273 TraceCheckUtils]: 71: Hoare triple {33029#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 13:03:26,687 INFO L273 TraceCheckUtils]: 72: Hoare triple {33029#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 13:03:26,687 INFO L273 TraceCheckUtils]: 73: Hoare triple {33029#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 13:03:26,687 INFO L273 TraceCheckUtils]: 74: Hoare triple {33029#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {33029#false} is VALID [2018-11-23 13:03:26,688 INFO L273 TraceCheckUtils]: 75: Hoare triple {33029#false} assume 4432 == #t~mem35;havoc #t~mem35; {33029#false} is VALID [2018-11-23 13:03:26,688 INFO L273 TraceCheckUtils]: 76: Hoare triple {33029#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {33029#false} is VALID [2018-11-23 13:03:26,688 INFO L273 TraceCheckUtils]: 77: Hoare triple {33029#false} assume 5 == ~blastFlag~0; {33029#false} is VALID [2018-11-23 13:03:26,688 INFO L273 TraceCheckUtils]: 78: Hoare triple {33029#false} assume !false; {33029#false} is VALID [2018-11-23 13:03:26,693 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 57 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 13:03:26,693 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:03:26,693 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:03:26,693 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 79 [2018-11-23 13:03:26,693 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:03:26,694 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:03:26,767 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 72 edges. 72 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:26,767 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:03:26,768 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:03:26,768 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:03:26,768 INFO L87 Difference]: Start difference. First operand 421 states and 622 transitions. Second operand 4 states. [2018-11-23 13:03:28,282 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:28,282 INFO L93 Difference]: Finished difference Result 788 states and 1159 transitions. [2018-11-23 13:03:28,282 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:03:28,282 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 79 [2018-11-23 13:03:28,283 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:03:28,283 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:28,286 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 457 transitions. [2018-11-23 13:03:28,286 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:28,289 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 457 transitions. [2018-11-23 13:03:28,289 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 457 transitions. [2018-11-23 13:03:28,859 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 457 edges. 457 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:28,875 INFO L225 Difference]: With dead ends: 788 [2018-11-23 13:03:28,876 INFO L226 Difference]: Without dead ends: 529 [2018-11-23 13:03:28,876 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:03:28,877 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 529 states. [2018-11-23 13:03:28,996 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 529 to 421. [2018-11-23 13:03:28,996 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:03:28,996 INFO L82 GeneralOperation]: Start isEquivalent. First operand 529 states. Second operand 421 states. [2018-11-23 13:03:28,997 INFO L74 IsIncluded]: Start isIncluded. First operand 529 states. Second operand 421 states. [2018-11-23 13:03:28,997 INFO L87 Difference]: Start difference. First operand 529 states. Second operand 421 states. [2018-11-23 13:03:29,010 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:29,010 INFO L93 Difference]: Finished difference Result 529 states and 773 transitions. [2018-11-23 13:03:29,010 INFO L276 IsEmpty]: Start isEmpty. Operand 529 states and 773 transitions. [2018-11-23 13:03:29,011 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:29,011 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:29,011 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 529 states. [2018-11-23 13:03:29,011 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 529 states. [2018-11-23 13:03:29,021 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:29,021 INFO L93 Difference]: Finished difference Result 529 states and 773 transitions. [2018-11-23 13:03:29,021 INFO L276 IsEmpty]: Start isEmpty. Operand 529 states and 773 transitions. [2018-11-23 13:03:29,022 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:29,022 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:29,022 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:03:29,022 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:03:29,022 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 13:03:29,031 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 620 transitions. [2018-11-23 13:03:29,031 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 620 transitions. Word has length 79 [2018-11-23 13:03:29,032 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:03:29,032 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 620 transitions. [2018-11-23 13:03:29,032 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:03:29,032 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 620 transitions. [2018-11-23 13:03:29,033 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2018-11-23 13:03:29,033 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:03:29,033 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:03:29,033 INFO L423 AbstractCegarLoop]: === Iteration 16 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:03:29,033 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:03:29,033 INFO L82 PathProgramCache]: Analyzing trace with hash 1633028379, now seen corresponding path program 1 times [2018-11-23 13:03:29,033 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:03:29,034 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:03:29,034 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:29,034 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:03:29,034 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:29,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:03:29,220 INFO L256 TraceCheckUtils]: 0: Hoare triple {35479#true} call ULTIMATE.init(); {35479#true} is VALID [2018-11-23 13:03:29,221 INFO L273 TraceCheckUtils]: 1: Hoare triple {35479#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {35479#true} is VALID [2018-11-23 13:03:29,221 INFO L273 TraceCheckUtils]: 2: Hoare triple {35479#true} assume true; {35479#true} is VALID [2018-11-23 13:03:29,221 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {35479#true} {35479#true} #542#return; {35479#true} is VALID [2018-11-23 13:03:29,221 INFO L256 TraceCheckUtils]: 4: Hoare triple {35479#true} call #t~ret138 := main(); {35479#true} is VALID [2018-11-23 13:03:29,222 INFO L273 TraceCheckUtils]: 5: Hoare triple {35479#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {35479#true} is VALID [2018-11-23 13:03:29,222 INFO L256 TraceCheckUtils]: 6: Hoare triple {35479#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {35479#true} is VALID [2018-11-23 13:03:29,222 INFO L273 TraceCheckUtils]: 7: Hoare triple {35479#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 13:03:29,222 INFO L273 TraceCheckUtils]: 8: Hoare triple {35479#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {35479#true} is VALID [2018-11-23 13:03:29,222 INFO L273 TraceCheckUtils]: 9: Hoare triple {35479#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {35479#true} is VALID [2018-11-23 13:03:29,223 INFO L273 TraceCheckUtils]: 10: Hoare triple {35479#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {35479#true} is VALID [2018-11-23 13:03:29,223 INFO L273 TraceCheckUtils]: 11: Hoare triple {35479#true} assume !false; {35479#true} is VALID [2018-11-23 13:03:29,223 INFO L273 TraceCheckUtils]: 12: Hoare triple {35479#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 13:03:29,223 INFO L273 TraceCheckUtils]: 13: Hoare triple {35479#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 13:03:29,223 INFO L273 TraceCheckUtils]: 14: Hoare triple {35479#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 13:03:29,224 INFO L273 TraceCheckUtils]: 15: Hoare triple {35479#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 13:03:29,224 INFO L273 TraceCheckUtils]: 16: Hoare triple {35479#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 13:03:29,224 INFO L273 TraceCheckUtils]: 17: Hoare triple {35479#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 13:03:29,224 INFO L273 TraceCheckUtils]: 18: Hoare triple {35479#true} assume 4368 == #t~mem27;havoc #t~mem27; {35479#true} is VALID [2018-11-23 13:03:29,224 INFO L273 TraceCheckUtils]: 19: Hoare triple {35479#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {35479#true} is VALID [2018-11-23 13:03:29,224 INFO L273 TraceCheckUtils]: 20: Hoare triple {35479#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {35479#true} is VALID [2018-11-23 13:03:29,225 INFO L273 TraceCheckUtils]: 21: Hoare triple {35479#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 13:03:29,225 INFO L273 TraceCheckUtils]: 22: Hoare triple {35479#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {35479#true} is VALID [2018-11-23 13:03:29,225 INFO L273 TraceCheckUtils]: 23: Hoare triple {35479#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {35479#true} is VALID [2018-11-23 13:03:29,225 INFO L273 TraceCheckUtils]: 24: Hoare triple {35479#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {35479#true} is VALID [2018-11-23 13:03:29,225 INFO L273 TraceCheckUtils]: 25: Hoare triple {35479#true} ~skip~0 := 0; {35479#true} is VALID [2018-11-23 13:03:29,225 INFO L273 TraceCheckUtils]: 26: Hoare triple {35479#true} assume !false; {35479#true} is VALID [2018-11-23 13:03:29,225 INFO L273 TraceCheckUtils]: 27: Hoare triple {35479#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 13:03:29,226 INFO L273 TraceCheckUtils]: 28: Hoare triple {35479#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 13:03:29,226 INFO L273 TraceCheckUtils]: 29: Hoare triple {35479#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 13:03:29,226 INFO L273 TraceCheckUtils]: 30: Hoare triple {35479#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 13:03:29,226 INFO L273 TraceCheckUtils]: 31: Hoare triple {35479#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 13:03:29,226 INFO L273 TraceCheckUtils]: 32: Hoare triple {35479#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 13:03:29,226 INFO L273 TraceCheckUtils]: 33: Hoare triple {35479#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 13:03:29,227 INFO L273 TraceCheckUtils]: 34: Hoare triple {35479#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 13:03:29,227 INFO L273 TraceCheckUtils]: 35: Hoare triple {35479#true} assume 4384 == #t~mem29;havoc #t~mem29; {35479#true} is VALID [2018-11-23 13:03:29,227 INFO L273 TraceCheckUtils]: 36: Hoare triple {35479#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {35479#true} is VALID [2018-11-23 13:03:29,227 INFO L273 TraceCheckUtils]: 37: Hoare triple {35479#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {35479#true} is VALID [2018-11-23 13:03:29,227 INFO L273 TraceCheckUtils]: 38: Hoare triple {35479#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {35479#true} is VALID [2018-11-23 13:03:29,229 INFO L273 TraceCheckUtils]: 39: Hoare triple {35479#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:29,229 INFO L273 TraceCheckUtils]: 40: Hoare triple {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:29,230 INFO L273 TraceCheckUtils]: 41: Hoare triple {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:29,230 INFO L273 TraceCheckUtils]: 42: Hoare triple {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:29,230 INFO L273 TraceCheckUtils]: 43: Hoare triple {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} ~skip~0 := 0; {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:29,231 INFO L273 TraceCheckUtils]: 44: Hoare triple {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !false; {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:29,232 INFO L273 TraceCheckUtils]: 45: Hoare triple {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:29,232 INFO L273 TraceCheckUtils]: 46: Hoare triple {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:29,233 INFO L273 TraceCheckUtils]: 47: Hoare triple {35481#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {35482#(= |ssl3_connect_#t~mem24| 4400)} is VALID [2018-11-23 13:03:29,233 INFO L273 TraceCheckUtils]: 48: Hoare triple {35482#(= |ssl3_connect_#t~mem24| 4400)} assume 4096 == #t~mem24;havoc #t~mem24; {35480#false} is VALID [2018-11-23 13:03:29,234 INFO L273 TraceCheckUtils]: 49: Hoare triple {35480#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 13:03:29,234 INFO L273 TraceCheckUtils]: 50: Hoare triple {35480#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {35480#false} is VALID [2018-11-23 13:03:29,234 INFO L273 TraceCheckUtils]: 51: Hoare triple {35480#false} call #t~mem57 := read~int(~s.base, ~s.offset, 4); {35480#false} is VALID [2018-11-23 13:03:29,234 INFO L273 TraceCheckUtils]: 52: Hoare triple {35480#false} assume !(768 != ~bitwiseAnd(#t~mem57, 65280));havoc #t~mem57;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 13:03:29,234 INFO L273 TraceCheckUtils]: 53: Hoare triple {35480#false} assume !(0 == (#t~mem58.base + #t~mem58.offset) % 4294967296);havoc #t~mem58.base, #t~mem58.offset; {35480#false} is VALID [2018-11-23 13:03:29,235 INFO L273 TraceCheckUtils]: 54: Hoare triple {35480#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {35480#false} is VALID [2018-11-23 13:03:29,235 INFO L273 TraceCheckUtils]: 55: Hoare triple {35480#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {35480#false} is VALID [2018-11-23 13:03:29,235 INFO L273 TraceCheckUtils]: 56: Hoare triple {35480#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem63 := read~int(#t~mem62.base, 60 + #t~mem62.offset, 4);call write~int(1 + #t~mem63, #t~mem62.base, 60 + #t~mem62.offset, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, 64 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 13:03:29,235 INFO L273 TraceCheckUtils]: 57: Hoare triple {35480#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {35480#false} is VALID [2018-11-23 13:03:29,236 INFO L273 TraceCheckUtils]: 58: Hoare triple {35480#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {35480#false} is VALID [2018-11-23 13:03:29,236 INFO L273 TraceCheckUtils]: 59: Hoare triple {35480#false} ~skip~0 := 0; {35480#false} is VALID [2018-11-23 13:03:29,236 INFO L273 TraceCheckUtils]: 60: Hoare triple {35480#false} assume !false; {35480#false} is VALID [2018-11-23 13:03:29,236 INFO L273 TraceCheckUtils]: 61: Hoare triple {35480#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 13:03:29,236 INFO L273 TraceCheckUtils]: 62: Hoare triple {35480#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 13:03:29,237 INFO L273 TraceCheckUtils]: 63: Hoare triple {35480#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 13:03:29,237 INFO L273 TraceCheckUtils]: 64: Hoare triple {35480#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 13:03:29,237 INFO L273 TraceCheckUtils]: 65: Hoare triple {35480#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 13:03:29,237 INFO L273 TraceCheckUtils]: 66: Hoare triple {35480#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 13:03:29,237 INFO L273 TraceCheckUtils]: 67: Hoare triple {35480#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 13:03:29,238 INFO L273 TraceCheckUtils]: 68: Hoare triple {35480#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 13:03:29,238 INFO L273 TraceCheckUtils]: 69: Hoare triple {35480#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 13:03:29,238 INFO L273 TraceCheckUtils]: 70: Hoare triple {35480#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 13:03:29,238 INFO L273 TraceCheckUtils]: 71: Hoare triple {35480#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 13:03:29,238 INFO L273 TraceCheckUtils]: 72: Hoare triple {35480#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 13:03:29,238 INFO L273 TraceCheckUtils]: 73: Hoare triple {35480#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 13:03:29,238 INFO L273 TraceCheckUtils]: 74: Hoare triple {35480#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {35480#false} is VALID [2018-11-23 13:03:29,238 INFO L273 TraceCheckUtils]: 75: Hoare triple {35480#false} assume 4432 == #t~mem35;havoc #t~mem35; {35480#false} is VALID [2018-11-23 13:03:29,238 INFO L273 TraceCheckUtils]: 76: Hoare triple {35480#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {35480#false} is VALID [2018-11-23 13:03:29,239 INFO L273 TraceCheckUtils]: 77: Hoare triple {35480#false} assume 5 == ~blastFlag~0; {35480#false} is VALID [2018-11-23 13:03:29,239 INFO L273 TraceCheckUtils]: 78: Hoare triple {35480#false} assume !false; {35480#false} is VALID [2018-11-23 13:03:29,243 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 13:03:29,243 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:03:29,243 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:03:29,243 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 79 [2018-11-23 13:03:29,244 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:03:29,244 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:03:29,319 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 72 edges. 72 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:29,319 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:03:29,319 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:03:29,319 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:03:29,320 INFO L87 Difference]: Start difference. First operand 421 states and 620 transitions. Second operand 4 states. [2018-11-23 13:03:30,445 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:30,446 INFO L93 Difference]: Finished difference Result 871 states and 1276 transitions. [2018-11-23 13:03:30,446 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:03:30,446 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 79 [2018-11-23 13:03:30,446 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:03:30,446 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:30,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 397 transitions. [2018-11-23 13:03:30,448 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:30,450 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 397 transitions. [2018-11-23 13:03:30,450 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 397 transitions. [2018-11-23 13:03:30,829 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 397 edges. 397 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:30,842 INFO L225 Difference]: With dead ends: 871 [2018-11-23 13:03:30,842 INFO L226 Difference]: Without dead ends: 463 [2018-11-23 13:03:30,843 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:03:30,844 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 463 states. [2018-11-23 13:03:30,960 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 463 to 421. [2018-11-23 13:03:30,961 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:03:30,961 INFO L82 GeneralOperation]: Start isEquivalent. First operand 463 states. Second operand 421 states. [2018-11-23 13:03:30,961 INFO L74 IsIncluded]: Start isIncluded. First operand 463 states. Second operand 421 states. [2018-11-23 13:03:30,961 INFO L87 Difference]: Start difference. First operand 463 states. Second operand 421 states. [2018-11-23 13:03:30,973 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:30,973 INFO L93 Difference]: Finished difference Result 463 states and 671 transitions. [2018-11-23 13:03:30,973 INFO L276 IsEmpty]: Start isEmpty. Operand 463 states and 671 transitions. [2018-11-23 13:03:30,974 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:30,974 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:30,974 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 463 states. [2018-11-23 13:03:30,974 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 463 states. [2018-11-23 13:03:30,984 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:30,984 INFO L93 Difference]: Finished difference Result 463 states and 671 transitions. [2018-11-23 13:03:30,984 INFO L276 IsEmpty]: Start isEmpty. Operand 463 states and 671 transitions. [2018-11-23 13:03:30,985 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:30,985 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:30,985 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:03:30,985 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:03:30,985 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 13:03:30,992 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 618 transitions. [2018-11-23 13:03:30,993 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 618 transitions. Word has length 79 [2018-11-23 13:03:30,993 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:03:30,993 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 618 transitions. [2018-11-23 13:03:30,993 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:03:30,993 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 618 transitions. [2018-11-23 13:03:30,993 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2018-11-23 13:03:30,994 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:03:30,994 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:03:30,994 INFO L423 AbstractCegarLoop]: === Iteration 17 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:03:30,994 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:03:30,994 INFO L82 PathProgramCache]: Analyzing trace with hash -605930370, now seen corresponding path program 1 times [2018-11-23 13:03:30,994 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:03:30,994 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:03:30,995 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:30,995 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:03:30,995 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:31,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:03:31,344 INFO L256 TraceCheckUtils]: 0: Hoare triple {37884#true} call ULTIMATE.init(); {37884#true} is VALID [2018-11-23 13:03:31,344 INFO L273 TraceCheckUtils]: 1: Hoare triple {37884#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {37884#true} is VALID [2018-11-23 13:03:31,345 INFO L273 TraceCheckUtils]: 2: Hoare triple {37884#true} assume true; {37884#true} is VALID [2018-11-23 13:03:31,345 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {37884#true} {37884#true} #542#return; {37884#true} is VALID [2018-11-23 13:03:31,345 INFO L256 TraceCheckUtils]: 4: Hoare triple {37884#true} call #t~ret138 := main(); {37884#true} is VALID [2018-11-23 13:03:31,345 INFO L273 TraceCheckUtils]: 5: Hoare triple {37884#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {37884#true} is VALID [2018-11-23 13:03:31,346 INFO L256 TraceCheckUtils]: 6: Hoare triple {37884#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {37884#true} is VALID [2018-11-23 13:03:31,346 INFO L273 TraceCheckUtils]: 7: Hoare triple {37884#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 13:03:31,346 INFO L273 TraceCheckUtils]: 8: Hoare triple {37884#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {37884#true} is VALID [2018-11-23 13:03:31,346 INFO L273 TraceCheckUtils]: 9: Hoare triple {37884#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {37884#true} is VALID [2018-11-23 13:03:31,346 INFO L273 TraceCheckUtils]: 10: Hoare triple {37884#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {37884#true} is VALID [2018-11-23 13:03:31,347 INFO L273 TraceCheckUtils]: 11: Hoare triple {37884#true} assume !false; {37884#true} is VALID [2018-11-23 13:03:31,347 INFO L273 TraceCheckUtils]: 12: Hoare triple {37884#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 13:03:31,347 INFO L273 TraceCheckUtils]: 13: Hoare triple {37884#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 13:03:31,347 INFO L273 TraceCheckUtils]: 14: Hoare triple {37884#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 13:03:31,347 INFO L273 TraceCheckUtils]: 15: Hoare triple {37884#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 13:03:31,347 INFO L273 TraceCheckUtils]: 16: Hoare triple {37884#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 13:03:31,347 INFO L273 TraceCheckUtils]: 17: Hoare triple {37884#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 13:03:31,347 INFO L273 TraceCheckUtils]: 18: Hoare triple {37884#true} assume 4368 == #t~mem27;havoc #t~mem27; {37884#true} is VALID [2018-11-23 13:03:31,348 INFO L273 TraceCheckUtils]: 19: Hoare triple {37884#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {37884#true} is VALID [2018-11-23 13:03:31,348 INFO L273 TraceCheckUtils]: 20: Hoare triple {37884#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {37884#true} is VALID [2018-11-23 13:03:31,348 INFO L273 TraceCheckUtils]: 21: Hoare triple {37884#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 13:03:31,348 INFO L273 TraceCheckUtils]: 22: Hoare triple {37884#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {37884#true} is VALID [2018-11-23 13:03:31,348 INFO L273 TraceCheckUtils]: 23: Hoare triple {37884#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {37884#true} is VALID [2018-11-23 13:03:31,348 INFO L273 TraceCheckUtils]: 24: Hoare triple {37884#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {37884#true} is VALID [2018-11-23 13:03:31,348 INFO L273 TraceCheckUtils]: 25: Hoare triple {37884#true} ~skip~0 := 0; {37884#true} is VALID [2018-11-23 13:03:31,348 INFO L273 TraceCheckUtils]: 26: Hoare triple {37884#true} assume !false; {37884#true} is VALID [2018-11-23 13:03:31,348 INFO L273 TraceCheckUtils]: 27: Hoare triple {37884#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 13:03:31,349 INFO L273 TraceCheckUtils]: 28: Hoare triple {37884#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 13:03:31,349 INFO L273 TraceCheckUtils]: 29: Hoare triple {37884#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 13:03:31,349 INFO L273 TraceCheckUtils]: 30: Hoare triple {37884#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 13:03:31,349 INFO L273 TraceCheckUtils]: 31: Hoare triple {37884#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 13:03:31,349 INFO L273 TraceCheckUtils]: 32: Hoare triple {37884#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 13:03:31,349 INFO L273 TraceCheckUtils]: 33: Hoare triple {37884#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 13:03:31,349 INFO L273 TraceCheckUtils]: 34: Hoare triple {37884#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 13:03:31,349 INFO L273 TraceCheckUtils]: 35: Hoare triple {37884#true} assume 4384 == #t~mem29;havoc #t~mem29; {37884#true} is VALID [2018-11-23 13:03:31,350 INFO L273 TraceCheckUtils]: 36: Hoare triple {37884#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {37884#true} is VALID [2018-11-23 13:03:31,350 INFO L273 TraceCheckUtils]: 37: Hoare triple {37884#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {37884#true} is VALID [2018-11-23 13:03:31,350 INFO L273 TraceCheckUtils]: 38: Hoare triple {37884#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {37884#true} is VALID [2018-11-23 13:03:31,351 INFO L273 TraceCheckUtils]: 39: Hoare triple {37884#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:31,351 INFO L273 TraceCheckUtils]: 40: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:31,352 INFO L273 TraceCheckUtils]: 41: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:31,352 INFO L273 TraceCheckUtils]: 42: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:31,352 INFO L273 TraceCheckUtils]: 43: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} ~skip~0 := 0; {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:31,353 INFO L273 TraceCheckUtils]: 44: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !false; {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:31,353 INFO L273 TraceCheckUtils]: 45: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:31,353 INFO L273 TraceCheckUtils]: 46: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:31,354 INFO L273 TraceCheckUtils]: 47: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:31,354 INFO L273 TraceCheckUtils]: 48: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:31,355 INFO L273 TraceCheckUtils]: 49: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:31,355 INFO L273 TraceCheckUtils]: 50: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:31,356 INFO L273 TraceCheckUtils]: 51: Hoare triple {37886#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {37887#(= |ssl3_connect_#t~mem28| 4400)} is VALID [2018-11-23 13:03:31,357 INFO L273 TraceCheckUtils]: 52: Hoare triple {37887#(= |ssl3_connect_#t~mem28| 4400)} assume 4369 == #t~mem28;havoc #t~mem28; {37885#false} is VALID [2018-11-23 13:03:31,357 INFO L273 TraceCheckUtils]: 53: Hoare triple {37885#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {37885#false} is VALID [2018-11-23 13:03:31,357 INFO L273 TraceCheckUtils]: 54: Hoare triple {37885#false} assume !(0 == ~blastFlag~0); {37885#false} is VALID [2018-11-23 13:03:31,358 INFO L273 TraceCheckUtils]: 55: Hoare triple {37885#false} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 13:03:31,358 INFO L273 TraceCheckUtils]: 56: Hoare triple {37885#false} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {37885#false} is VALID [2018-11-23 13:03:31,358 INFO L273 TraceCheckUtils]: 57: Hoare triple {37885#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {37885#false} is VALID [2018-11-23 13:03:31,358 INFO L273 TraceCheckUtils]: 58: Hoare triple {37885#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {37885#false} is VALID [2018-11-23 13:03:31,358 INFO L273 TraceCheckUtils]: 59: Hoare triple {37885#false} ~skip~0 := 0; {37885#false} is VALID [2018-11-23 13:03:31,359 INFO L273 TraceCheckUtils]: 60: Hoare triple {37885#false} assume !false; {37885#false} is VALID [2018-11-23 13:03:31,359 INFO L273 TraceCheckUtils]: 61: Hoare triple {37885#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 13:03:31,359 INFO L273 TraceCheckUtils]: 62: Hoare triple {37885#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 13:03:31,359 INFO L273 TraceCheckUtils]: 63: Hoare triple {37885#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 13:03:31,359 INFO L273 TraceCheckUtils]: 64: Hoare triple {37885#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 13:03:31,360 INFO L273 TraceCheckUtils]: 65: Hoare triple {37885#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 13:03:31,360 INFO L273 TraceCheckUtils]: 66: Hoare triple {37885#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 13:03:31,360 INFO L273 TraceCheckUtils]: 67: Hoare triple {37885#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 13:03:31,360 INFO L273 TraceCheckUtils]: 68: Hoare triple {37885#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 13:03:31,360 INFO L273 TraceCheckUtils]: 69: Hoare triple {37885#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 13:03:31,361 INFO L273 TraceCheckUtils]: 70: Hoare triple {37885#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 13:03:31,361 INFO L273 TraceCheckUtils]: 71: Hoare triple {37885#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 13:03:31,361 INFO L273 TraceCheckUtils]: 72: Hoare triple {37885#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 13:03:31,361 INFO L273 TraceCheckUtils]: 73: Hoare triple {37885#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 13:03:31,361 INFO L273 TraceCheckUtils]: 74: Hoare triple {37885#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {37885#false} is VALID [2018-11-23 13:03:31,361 INFO L273 TraceCheckUtils]: 75: Hoare triple {37885#false} assume 4432 == #t~mem35;havoc #t~mem35; {37885#false} is VALID [2018-11-23 13:03:31,361 INFO L273 TraceCheckUtils]: 76: Hoare triple {37885#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {37885#false} is VALID [2018-11-23 13:03:31,361 INFO L273 TraceCheckUtils]: 77: Hoare triple {37885#false} assume 5 == ~blastFlag~0; {37885#false} is VALID [2018-11-23 13:03:31,362 INFO L273 TraceCheckUtils]: 78: Hoare triple {37885#false} assume !false; {37885#false} is VALID [2018-11-23 13:03:31,367 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 57 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 13:03:31,367 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:03:31,367 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:03:31,367 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 79 [2018-11-23 13:03:31,367 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:03:31,368 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:03:31,442 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 72 edges. 72 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:31,442 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:03:31,443 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:03:31,443 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:03:31,443 INFO L87 Difference]: Start difference. First operand 421 states and 618 transitions. Second operand 4 states. [2018-11-23 13:03:32,602 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:32,603 INFO L93 Difference]: Finished difference Result 716 states and 1046 transitions. [2018-11-23 13:03:32,603 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:03:32,603 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 79 [2018-11-23 13:03:32,603 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:03:32,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:32,605 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 392 transitions. [2018-11-23 13:03:32,605 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:32,607 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 392 transitions. [2018-11-23 13:03:32,607 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 392 transitions. [2018-11-23 13:03:32,994 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 392 edges. 392 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:33,006 INFO L225 Difference]: With dead ends: 716 [2018-11-23 13:03:33,006 INFO L226 Difference]: Without dead ends: 457 [2018-11-23 13:03:33,007 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:03:33,008 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 457 states. [2018-11-23 13:03:33,139 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 457 to 421. [2018-11-23 13:03:33,140 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:03:33,140 INFO L82 GeneralOperation]: Start isEquivalent. First operand 457 states. Second operand 421 states. [2018-11-23 13:03:33,140 INFO L74 IsIncluded]: Start isIncluded. First operand 457 states. Second operand 421 states. [2018-11-23 13:03:33,140 INFO L87 Difference]: Start difference. First operand 457 states. Second operand 421 states. [2018-11-23 13:03:33,152 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:33,152 INFO L93 Difference]: Finished difference Result 457 states and 662 transitions. [2018-11-23 13:03:33,152 INFO L276 IsEmpty]: Start isEmpty. Operand 457 states and 662 transitions. [2018-11-23 13:03:33,153 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:33,153 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:33,153 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 457 states. [2018-11-23 13:03:33,153 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 457 states. [2018-11-23 13:03:33,163 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:33,163 INFO L93 Difference]: Finished difference Result 457 states and 662 transitions. [2018-11-23 13:03:33,163 INFO L276 IsEmpty]: Start isEmpty. Operand 457 states and 662 transitions. [2018-11-23 13:03:33,163 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:33,163 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:33,164 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:03:33,164 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:03:33,164 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 13:03:33,171 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 616 transitions. [2018-11-23 13:03:33,171 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 616 transitions. Word has length 79 [2018-11-23 13:03:33,172 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:03:33,172 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 616 transitions. [2018-11-23 13:03:33,172 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:03:33,172 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 616 transitions. [2018-11-23 13:03:33,172 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2018-11-23 13:03:33,172 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:03:33,173 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:03:33,173 INFO L423 AbstractCegarLoop]: === Iteration 18 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:03:33,173 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:03:33,173 INFO L82 PathProgramCache]: Analyzing trace with hash -1753186171, now seen corresponding path program 1 times [2018-11-23 13:03:33,173 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:03:33,173 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:03:33,174 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:33,174 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:03:33,174 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:33,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:03:33,336 INFO L256 TraceCheckUtils]: 0: Hoare triple {40103#true} call ULTIMATE.init(); {40103#true} is VALID [2018-11-23 13:03:33,337 INFO L273 TraceCheckUtils]: 1: Hoare triple {40103#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {40103#true} is VALID [2018-11-23 13:03:33,337 INFO L273 TraceCheckUtils]: 2: Hoare triple {40103#true} assume true; {40103#true} is VALID [2018-11-23 13:03:33,337 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {40103#true} {40103#true} #542#return; {40103#true} is VALID [2018-11-23 13:03:33,337 INFO L256 TraceCheckUtils]: 4: Hoare triple {40103#true} call #t~ret138 := main(); {40103#true} is VALID [2018-11-23 13:03:33,337 INFO L273 TraceCheckUtils]: 5: Hoare triple {40103#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {40103#true} is VALID [2018-11-23 13:03:33,338 INFO L256 TraceCheckUtils]: 6: Hoare triple {40103#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {40103#true} is VALID [2018-11-23 13:03:33,338 INFO L273 TraceCheckUtils]: 7: Hoare triple {40103#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 13:03:33,338 INFO L273 TraceCheckUtils]: 8: Hoare triple {40103#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {40103#true} is VALID [2018-11-23 13:03:33,338 INFO L273 TraceCheckUtils]: 9: Hoare triple {40103#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {40103#true} is VALID [2018-11-23 13:03:33,339 INFO L273 TraceCheckUtils]: 10: Hoare triple {40103#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {40103#true} is VALID [2018-11-23 13:03:33,339 INFO L273 TraceCheckUtils]: 11: Hoare triple {40103#true} assume !false; {40103#true} is VALID [2018-11-23 13:03:33,339 INFO L273 TraceCheckUtils]: 12: Hoare triple {40103#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 13:03:33,339 INFO L273 TraceCheckUtils]: 13: Hoare triple {40103#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 13:03:33,339 INFO L273 TraceCheckUtils]: 14: Hoare triple {40103#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 13:03:33,339 INFO L273 TraceCheckUtils]: 15: Hoare triple {40103#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 13:03:33,340 INFO L273 TraceCheckUtils]: 16: Hoare triple {40103#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 13:03:33,340 INFO L273 TraceCheckUtils]: 17: Hoare triple {40103#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 13:03:33,340 INFO L273 TraceCheckUtils]: 18: Hoare triple {40103#true} assume 4368 == #t~mem27;havoc #t~mem27; {40103#true} is VALID [2018-11-23 13:03:33,340 INFO L273 TraceCheckUtils]: 19: Hoare triple {40103#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {40103#true} is VALID [2018-11-23 13:03:33,340 INFO L273 TraceCheckUtils]: 20: Hoare triple {40103#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {40103#true} is VALID [2018-11-23 13:03:33,340 INFO L273 TraceCheckUtils]: 21: Hoare triple {40103#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 13:03:33,340 INFO L273 TraceCheckUtils]: 22: Hoare triple {40103#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {40103#true} is VALID [2018-11-23 13:03:33,340 INFO L273 TraceCheckUtils]: 23: Hoare triple {40103#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {40103#true} is VALID [2018-11-23 13:03:33,341 INFO L273 TraceCheckUtils]: 24: Hoare triple {40103#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {40103#true} is VALID [2018-11-23 13:03:33,341 INFO L273 TraceCheckUtils]: 25: Hoare triple {40103#true} ~skip~0 := 0; {40103#true} is VALID [2018-11-23 13:03:33,341 INFO L273 TraceCheckUtils]: 26: Hoare triple {40103#true} assume !false; {40103#true} is VALID [2018-11-23 13:03:33,341 INFO L273 TraceCheckUtils]: 27: Hoare triple {40103#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 13:03:33,341 INFO L273 TraceCheckUtils]: 28: Hoare triple {40103#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 13:03:33,341 INFO L273 TraceCheckUtils]: 29: Hoare triple {40103#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 13:03:33,341 INFO L273 TraceCheckUtils]: 30: Hoare triple {40103#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 13:03:33,341 INFO L273 TraceCheckUtils]: 31: Hoare triple {40103#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 13:03:33,341 INFO L273 TraceCheckUtils]: 32: Hoare triple {40103#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 13:03:33,342 INFO L273 TraceCheckUtils]: 33: Hoare triple {40103#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 13:03:33,342 INFO L273 TraceCheckUtils]: 34: Hoare triple {40103#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 13:03:33,342 INFO L273 TraceCheckUtils]: 35: Hoare triple {40103#true} assume 4384 == #t~mem29;havoc #t~mem29; {40103#true} is VALID [2018-11-23 13:03:33,342 INFO L273 TraceCheckUtils]: 36: Hoare triple {40103#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {40103#true} is VALID [2018-11-23 13:03:33,342 INFO L273 TraceCheckUtils]: 37: Hoare triple {40103#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {40103#true} is VALID [2018-11-23 13:03:33,342 INFO L273 TraceCheckUtils]: 38: Hoare triple {40103#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {40103#true} is VALID [2018-11-23 13:03:33,343 INFO L273 TraceCheckUtils]: 39: Hoare triple {40103#true} assume 0 != #t~mem68;havoc #t~mem68;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:33,344 INFO L273 TraceCheckUtils]: 40: Hoare triple {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:33,344 INFO L273 TraceCheckUtils]: 41: Hoare triple {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:33,345 INFO L273 TraceCheckUtils]: 42: Hoare triple {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:33,345 INFO L273 TraceCheckUtils]: 43: Hoare triple {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} ~skip~0 := 0; {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:33,346 INFO L273 TraceCheckUtils]: 44: Hoare triple {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !false; {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:33,346 INFO L273 TraceCheckUtils]: 45: Hoare triple {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:33,347 INFO L273 TraceCheckUtils]: 46: Hoare triple {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:33,347 INFO L273 TraceCheckUtils]: 47: Hoare triple {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:33,348 INFO L273 TraceCheckUtils]: 48: Hoare triple {40105#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {40106#(= |ssl3_connect_#t~mem25| 4560)} is VALID [2018-11-23 13:03:33,349 INFO L273 TraceCheckUtils]: 49: Hoare triple {40106#(= |ssl3_connect_#t~mem25| 4560)} assume 20480 == #t~mem25;havoc #t~mem25; {40104#false} is VALID [2018-11-23 13:03:33,349 INFO L273 TraceCheckUtils]: 50: Hoare triple {40104#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 13:03:33,349 INFO L273 TraceCheckUtils]: 51: Hoare triple {40104#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {40104#false} is VALID [2018-11-23 13:03:33,349 INFO L273 TraceCheckUtils]: 52: Hoare triple {40104#false} call #t~mem57 := read~int(~s.base, ~s.offset, 4); {40104#false} is VALID [2018-11-23 13:03:33,349 INFO L273 TraceCheckUtils]: 53: Hoare triple {40104#false} assume !(768 != ~bitwiseAnd(#t~mem57, 65280));havoc #t~mem57;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 13:03:33,350 INFO L273 TraceCheckUtils]: 54: Hoare triple {40104#false} assume !(0 == (#t~mem58.base + #t~mem58.offset) % 4294967296);havoc #t~mem58.base, #t~mem58.offset; {40104#false} is VALID [2018-11-23 13:03:33,350 INFO L273 TraceCheckUtils]: 55: Hoare triple {40104#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {40104#false} is VALID [2018-11-23 13:03:33,350 INFO L273 TraceCheckUtils]: 56: Hoare triple {40104#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {40104#false} is VALID [2018-11-23 13:03:33,350 INFO L273 TraceCheckUtils]: 57: Hoare triple {40104#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem63 := read~int(#t~mem62.base, 60 + #t~mem62.offset, 4);call write~int(1 + #t~mem63, #t~mem62.base, 60 + #t~mem62.offset, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, 64 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 13:03:33,351 INFO L273 TraceCheckUtils]: 58: Hoare triple {40104#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {40104#false} is VALID [2018-11-23 13:03:33,351 INFO L273 TraceCheckUtils]: 59: Hoare triple {40104#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {40104#false} is VALID [2018-11-23 13:03:33,351 INFO L273 TraceCheckUtils]: 60: Hoare triple {40104#false} ~skip~0 := 0; {40104#false} is VALID [2018-11-23 13:03:33,351 INFO L273 TraceCheckUtils]: 61: Hoare triple {40104#false} assume !false; {40104#false} is VALID [2018-11-23 13:03:33,351 INFO L273 TraceCheckUtils]: 62: Hoare triple {40104#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 13:03:33,352 INFO L273 TraceCheckUtils]: 63: Hoare triple {40104#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 13:03:33,352 INFO L273 TraceCheckUtils]: 64: Hoare triple {40104#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 13:03:33,352 INFO L273 TraceCheckUtils]: 65: Hoare triple {40104#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 13:03:33,352 INFO L273 TraceCheckUtils]: 66: Hoare triple {40104#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 13:03:33,352 INFO L273 TraceCheckUtils]: 67: Hoare triple {40104#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 13:03:33,353 INFO L273 TraceCheckUtils]: 68: Hoare triple {40104#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 13:03:33,353 INFO L273 TraceCheckUtils]: 69: Hoare triple {40104#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 13:03:33,353 INFO L273 TraceCheckUtils]: 70: Hoare triple {40104#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 13:03:33,353 INFO L273 TraceCheckUtils]: 71: Hoare triple {40104#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 13:03:33,353 INFO L273 TraceCheckUtils]: 72: Hoare triple {40104#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 13:03:33,353 INFO L273 TraceCheckUtils]: 73: Hoare triple {40104#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 13:03:33,354 INFO L273 TraceCheckUtils]: 74: Hoare triple {40104#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 13:03:33,354 INFO L273 TraceCheckUtils]: 75: Hoare triple {40104#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {40104#false} is VALID [2018-11-23 13:03:33,354 INFO L273 TraceCheckUtils]: 76: Hoare triple {40104#false} assume 4432 == #t~mem35;havoc #t~mem35; {40104#false} is VALID [2018-11-23 13:03:33,354 INFO L273 TraceCheckUtils]: 77: Hoare triple {40104#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {40104#false} is VALID [2018-11-23 13:03:33,354 INFO L273 TraceCheckUtils]: 78: Hoare triple {40104#false} assume 5 == ~blastFlag~0; {40104#false} is VALID [2018-11-23 13:03:33,354 INFO L273 TraceCheckUtils]: 79: Hoare triple {40104#false} assume !false; {40104#false} is VALID [2018-11-23 13:03:33,358 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 45 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 13:03:33,358 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:03:33,359 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:03:33,359 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 80 [2018-11-23 13:03:33,359 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:03:33,359 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:03:33,429 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 73 edges. 73 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:33,429 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:03:33,430 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:03:33,430 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:03:33,430 INFO L87 Difference]: Start difference. First operand 421 states and 616 transitions. Second operand 4 states. [2018-11-23 13:03:34,961 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:34,961 INFO L93 Difference]: Finished difference Result 937 states and 1368 transitions. [2018-11-23 13:03:34,961 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:03:34,961 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 80 [2018-11-23 13:03:34,961 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:03:34,961 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:34,963 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 456 transitions. [2018-11-23 13:03:34,963 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:34,965 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 456 transitions. [2018-11-23 13:03:34,965 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 456 transitions. [2018-11-23 13:03:35,441 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 456 edges. 456 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:35,457 INFO L225 Difference]: With dead ends: 937 [2018-11-23 13:03:35,457 INFO L226 Difference]: Without dead ends: 529 [2018-11-23 13:03:35,458 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:03:35,459 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 529 states. [2018-11-23 13:03:35,572 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 529 to 421. [2018-11-23 13:03:35,572 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:03:35,572 INFO L82 GeneralOperation]: Start isEquivalent. First operand 529 states. Second operand 421 states. [2018-11-23 13:03:35,572 INFO L74 IsIncluded]: Start isIncluded. First operand 529 states. Second operand 421 states. [2018-11-23 13:03:35,572 INFO L87 Difference]: Start difference. First operand 529 states. Second operand 421 states. [2018-11-23 13:03:35,586 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:35,586 INFO L93 Difference]: Finished difference Result 529 states and 767 transitions. [2018-11-23 13:03:35,586 INFO L276 IsEmpty]: Start isEmpty. Operand 529 states and 767 transitions. [2018-11-23 13:03:35,587 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:35,587 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:35,587 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 529 states. [2018-11-23 13:03:35,587 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 529 states. [2018-11-23 13:03:35,597 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:35,598 INFO L93 Difference]: Finished difference Result 529 states and 767 transitions. [2018-11-23 13:03:35,598 INFO L276 IsEmpty]: Start isEmpty. Operand 529 states and 767 transitions. [2018-11-23 13:03:35,598 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:35,598 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:35,598 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:03:35,599 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:03:35,599 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 13:03:35,606 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 614 transitions. [2018-11-23 13:03:35,606 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 614 transitions. Word has length 80 [2018-11-23 13:03:35,606 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:03:35,606 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 614 transitions. [2018-11-23 13:03:35,607 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:03:35,607 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 614 transitions. [2018-11-23 13:03:35,607 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2018-11-23 13:03:35,608 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:03:35,608 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:03:35,608 INFO L423 AbstractCegarLoop]: === Iteration 19 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:03:35,608 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:03:35,608 INFO L82 PathProgramCache]: Analyzing trace with hash -1329539449, now seen corresponding path program 1 times [2018-11-23 13:03:35,608 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:03:35,608 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:03:35,609 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:35,609 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:03:35,609 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:35,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:03:35,889 WARN L180 SmtUtils]: Spent 100.00 ms on a formula simplification. DAG size of input: 16 DAG size of output: 13 [2018-11-23 13:03:36,103 INFO L256 TraceCheckUtils]: 0: Hoare triple {42720#true} call ULTIMATE.init(); {42720#true} is VALID [2018-11-23 13:03:36,103 INFO L273 TraceCheckUtils]: 1: Hoare triple {42720#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {42720#true} is VALID [2018-11-23 13:03:36,104 INFO L273 TraceCheckUtils]: 2: Hoare triple {42720#true} assume true; {42720#true} is VALID [2018-11-23 13:03:36,104 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {42720#true} {42720#true} #542#return; {42720#true} is VALID [2018-11-23 13:03:36,104 INFO L256 TraceCheckUtils]: 4: Hoare triple {42720#true} call #t~ret138 := main(); {42720#true} is VALID [2018-11-23 13:03:36,104 INFO L273 TraceCheckUtils]: 5: Hoare triple {42720#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {42720#true} is VALID [2018-11-23 13:03:36,104 INFO L256 TraceCheckUtils]: 6: Hoare triple {42720#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {42720#true} is VALID [2018-11-23 13:03:36,104 INFO L273 TraceCheckUtils]: 7: Hoare triple {42720#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 13:03:36,104 INFO L273 TraceCheckUtils]: 8: Hoare triple {42720#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {42720#true} is VALID [2018-11-23 13:03:36,104 INFO L273 TraceCheckUtils]: 9: Hoare triple {42720#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {42720#true} is VALID [2018-11-23 13:03:36,105 INFO L273 TraceCheckUtils]: 10: Hoare triple {42720#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {42720#true} is VALID [2018-11-23 13:03:36,105 INFO L273 TraceCheckUtils]: 11: Hoare triple {42720#true} assume !false; {42720#true} is VALID [2018-11-23 13:03:36,105 INFO L273 TraceCheckUtils]: 12: Hoare triple {42720#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 13:03:36,105 INFO L273 TraceCheckUtils]: 13: Hoare triple {42720#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 13:03:36,105 INFO L273 TraceCheckUtils]: 14: Hoare triple {42720#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 13:03:36,105 INFO L273 TraceCheckUtils]: 15: Hoare triple {42720#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 13:03:36,105 INFO L273 TraceCheckUtils]: 16: Hoare triple {42720#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 13:03:36,105 INFO L273 TraceCheckUtils]: 17: Hoare triple {42720#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 13:03:36,106 INFO L273 TraceCheckUtils]: 18: Hoare triple {42720#true} assume 4368 == #t~mem27;havoc #t~mem27; {42720#true} is VALID [2018-11-23 13:03:36,106 INFO L273 TraceCheckUtils]: 19: Hoare triple {42720#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {42720#true} is VALID [2018-11-23 13:03:36,106 INFO L273 TraceCheckUtils]: 20: Hoare triple {42720#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {42720#true} is VALID [2018-11-23 13:03:36,106 INFO L273 TraceCheckUtils]: 21: Hoare triple {42720#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 13:03:36,107 INFO L273 TraceCheckUtils]: 22: Hoare triple {42720#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {42720#true} is VALID [2018-11-23 13:03:36,107 INFO L273 TraceCheckUtils]: 23: Hoare triple {42720#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {42720#true} is VALID [2018-11-23 13:03:36,107 INFO L273 TraceCheckUtils]: 24: Hoare triple {42720#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {42720#true} is VALID [2018-11-23 13:03:36,107 INFO L273 TraceCheckUtils]: 25: Hoare triple {42720#true} ~skip~0 := 0; {42720#true} is VALID [2018-11-23 13:03:36,107 INFO L273 TraceCheckUtils]: 26: Hoare triple {42720#true} assume !false; {42720#true} is VALID [2018-11-23 13:03:36,107 INFO L273 TraceCheckUtils]: 27: Hoare triple {42720#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 13:03:36,107 INFO L273 TraceCheckUtils]: 28: Hoare triple {42720#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 13:03:36,108 INFO L273 TraceCheckUtils]: 29: Hoare triple {42720#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 13:03:36,108 INFO L273 TraceCheckUtils]: 30: Hoare triple {42720#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 13:03:36,108 INFO L273 TraceCheckUtils]: 31: Hoare triple {42720#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 13:03:36,108 INFO L273 TraceCheckUtils]: 32: Hoare triple {42720#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 13:03:36,108 INFO L273 TraceCheckUtils]: 33: Hoare triple {42720#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 13:03:36,108 INFO L273 TraceCheckUtils]: 34: Hoare triple {42720#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 13:03:36,108 INFO L273 TraceCheckUtils]: 35: Hoare triple {42720#true} assume 4384 == #t~mem29;havoc #t~mem29; {42720#true} is VALID [2018-11-23 13:03:36,109 INFO L273 TraceCheckUtils]: 36: Hoare triple {42720#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {42720#true} is VALID [2018-11-23 13:03:36,109 INFO L273 TraceCheckUtils]: 37: Hoare triple {42720#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {42720#true} is VALID [2018-11-23 13:03:36,109 INFO L273 TraceCheckUtils]: 38: Hoare triple {42720#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {42720#true} is VALID [2018-11-23 13:03:36,110 INFO L273 TraceCheckUtils]: 39: Hoare triple {42720#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:36,110 INFO L273 TraceCheckUtils]: 40: Hoare triple {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:36,111 INFO L273 TraceCheckUtils]: 41: Hoare triple {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:36,111 INFO L273 TraceCheckUtils]: 42: Hoare triple {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:36,111 INFO L273 TraceCheckUtils]: 43: Hoare triple {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} ~skip~0 := 0; {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:36,112 INFO L273 TraceCheckUtils]: 44: Hoare triple {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !false; {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:36,112 INFO L273 TraceCheckUtils]: 45: Hoare triple {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:36,113 INFO L273 TraceCheckUtils]: 46: Hoare triple {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:36,114 INFO L273 TraceCheckUtils]: 47: Hoare triple {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:36,114 INFO L273 TraceCheckUtils]: 48: Hoare triple {42722#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {42723#(= |ssl3_connect_#t~mem25| 4400)} is VALID [2018-11-23 13:03:36,115 INFO L273 TraceCheckUtils]: 49: Hoare triple {42723#(= |ssl3_connect_#t~mem25| 4400)} assume 20480 == #t~mem25;havoc #t~mem25; {42721#false} is VALID [2018-11-23 13:03:36,115 INFO L273 TraceCheckUtils]: 50: Hoare triple {42721#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 13:03:36,115 INFO L273 TraceCheckUtils]: 51: Hoare triple {42721#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {42721#false} is VALID [2018-11-23 13:03:36,116 INFO L273 TraceCheckUtils]: 52: Hoare triple {42721#false} call #t~mem57 := read~int(~s.base, ~s.offset, 4); {42721#false} is VALID [2018-11-23 13:03:36,116 INFO L273 TraceCheckUtils]: 53: Hoare triple {42721#false} assume !(768 != ~bitwiseAnd(#t~mem57, 65280));havoc #t~mem57;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 13:03:36,116 INFO L273 TraceCheckUtils]: 54: Hoare triple {42721#false} assume !(0 == (#t~mem58.base + #t~mem58.offset) % 4294967296);havoc #t~mem58.base, #t~mem58.offset; {42721#false} is VALID [2018-11-23 13:03:36,116 INFO L273 TraceCheckUtils]: 55: Hoare triple {42721#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {42721#false} is VALID [2018-11-23 13:03:36,116 INFO L273 TraceCheckUtils]: 56: Hoare triple {42721#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {42721#false} is VALID [2018-11-23 13:03:36,117 INFO L273 TraceCheckUtils]: 57: Hoare triple {42721#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem63 := read~int(#t~mem62.base, 60 + #t~mem62.offset, 4);call write~int(1 + #t~mem63, #t~mem62.base, 60 + #t~mem62.offset, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, 64 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 13:03:36,117 INFO L273 TraceCheckUtils]: 58: Hoare triple {42721#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {42721#false} is VALID [2018-11-23 13:03:36,117 INFO L273 TraceCheckUtils]: 59: Hoare triple {42721#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {42721#false} is VALID [2018-11-23 13:03:36,117 INFO L273 TraceCheckUtils]: 60: Hoare triple {42721#false} ~skip~0 := 0; {42721#false} is VALID [2018-11-23 13:03:36,117 INFO L273 TraceCheckUtils]: 61: Hoare triple {42721#false} assume !false; {42721#false} is VALID [2018-11-23 13:03:36,118 INFO L273 TraceCheckUtils]: 62: Hoare triple {42721#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 13:03:36,118 INFO L273 TraceCheckUtils]: 63: Hoare triple {42721#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 13:03:36,118 INFO L273 TraceCheckUtils]: 64: Hoare triple {42721#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 13:03:36,118 INFO L273 TraceCheckUtils]: 65: Hoare triple {42721#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 13:03:36,118 INFO L273 TraceCheckUtils]: 66: Hoare triple {42721#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 13:03:36,119 INFO L273 TraceCheckUtils]: 67: Hoare triple {42721#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 13:03:36,119 INFO L273 TraceCheckUtils]: 68: Hoare triple {42721#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 13:03:36,119 INFO L273 TraceCheckUtils]: 69: Hoare triple {42721#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 13:03:36,119 INFO L273 TraceCheckUtils]: 70: Hoare triple {42721#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 13:03:36,119 INFO L273 TraceCheckUtils]: 71: Hoare triple {42721#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 13:03:36,119 INFO L273 TraceCheckUtils]: 72: Hoare triple {42721#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 13:03:36,119 INFO L273 TraceCheckUtils]: 73: Hoare triple {42721#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 13:03:36,119 INFO L273 TraceCheckUtils]: 74: Hoare triple {42721#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 13:03:36,119 INFO L273 TraceCheckUtils]: 75: Hoare triple {42721#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {42721#false} is VALID [2018-11-23 13:03:36,120 INFO L273 TraceCheckUtils]: 76: Hoare triple {42721#false} assume 4432 == #t~mem35;havoc #t~mem35; {42721#false} is VALID [2018-11-23 13:03:36,120 INFO L273 TraceCheckUtils]: 77: Hoare triple {42721#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {42721#false} is VALID [2018-11-23 13:03:36,120 INFO L273 TraceCheckUtils]: 78: Hoare triple {42721#false} assume 5 == ~blastFlag~0; {42721#false} is VALID [2018-11-23 13:03:36,120 INFO L273 TraceCheckUtils]: 79: Hoare triple {42721#false} assume !false; {42721#false} is VALID [2018-11-23 13:03:36,124 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 45 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 13:03:36,124 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:03:36,124 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:03:36,125 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 80 [2018-11-23 13:03:36,125 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:03:36,125 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:03:36,201 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 73 edges. 73 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:36,201 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:03:36,202 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:03:36,202 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:03:36,202 INFO L87 Difference]: Start difference. First operand 421 states and 614 transitions. Second operand 4 states. [2018-11-23 13:03:37,348 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:37,348 INFO L93 Difference]: Finished difference Result 865 states and 1257 transitions. [2018-11-23 13:03:37,348 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:03:37,348 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 80 [2018-11-23 13:03:37,348 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:03:37,348 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:37,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 391 transitions. [2018-11-23 13:03:37,350 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:37,352 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 391 transitions. [2018-11-23 13:03:37,352 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 391 transitions. [2018-11-23 13:03:37,745 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 391 edges. 391 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:37,759 INFO L225 Difference]: With dead ends: 865 [2018-11-23 13:03:37,759 INFO L226 Difference]: Without dead ends: 457 [2018-11-23 13:03:37,760 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:03:37,760 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 457 states. [2018-11-23 13:03:38,183 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 457 to 421. [2018-11-23 13:03:38,183 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:03:38,183 INFO L82 GeneralOperation]: Start isEquivalent. First operand 457 states. Second operand 421 states. [2018-11-23 13:03:38,183 INFO L74 IsIncluded]: Start isIncluded. First operand 457 states. Second operand 421 states. [2018-11-23 13:03:38,184 INFO L87 Difference]: Start difference. First operand 457 states. Second operand 421 states. [2018-11-23 13:03:38,194 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:38,195 INFO L93 Difference]: Finished difference Result 457 states and 658 transitions. [2018-11-23 13:03:38,195 INFO L276 IsEmpty]: Start isEmpty. Operand 457 states and 658 transitions. [2018-11-23 13:03:38,195 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:38,195 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:38,195 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 457 states. [2018-11-23 13:03:38,196 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 457 states. [2018-11-23 13:03:38,207 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:38,207 INFO L93 Difference]: Finished difference Result 457 states and 658 transitions. [2018-11-23 13:03:38,207 INFO L276 IsEmpty]: Start isEmpty. Operand 457 states and 658 transitions. [2018-11-23 13:03:38,207 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:38,208 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:38,208 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:03:38,208 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:03:38,208 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 13:03:38,217 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 612 transitions. [2018-11-23 13:03:38,217 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 612 transitions. Word has length 80 [2018-11-23 13:03:38,217 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:03:38,217 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 612 transitions. [2018-11-23 13:03:38,218 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:03:38,218 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 612 transitions. [2018-11-23 13:03:38,218 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2018-11-23 13:03:38,218 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:03:38,218 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:03:38,219 INFO L423 AbstractCegarLoop]: === Iteration 20 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:03:38,219 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:03:38,219 INFO L82 PathProgramCache]: Analyzing trace with hash -1468975710, now seen corresponding path program 1 times [2018-11-23 13:03:38,219 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:03:38,219 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:03:38,220 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:38,220 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:03:38,220 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:38,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:03:38,858 WARN L180 SmtUtils]: Spent 100.00 ms on a formula simplification. DAG size of input: 6 DAG size of output: 3 [2018-11-23 13:03:38,966 INFO L256 TraceCheckUtils]: 0: Hoare triple {45105#true} call ULTIMATE.init(); {45105#true} is VALID [2018-11-23 13:03:38,966 INFO L273 TraceCheckUtils]: 1: Hoare triple {45105#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {45105#true} is VALID [2018-11-23 13:03:38,967 INFO L273 TraceCheckUtils]: 2: Hoare triple {45105#true} assume true; {45105#true} is VALID [2018-11-23 13:03:38,967 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {45105#true} {45105#true} #542#return; {45105#true} is VALID [2018-11-23 13:03:38,967 INFO L256 TraceCheckUtils]: 4: Hoare triple {45105#true} call #t~ret138 := main(); {45105#true} is VALID [2018-11-23 13:03:38,967 INFO L273 TraceCheckUtils]: 5: Hoare triple {45105#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {45105#true} is VALID [2018-11-23 13:03:38,967 INFO L256 TraceCheckUtils]: 6: Hoare triple {45105#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {45105#true} is VALID [2018-11-23 13:03:38,967 INFO L273 TraceCheckUtils]: 7: Hoare triple {45105#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 13:03:38,968 INFO L273 TraceCheckUtils]: 8: Hoare triple {45105#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {45105#true} is VALID [2018-11-23 13:03:38,968 INFO L273 TraceCheckUtils]: 9: Hoare triple {45105#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {45105#true} is VALID [2018-11-23 13:03:38,968 INFO L273 TraceCheckUtils]: 10: Hoare triple {45105#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {45105#true} is VALID [2018-11-23 13:03:38,968 INFO L273 TraceCheckUtils]: 11: Hoare triple {45105#true} assume !false; {45105#true} is VALID [2018-11-23 13:03:38,968 INFO L273 TraceCheckUtils]: 12: Hoare triple {45105#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 13:03:38,968 INFO L273 TraceCheckUtils]: 13: Hoare triple {45105#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 13:03:38,969 INFO L273 TraceCheckUtils]: 14: Hoare triple {45105#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 13:03:38,969 INFO L273 TraceCheckUtils]: 15: Hoare triple {45105#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 13:03:38,969 INFO L273 TraceCheckUtils]: 16: Hoare triple {45105#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 13:03:38,969 INFO L273 TraceCheckUtils]: 17: Hoare triple {45105#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 13:03:38,969 INFO L273 TraceCheckUtils]: 18: Hoare triple {45105#true} assume 4368 == #t~mem27;havoc #t~mem27; {45105#true} is VALID [2018-11-23 13:03:38,969 INFO L273 TraceCheckUtils]: 19: Hoare triple {45105#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {45105#true} is VALID [2018-11-23 13:03:38,970 INFO L273 TraceCheckUtils]: 20: Hoare triple {45105#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {45105#true} is VALID [2018-11-23 13:03:38,970 INFO L273 TraceCheckUtils]: 21: Hoare triple {45105#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 13:03:38,970 INFO L273 TraceCheckUtils]: 22: Hoare triple {45105#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {45105#true} is VALID [2018-11-23 13:03:38,970 INFO L273 TraceCheckUtils]: 23: Hoare triple {45105#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {45105#true} is VALID [2018-11-23 13:03:38,970 INFO L273 TraceCheckUtils]: 24: Hoare triple {45105#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {45105#true} is VALID [2018-11-23 13:03:38,970 INFO L273 TraceCheckUtils]: 25: Hoare triple {45105#true} ~skip~0 := 0; {45105#true} is VALID [2018-11-23 13:03:38,971 INFO L273 TraceCheckUtils]: 26: Hoare triple {45105#true} assume !false; {45105#true} is VALID [2018-11-23 13:03:38,971 INFO L273 TraceCheckUtils]: 27: Hoare triple {45105#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 13:03:38,971 INFO L273 TraceCheckUtils]: 28: Hoare triple {45105#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 13:03:38,971 INFO L273 TraceCheckUtils]: 29: Hoare triple {45105#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 13:03:38,971 INFO L273 TraceCheckUtils]: 30: Hoare triple {45105#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 13:03:38,971 INFO L273 TraceCheckUtils]: 31: Hoare triple {45105#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 13:03:38,972 INFO L273 TraceCheckUtils]: 32: Hoare triple {45105#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 13:03:38,972 INFO L273 TraceCheckUtils]: 33: Hoare triple {45105#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 13:03:38,972 INFO L273 TraceCheckUtils]: 34: Hoare triple {45105#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 13:03:38,972 INFO L273 TraceCheckUtils]: 35: Hoare triple {45105#true} assume 4384 == #t~mem29;havoc #t~mem29; {45105#true} is VALID [2018-11-23 13:03:38,972 INFO L273 TraceCheckUtils]: 36: Hoare triple {45105#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {45105#true} is VALID [2018-11-23 13:03:38,972 INFO L273 TraceCheckUtils]: 37: Hoare triple {45105#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {45105#true} is VALID [2018-11-23 13:03:38,973 INFO L273 TraceCheckUtils]: 38: Hoare triple {45105#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {45105#true} is VALID [2018-11-23 13:03:38,985 INFO L273 TraceCheckUtils]: 39: Hoare triple {45105#true} assume 0 != #t~mem68;havoc #t~mem68;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:38,997 INFO L273 TraceCheckUtils]: 40: Hoare triple {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:38,999 INFO L273 TraceCheckUtils]: 41: Hoare triple {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:39,000 INFO L273 TraceCheckUtils]: 42: Hoare triple {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:39,002 INFO L273 TraceCheckUtils]: 43: Hoare triple {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} ~skip~0 := 0; {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:39,002 INFO L273 TraceCheckUtils]: 44: Hoare triple {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !false; {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:39,004 INFO L273 TraceCheckUtils]: 45: Hoare triple {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:39,004 INFO L273 TraceCheckUtils]: 46: Hoare triple {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:39,006 INFO L273 TraceCheckUtils]: 47: Hoare triple {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:39,006 INFO L273 TraceCheckUtils]: 48: Hoare triple {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:39,008 INFO L273 TraceCheckUtils]: 49: Hoare triple {45107#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {45108#(= |ssl3_connect_#t~mem26| 4560)} is VALID [2018-11-23 13:03:39,008 INFO L273 TraceCheckUtils]: 50: Hoare triple {45108#(= |ssl3_connect_#t~mem26| 4560)} assume 4099 == #t~mem26;havoc #t~mem26; {45106#false} is VALID [2018-11-23 13:03:39,008 INFO L273 TraceCheckUtils]: 51: Hoare triple {45106#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 13:03:39,008 INFO L273 TraceCheckUtils]: 52: Hoare triple {45106#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {45106#false} is VALID [2018-11-23 13:03:39,008 INFO L273 TraceCheckUtils]: 53: Hoare triple {45106#false} call #t~mem57 := read~int(~s.base, ~s.offset, 4); {45106#false} is VALID [2018-11-23 13:03:39,009 INFO L273 TraceCheckUtils]: 54: Hoare triple {45106#false} assume !(768 != ~bitwiseAnd(#t~mem57, 65280));havoc #t~mem57;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 13:03:39,009 INFO L273 TraceCheckUtils]: 55: Hoare triple {45106#false} assume !(0 == (#t~mem58.base + #t~mem58.offset) % 4294967296);havoc #t~mem58.base, #t~mem58.offset; {45106#false} is VALID [2018-11-23 13:03:39,009 INFO L273 TraceCheckUtils]: 56: Hoare triple {45106#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {45106#false} is VALID [2018-11-23 13:03:39,009 INFO L273 TraceCheckUtils]: 57: Hoare triple {45106#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {45106#false} is VALID [2018-11-23 13:03:39,009 INFO L273 TraceCheckUtils]: 58: Hoare triple {45106#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem63 := read~int(#t~mem62.base, 60 + #t~mem62.offset, 4);call write~int(1 + #t~mem63, #t~mem62.base, 60 + #t~mem62.offset, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, 64 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 13:03:39,009 INFO L273 TraceCheckUtils]: 59: Hoare triple {45106#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {45106#false} is VALID [2018-11-23 13:03:39,009 INFO L273 TraceCheckUtils]: 60: Hoare triple {45106#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {45106#false} is VALID [2018-11-23 13:03:39,009 INFO L273 TraceCheckUtils]: 61: Hoare triple {45106#false} ~skip~0 := 0; {45106#false} is VALID [2018-11-23 13:03:39,009 INFO L273 TraceCheckUtils]: 62: Hoare triple {45106#false} assume !false; {45106#false} is VALID [2018-11-23 13:03:39,010 INFO L273 TraceCheckUtils]: 63: Hoare triple {45106#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 13:03:39,010 INFO L273 TraceCheckUtils]: 64: Hoare triple {45106#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 13:03:39,010 INFO L273 TraceCheckUtils]: 65: Hoare triple {45106#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 13:03:39,010 INFO L273 TraceCheckUtils]: 66: Hoare triple {45106#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 13:03:39,010 INFO L273 TraceCheckUtils]: 67: Hoare triple {45106#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 13:03:39,010 INFO L273 TraceCheckUtils]: 68: Hoare triple {45106#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 13:03:39,010 INFO L273 TraceCheckUtils]: 69: Hoare triple {45106#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 13:03:39,010 INFO L273 TraceCheckUtils]: 70: Hoare triple {45106#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 13:03:39,011 INFO L273 TraceCheckUtils]: 71: Hoare triple {45106#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 13:03:39,011 INFO L273 TraceCheckUtils]: 72: Hoare triple {45106#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 13:03:39,011 INFO L273 TraceCheckUtils]: 73: Hoare triple {45106#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 13:03:39,011 INFO L273 TraceCheckUtils]: 74: Hoare triple {45106#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 13:03:39,011 INFO L273 TraceCheckUtils]: 75: Hoare triple {45106#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 13:03:39,011 INFO L273 TraceCheckUtils]: 76: Hoare triple {45106#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {45106#false} is VALID [2018-11-23 13:03:39,011 INFO L273 TraceCheckUtils]: 77: Hoare triple {45106#false} assume 4432 == #t~mem35;havoc #t~mem35; {45106#false} is VALID [2018-11-23 13:03:39,011 INFO L273 TraceCheckUtils]: 78: Hoare triple {45106#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {45106#false} is VALID [2018-11-23 13:03:39,011 INFO L273 TraceCheckUtils]: 79: Hoare triple {45106#false} assume 5 == ~blastFlag~0; {45106#false} is VALID [2018-11-23 13:03:39,012 INFO L273 TraceCheckUtils]: 80: Hoare triple {45106#false} assume !false; {45106#false} is VALID [2018-11-23 13:03:39,016 INFO L134 CoverageAnalysis]: Checked inductivity of 56 backedges. 48 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 13:03:39,016 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:03:39,016 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:03:39,017 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 13:03:39,017 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:03:39,017 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:03:39,093 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:39,093 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:03:39,093 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:03:39,093 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:03:39,094 INFO L87 Difference]: Start difference. First operand 421 states and 612 transitions. Second operand 4 states. [2018-11-23 13:03:40,506 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:40,507 INFO L93 Difference]: Finished difference Result 919 states and 1338 transitions. [2018-11-23 13:03:40,507 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:03:40,507 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 13:03:40,507 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:03:40,507 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:40,509 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 444 transitions. [2018-11-23 13:03:40,509 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:40,511 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 444 transitions. [2018-11-23 13:03:40,511 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 444 transitions. [2018-11-23 13:03:41,005 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 444 edges. 444 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:41,021 INFO L225 Difference]: With dead ends: 919 [2018-11-23 13:03:41,021 INFO L226 Difference]: Without dead ends: 511 [2018-11-23 13:03:41,023 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:03:41,023 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 511 states. [2018-11-23 13:03:41,192 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 511 to 421. [2018-11-23 13:03:41,193 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:03:41,193 INFO L82 GeneralOperation]: Start isEquivalent. First operand 511 states. Second operand 421 states. [2018-11-23 13:03:41,193 INFO L74 IsIncluded]: Start isIncluded. First operand 511 states. Second operand 421 states. [2018-11-23 13:03:41,193 INFO L87 Difference]: Start difference. First operand 511 states. Second operand 421 states. [2018-11-23 13:03:41,206 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:41,207 INFO L93 Difference]: Finished difference Result 511 states and 741 transitions. [2018-11-23 13:03:41,207 INFO L276 IsEmpty]: Start isEmpty. Operand 511 states and 741 transitions. [2018-11-23 13:03:41,207 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:41,208 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:41,208 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 511 states. [2018-11-23 13:03:41,208 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 511 states. [2018-11-23 13:03:41,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:41,220 INFO L93 Difference]: Finished difference Result 511 states and 741 transitions. [2018-11-23 13:03:41,220 INFO L276 IsEmpty]: Start isEmpty. Operand 511 states and 741 transitions. [2018-11-23 13:03:41,221 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:41,221 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:41,221 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:03:41,221 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:03:41,221 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 13:03:41,233 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 610 transitions. [2018-11-23 13:03:41,234 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 610 transitions. Word has length 81 [2018-11-23 13:03:41,234 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:03:41,234 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 610 transitions. [2018-11-23 13:03:41,234 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:03:41,234 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 610 transitions. [2018-11-23 13:03:41,235 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2018-11-23 13:03:41,236 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:03:41,236 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:03:41,236 INFO L423 AbstractCegarLoop]: === Iteration 21 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:03:41,236 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:03:41,237 INFO L82 PathProgramCache]: Analyzing trace with hash 1134564595, now seen corresponding path program 1 times [2018-11-23 13:03:41,237 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:03:41,237 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:03:41,238 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:41,238 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:03:41,238 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:41,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:03:41,527 INFO L256 TraceCheckUtils]: 0: Hoare triple {47666#true} call ULTIMATE.init(); {47666#true} is VALID [2018-11-23 13:03:41,528 INFO L273 TraceCheckUtils]: 1: Hoare triple {47666#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {47666#true} is VALID [2018-11-23 13:03:41,528 INFO L273 TraceCheckUtils]: 2: Hoare triple {47666#true} assume true; {47666#true} is VALID [2018-11-23 13:03:41,528 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {47666#true} {47666#true} #542#return; {47666#true} is VALID [2018-11-23 13:03:41,528 INFO L256 TraceCheckUtils]: 4: Hoare triple {47666#true} call #t~ret138 := main(); {47666#true} is VALID [2018-11-23 13:03:41,529 INFO L273 TraceCheckUtils]: 5: Hoare triple {47666#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {47666#true} is VALID [2018-11-23 13:03:41,529 INFO L256 TraceCheckUtils]: 6: Hoare triple {47666#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {47666#true} is VALID [2018-11-23 13:03:41,529 INFO L273 TraceCheckUtils]: 7: Hoare triple {47666#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 13:03:41,529 INFO L273 TraceCheckUtils]: 8: Hoare triple {47666#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {47666#true} is VALID [2018-11-23 13:03:41,529 INFO L273 TraceCheckUtils]: 9: Hoare triple {47666#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {47666#true} is VALID [2018-11-23 13:03:41,530 INFO L273 TraceCheckUtils]: 10: Hoare triple {47666#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {47666#true} is VALID [2018-11-23 13:03:41,530 INFO L273 TraceCheckUtils]: 11: Hoare triple {47666#true} assume !false; {47666#true} is VALID [2018-11-23 13:03:41,530 INFO L273 TraceCheckUtils]: 12: Hoare triple {47666#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 13:03:41,530 INFO L273 TraceCheckUtils]: 13: Hoare triple {47666#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 13:03:41,530 INFO L273 TraceCheckUtils]: 14: Hoare triple {47666#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 13:03:41,530 INFO L273 TraceCheckUtils]: 15: Hoare triple {47666#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 13:03:41,530 INFO L273 TraceCheckUtils]: 16: Hoare triple {47666#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 13:03:41,530 INFO L273 TraceCheckUtils]: 17: Hoare triple {47666#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 13:03:41,531 INFO L273 TraceCheckUtils]: 18: Hoare triple {47666#true} assume 4368 == #t~mem27;havoc #t~mem27; {47666#true} is VALID [2018-11-23 13:03:41,531 INFO L273 TraceCheckUtils]: 19: Hoare triple {47666#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {47666#true} is VALID [2018-11-23 13:03:41,531 INFO L273 TraceCheckUtils]: 20: Hoare triple {47666#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {47666#true} is VALID [2018-11-23 13:03:41,531 INFO L273 TraceCheckUtils]: 21: Hoare triple {47666#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 13:03:41,531 INFO L273 TraceCheckUtils]: 22: Hoare triple {47666#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {47666#true} is VALID [2018-11-23 13:03:41,531 INFO L273 TraceCheckUtils]: 23: Hoare triple {47666#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {47666#true} is VALID [2018-11-23 13:03:41,531 INFO L273 TraceCheckUtils]: 24: Hoare triple {47666#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {47666#true} is VALID [2018-11-23 13:03:41,531 INFO L273 TraceCheckUtils]: 25: Hoare triple {47666#true} ~skip~0 := 0; {47666#true} is VALID [2018-11-23 13:03:41,532 INFO L273 TraceCheckUtils]: 26: Hoare triple {47666#true} assume !false; {47666#true} is VALID [2018-11-23 13:03:41,532 INFO L273 TraceCheckUtils]: 27: Hoare triple {47666#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 13:03:41,532 INFO L273 TraceCheckUtils]: 28: Hoare triple {47666#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 13:03:41,532 INFO L273 TraceCheckUtils]: 29: Hoare triple {47666#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 13:03:41,532 INFO L273 TraceCheckUtils]: 30: Hoare triple {47666#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 13:03:41,532 INFO L273 TraceCheckUtils]: 31: Hoare triple {47666#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 13:03:41,532 INFO L273 TraceCheckUtils]: 32: Hoare triple {47666#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 13:03:41,532 INFO L273 TraceCheckUtils]: 33: Hoare triple {47666#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 13:03:41,532 INFO L273 TraceCheckUtils]: 34: Hoare triple {47666#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 13:03:41,533 INFO L273 TraceCheckUtils]: 35: Hoare triple {47666#true} assume 4384 == #t~mem29;havoc #t~mem29; {47666#true} is VALID [2018-11-23 13:03:41,533 INFO L273 TraceCheckUtils]: 36: Hoare triple {47666#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {47666#true} is VALID [2018-11-23 13:03:41,533 INFO L273 TraceCheckUtils]: 37: Hoare triple {47666#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {47666#true} is VALID [2018-11-23 13:03:41,533 INFO L273 TraceCheckUtils]: 38: Hoare triple {47666#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {47666#true} is VALID [2018-11-23 13:03:41,534 INFO L273 TraceCheckUtils]: 39: Hoare triple {47666#true} assume 0 != #t~mem68;havoc #t~mem68;call write~int(4560, ~s.base, 52 + ~s.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:41,535 INFO L273 TraceCheckUtils]: 40: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:41,535 INFO L273 TraceCheckUtils]: 41: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:41,535 INFO L273 TraceCheckUtils]: 42: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:41,536 INFO L273 TraceCheckUtils]: 43: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} ~skip~0 := 0; {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:41,536 INFO L273 TraceCheckUtils]: 44: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !false; {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:41,536 INFO L273 TraceCheckUtils]: 45: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:41,536 INFO L273 TraceCheckUtils]: 46: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:41,537 INFO L273 TraceCheckUtils]: 47: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:41,537 INFO L273 TraceCheckUtils]: 48: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:41,538 INFO L273 TraceCheckUtils]: 49: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:41,538 INFO L273 TraceCheckUtils]: 50: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:41,539 INFO L273 TraceCheckUtils]: 51: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:41,539 INFO L273 TraceCheckUtils]: 52: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:41,540 INFO L273 TraceCheckUtils]: 53: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} is VALID [2018-11-23 13:03:41,541 INFO L273 TraceCheckUtils]: 54: Hoare triple {47668#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4560)} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {47669#(= |ssl3_connect_#t~mem31| 4560)} is VALID [2018-11-23 13:03:41,541 INFO L273 TraceCheckUtils]: 55: Hoare triple {47669#(= |ssl3_connect_#t~mem31| 4560)} assume 4400 == #t~mem31;havoc #t~mem31; {47667#false} is VALID [2018-11-23 13:03:41,542 INFO L273 TraceCheckUtils]: 56: Hoare triple {47667#false} call #t~mem69.base, #t~mem69.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem70.base, #t~mem70.offset := read~$Pointer$(#t~mem69.base, 836 + #t~mem69.offset, 4);call #t~mem71 := read~int(#t~mem70.base, 12 + #t~mem70.offset, 4); {47667#false} is VALID [2018-11-23 13:03:41,542 INFO L273 TraceCheckUtils]: 57: Hoare triple {47667#false} assume 0 != ~bitwiseAnd(#t~mem71, 256) % 4294967296;havoc #t~mem69.base, #t~mem69.offset;havoc #t~mem71;havoc #t~mem70.base, #t~mem70.offset;~skip~0 := 1; {47667#false} is VALID [2018-11-23 13:03:41,542 INFO L273 TraceCheckUtils]: 58: Hoare triple {47667#false} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 13:03:41,542 INFO L273 TraceCheckUtils]: 59: Hoare triple {47667#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {47667#false} is VALID [2018-11-23 13:03:41,543 INFO L273 TraceCheckUtils]: 60: Hoare triple {47667#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {47667#false} is VALID [2018-11-23 13:03:41,543 INFO L273 TraceCheckUtils]: 61: Hoare triple {47667#false} ~skip~0 := 0; {47667#false} is VALID [2018-11-23 13:03:41,543 INFO L273 TraceCheckUtils]: 62: Hoare triple {47667#false} assume !false; {47667#false} is VALID [2018-11-23 13:03:41,544 INFO L273 TraceCheckUtils]: 63: Hoare triple {47667#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 13:03:41,544 INFO L273 TraceCheckUtils]: 64: Hoare triple {47667#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 13:03:41,544 INFO L273 TraceCheckUtils]: 65: Hoare triple {47667#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 13:03:41,544 INFO L273 TraceCheckUtils]: 66: Hoare triple {47667#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 13:03:41,545 INFO L273 TraceCheckUtils]: 67: Hoare triple {47667#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 13:03:41,545 INFO L273 TraceCheckUtils]: 68: Hoare triple {47667#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 13:03:41,545 INFO L273 TraceCheckUtils]: 69: Hoare triple {47667#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 13:03:41,545 INFO L273 TraceCheckUtils]: 70: Hoare triple {47667#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 13:03:41,545 INFO L273 TraceCheckUtils]: 71: Hoare triple {47667#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 13:03:41,545 INFO L273 TraceCheckUtils]: 72: Hoare triple {47667#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 13:03:41,545 INFO L273 TraceCheckUtils]: 73: Hoare triple {47667#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 13:03:41,545 INFO L273 TraceCheckUtils]: 74: Hoare triple {47667#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 13:03:41,546 INFO L273 TraceCheckUtils]: 75: Hoare triple {47667#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 13:03:41,546 INFO L273 TraceCheckUtils]: 76: Hoare triple {47667#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {47667#false} is VALID [2018-11-23 13:03:41,546 INFO L273 TraceCheckUtils]: 77: Hoare triple {47667#false} assume 4432 == #t~mem35;havoc #t~mem35; {47667#false} is VALID [2018-11-23 13:03:41,546 INFO L273 TraceCheckUtils]: 78: Hoare triple {47667#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {47667#false} is VALID [2018-11-23 13:03:41,546 INFO L273 TraceCheckUtils]: 79: Hoare triple {47667#false} assume 5 == ~blastFlag~0; {47667#false} is VALID [2018-11-23 13:03:41,546 INFO L273 TraceCheckUtils]: 80: Hoare triple {47667#false} assume !false; {47667#false} is VALID [2018-11-23 13:03:41,553 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 57 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 13:03:41,553 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:03:41,553 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:03:41,553 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 13:03:41,554 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:03:41,554 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:03:41,640 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:41,640 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:03:41,641 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:03:41,641 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:03:41,641 INFO L87 Difference]: Start difference. First operand 421 states and 610 transitions. Second operand 4 states. [2018-11-23 13:03:43,002 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:43,002 INFO L93 Difference]: Finished difference Result 919 states and 1334 transitions. [2018-11-23 13:03:43,002 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:03:43,002 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 13:03:43,003 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:03:43,003 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:43,004 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 443 transitions. [2018-11-23 13:03:43,004 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:43,006 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 443 transitions. [2018-11-23 13:03:43,006 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 443 transitions. [2018-11-23 13:03:43,450 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 443 edges. 443 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:43,465 INFO L225 Difference]: With dead ends: 919 [2018-11-23 13:03:43,465 INFO L226 Difference]: Without dead ends: 511 [2018-11-23 13:03:43,466 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:03:43,467 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 511 states. [2018-11-23 13:03:43,728 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 511 to 421. [2018-11-23 13:03:43,729 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:03:43,729 INFO L82 GeneralOperation]: Start isEquivalent. First operand 511 states. Second operand 421 states. [2018-11-23 13:03:43,729 INFO L74 IsIncluded]: Start isIncluded. First operand 511 states. Second operand 421 states. [2018-11-23 13:03:43,729 INFO L87 Difference]: Start difference. First operand 511 states. Second operand 421 states. [2018-11-23 13:03:43,741 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:43,742 INFO L93 Difference]: Finished difference Result 511 states and 739 transitions. [2018-11-23 13:03:43,742 INFO L276 IsEmpty]: Start isEmpty. Operand 511 states and 739 transitions. [2018-11-23 13:03:43,742 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:43,742 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:43,743 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 511 states. [2018-11-23 13:03:43,743 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 511 states. [2018-11-23 13:03:43,756 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:43,757 INFO L93 Difference]: Finished difference Result 511 states and 739 transitions. [2018-11-23 13:03:43,757 INFO L276 IsEmpty]: Start isEmpty. Operand 511 states and 739 transitions. [2018-11-23 13:03:43,757 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:43,757 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:43,757 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:03:43,758 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:03:43,758 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 13:03:43,767 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 608 transitions. [2018-11-23 13:03:43,767 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 608 transitions. Word has length 81 [2018-11-23 13:03:43,767 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:03:43,767 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 608 transitions. [2018-11-23 13:03:43,767 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:03:43,767 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 608 transitions. [2018-11-23 13:03:43,768 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2018-11-23 13:03:43,768 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:03:43,768 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:03:43,768 INFO L423 AbstractCegarLoop]: === Iteration 22 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:03:43,768 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:03:43,768 INFO L82 PathProgramCache]: Analyzing trace with hash -1220829216, now seen corresponding path program 1 times [2018-11-23 13:03:43,769 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:03:43,769 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:03:43,769 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:43,770 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:03:43,770 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:43,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:03:44,060 INFO L256 TraceCheckUtils]: 0: Hoare triple {50227#true} call ULTIMATE.init(); {50227#true} is VALID [2018-11-23 13:03:44,060 INFO L273 TraceCheckUtils]: 1: Hoare triple {50227#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {50227#true} is VALID [2018-11-23 13:03:44,060 INFO L273 TraceCheckUtils]: 2: Hoare triple {50227#true} assume true; {50227#true} is VALID [2018-11-23 13:03:44,060 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {50227#true} {50227#true} #542#return; {50227#true} is VALID [2018-11-23 13:03:44,061 INFO L256 TraceCheckUtils]: 4: Hoare triple {50227#true} call #t~ret138 := main(); {50227#true} is VALID [2018-11-23 13:03:44,061 INFO L273 TraceCheckUtils]: 5: Hoare triple {50227#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {50227#true} is VALID [2018-11-23 13:03:44,061 INFO L256 TraceCheckUtils]: 6: Hoare triple {50227#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {50227#true} is VALID [2018-11-23 13:03:44,061 INFO L273 TraceCheckUtils]: 7: Hoare triple {50227#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 13:03:44,061 INFO L273 TraceCheckUtils]: 8: Hoare triple {50227#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {50227#true} is VALID [2018-11-23 13:03:44,061 INFO L273 TraceCheckUtils]: 9: Hoare triple {50227#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {50227#true} is VALID [2018-11-23 13:03:44,061 INFO L273 TraceCheckUtils]: 10: Hoare triple {50227#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {50227#true} is VALID [2018-11-23 13:03:44,061 INFO L273 TraceCheckUtils]: 11: Hoare triple {50227#true} assume !false; {50227#true} is VALID [2018-11-23 13:03:44,062 INFO L273 TraceCheckUtils]: 12: Hoare triple {50227#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 13:03:44,062 INFO L273 TraceCheckUtils]: 13: Hoare triple {50227#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 13:03:44,062 INFO L273 TraceCheckUtils]: 14: Hoare triple {50227#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 13:03:44,062 INFO L273 TraceCheckUtils]: 15: Hoare triple {50227#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 13:03:44,062 INFO L273 TraceCheckUtils]: 16: Hoare triple {50227#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 13:03:44,063 INFO L273 TraceCheckUtils]: 17: Hoare triple {50227#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 13:03:44,063 INFO L273 TraceCheckUtils]: 18: Hoare triple {50227#true} assume 4368 == #t~mem27;havoc #t~mem27; {50227#true} is VALID [2018-11-23 13:03:44,063 INFO L273 TraceCheckUtils]: 19: Hoare triple {50227#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {50227#true} is VALID [2018-11-23 13:03:44,063 INFO L273 TraceCheckUtils]: 20: Hoare triple {50227#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {50227#true} is VALID [2018-11-23 13:03:44,063 INFO L273 TraceCheckUtils]: 21: Hoare triple {50227#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 13:03:44,064 INFO L273 TraceCheckUtils]: 22: Hoare triple {50227#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {50227#true} is VALID [2018-11-23 13:03:44,064 INFO L273 TraceCheckUtils]: 23: Hoare triple {50227#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {50227#true} is VALID [2018-11-23 13:03:44,064 INFO L273 TraceCheckUtils]: 24: Hoare triple {50227#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {50227#true} is VALID [2018-11-23 13:03:44,064 INFO L273 TraceCheckUtils]: 25: Hoare triple {50227#true} ~skip~0 := 0; {50227#true} is VALID [2018-11-23 13:03:44,064 INFO L273 TraceCheckUtils]: 26: Hoare triple {50227#true} assume !false; {50227#true} is VALID [2018-11-23 13:03:44,064 INFO L273 TraceCheckUtils]: 27: Hoare triple {50227#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 13:03:44,064 INFO L273 TraceCheckUtils]: 28: Hoare triple {50227#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 13:03:44,064 INFO L273 TraceCheckUtils]: 29: Hoare triple {50227#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 13:03:44,065 INFO L273 TraceCheckUtils]: 30: Hoare triple {50227#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 13:03:44,065 INFO L273 TraceCheckUtils]: 31: Hoare triple {50227#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 13:03:44,065 INFO L273 TraceCheckUtils]: 32: Hoare triple {50227#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 13:03:44,065 INFO L273 TraceCheckUtils]: 33: Hoare triple {50227#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 13:03:44,065 INFO L273 TraceCheckUtils]: 34: Hoare triple {50227#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 13:03:44,065 INFO L273 TraceCheckUtils]: 35: Hoare triple {50227#true} assume 4384 == #t~mem29;havoc #t~mem29; {50227#true} is VALID [2018-11-23 13:03:44,065 INFO L273 TraceCheckUtils]: 36: Hoare triple {50227#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {50227#true} is VALID [2018-11-23 13:03:44,065 INFO L273 TraceCheckUtils]: 37: Hoare triple {50227#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {50227#true} is VALID [2018-11-23 13:03:44,065 INFO L273 TraceCheckUtils]: 38: Hoare triple {50227#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {50227#true} is VALID [2018-11-23 13:03:44,066 INFO L273 TraceCheckUtils]: 39: Hoare triple {50227#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:44,067 INFO L273 TraceCheckUtils]: 40: Hoare triple {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:44,067 INFO L273 TraceCheckUtils]: 41: Hoare triple {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:44,068 INFO L273 TraceCheckUtils]: 42: Hoare triple {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:44,068 INFO L273 TraceCheckUtils]: 43: Hoare triple {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} ~skip~0 := 0; {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:44,075 INFO L273 TraceCheckUtils]: 44: Hoare triple {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !false; {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:44,076 INFO L273 TraceCheckUtils]: 45: Hoare triple {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:44,076 INFO L273 TraceCheckUtils]: 46: Hoare triple {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:44,076 INFO L273 TraceCheckUtils]: 47: Hoare triple {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:44,077 INFO L273 TraceCheckUtils]: 48: Hoare triple {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} is VALID [2018-11-23 13:03:44,077 INFO L273 TraceCheckUtils]: 49: Hoare triple {50229#(= (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 64) 0) (+ ssl3_connect_~s.offset 52)) 4400)} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {50230#(= |ssl3_connect_#t~mem26| 4400)} is VALID [2018-11-23 13:03:44,077 INFO L273 TraceCheckUtils]: 50: Hoare triple {50230#(= |ssl3_connect_#t~mem26| 4400)} assume 4099 == #t~mem26;havoc #t~mem26; {50228#false} is VALID [2018-11-23 13:03:44,078 INFO L273 TraceCheckUtils]: 51: Hoare triple {50228#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 13:03:44,078 INFO L273 TraceCheckUtils]: 52: Hoare triple {50228#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {50228#false} is VALID [2018-11-23 13:03:44,078 INFO L273 TraceCheckUtils]: 53: Hoare triple {50228#false} call #t~mem57 := read~int(~s.base, ~s.offset, 4); {50228#false} is VALID [2018-11-23 13:03:44,078 INFO L273 TraceCheckUtils]: 54: Hoare triple {50228#false} assume !(768 != ~bitwiseAnd(#t~mem57, 65280));havoc #t~mem57;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 13:03:44,078 INFO L273 TraceCheckUtils]: 55: Hoare triple {50228#false} assume !(0 == (#t~mem58.base + #t~mem58.offset) % 4294967296);havoc #t~mem58.base, #t~mem58.offset; {50228#false} is VALID [2018-11-23 13:03:44,079 INFO L273 TraceCheckUtils]: 56: Hoare triple {50228#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {50228#false} is VALID [2018-11-23 13:03:44,079 INFO L273 TraceCheckUtils]: 57: Hoare triple {50228#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {50228#false} is VALID [2018-11-23 13:03:44,079 INFO L273 TraceCheckUtils]: 58: Hoare triple {50228#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem63 := read~int(#t~mem62.base, 60 + #t~mem62.offset, 4);call write~int(1 + #t~mem63, #t~mem62.base, 60 + #t~mem62.offset, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, 64 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 13:03:44,079 INFO L273 TraceCheckUtils]: 59: Hoare triple {50228#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {50228#false} is VALID [2018-11-23 13:03:44,079 INFO L273 TraceCheckUtils]: 60: Hoare triple {50228#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {50228#false} is VALID [2018-11-23 13:03:44,080 INFO L273 TraceCheckUtils]: 61: Hoare triple {50228#false} ~skip~0 := 0; {50228#false} is VALID [2018-11-23 13:03:44,080 INFO L273 TraceCheckUtils]: 62: Hoare triple {50228#false} assume !false; {50228#false} is VALID [2018-11-23 13:03:44,080 INFO L273 TraceCheckUtils]: 63: Hoare triple {50228#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 13:03:44,080 INFO L273 TraceCheckUtils]: 64: Hoare triple {50228#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 13:03:44,080 INFO L273 TraceCheckUtils]: 65: Hoare triple {50228#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 13:03:44,081 INFO L273 TraceCheckUtils]: 66: Hoare triple {50228#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 13:03:44,081 INFO L273 TraceCheckUtils]: 67: Hoare triple {50228#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 13:03:44,081 INFO L273 TraceCheckUtils]: 68: Hoare triple {50228#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 13:03:44,081 INFO L273 TraceCheckUtils]: 69: Hoare triple {50228#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 13:03:44,081 INFO L273 TraceCheckUtils]: 70: Hoare triple {50228#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 13:03:44,081 INFO L273 TraceCheckUtils]: 71: Hoare triple {50228#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 13:03:44,081 INFO L273 TraceCheckUtils]: 72: Hoare triple {50228#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 13:03:44,081 INFO L273 TraceCheckUtils]: 73: Hoare triple {50228#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 13:03:44,082 INFO L273 TraceCheckUtils]: 74: Hoare triple {50228#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 13:03:44,082 INFO L273 TraceCheckUtils]: 75: Hoare triple {50228#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 13:03:44,082 INFO L273 TraceCheckUtils]: 76: Hoare triple {50228#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {50228#false} is VALID [2018-11-23 13:03:44,082 INFO L273 TraceCheckUtils]: 77: Hoare triple {50228#false} assume 4432 == #t~mem35;havoc #t~mem35; {50228#false} is VALID [2018-11-23 13:03:44,082 INFO L273 TraceCheckUtils]: 78: Hoare triple {50228#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {50228#false} is VALID [2018-11-23 13:03:44,082 INFO L273 TraceCheckUtils]: 79: Hoare triple {50228#false} assume 5 == ~blastFlag~0; {50228#false} is VALID [2018-11-23 13:03:44,082 INFO L273 TraceCheckUtils]: 80: Hoare triple {50228#false} assume !false; {50228#false} is VALID [2018-11-23 13:03:44,087 INFO L134 CoverageAnalysis]: Checked inductivity of 56 backedges. 48 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 13:03:44,087 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:03:44,087 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:03:44,087 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 13:03:44,087 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:03:44,088 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:03:44,162 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:44,162 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:03:44,162 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:03:44,162 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:03:44,163 INFO L87 Difference]: Start difference. First operand 421 states and 608 transitions. Second operand 4 states. [2018-11-23 13:03:45,211 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:45,211 INFO L93 Difference]: Finished difference Result 847 states and 1223 transitions. [2018-11-23 13:03:45,211 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:03:45,211 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 13:03:45,211 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:03:45,211 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:45,214 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 379 transitions. [2018-11-23 13:03:45,214 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:45,216 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 379 transitions. [2018-11-23 13:03:45,216 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 379 transitions. [2018-11-23 13:03:45,601 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 379 edges. 379 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:45,613 INFO L225 Difference]: With dead ends: 847 [2018-11-23 13:03:45,614 INFO L226 Difference]: Without dead ends: 439 [2018-11-23 13:03:45,614 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:03:45,615 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 439 states. [2018-11-23 13:03:45,725 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 439 to 421. [2018-11-23 13:03:45,726 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:03:45,726 INFO L82 GeneralOperation]: Start isEquivalent. First operand 439 states. Second operand 421 states. [2018-11-23 13:03:45,726 INFO L74 IsIncluded]: Start isIncluded. First operand 439 states. Second operand 421 states. [2018-11-23 13:03:45,726 INFO L87 Difference]: Start difference. First operand 439 states. Second operand 421 states. [2018-11-23 13:03:45,737 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:45,737 INFO L93 Difference]: Finished difference Result 439 states and 630 transitions. [2018-11-23 13:03:45,737 INFO L276 IsEmpty]: Start isEmpty. Operand 439 states and 630 transitions. [2018-11-23 13:03:45,737 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:45,737 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:45,738 INFO L74 IsIncluded]: Start isIncluded. First operand 421 states. Second operand 439 states. [2018-11-23 13:03:45,738 INFO L87 Difference]: Start difference. First operand 421 states. Second operand 439 states. [2018-11-23 13:03:45,747 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:45,748 INFO L93 Difference]: Finished difference Result 439 states and 630 transitions. [2018-11-23 13:03:45,748 INFO L276 IsEmpty]: Start isEmpty. Operand 439 states and 630 transitions. [2018-11-23 13:03:45,748 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:45,748 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:45,748 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:03:45,749 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:03:45,749 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 421 states. [2018-11-23 13:03:45,756 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 606 transitions. [2018-11-23 13:03:45,756 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 606 transitions. Word has length 81 [2018-11-23 13:03:45,756 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:03:45,757 INFO L480 AbstractCegarLoop]: Abstraction has 421 states and 606 transitions. [2018-11-23 13:03:45,757 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:03:45,757 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 606 transitions. [2018-11-23 13:03:45,758 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2018-11-23 13:03:45,758 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:03:45,758 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:03:45,758 INFO L423 AbstractCegarLoop]: === Iteration 23 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:03:45,758 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:03:45,759 INFO L82 PathProgramCache]: Analyzing trace with hash 1382711089, now seen corresponding path program 1 times [2018-11-23 13:03:45,759 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:03:45,759 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:03:45,760 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:45,760 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:03:45,760 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:45,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:03:45,998 INFO L256 TraceCheckUtils]: 0: Hoare triple {52556#true} call ULTIMATE.init(); {52556#true} is VALID [2018-11-23 13:03:45,999 INFO L273 TraceCheckUtils]: 1: Hoare triple {52556#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {52556#true} is VALID [2018-11-23 13:03:45,999 INFO L273 TraceCheckUtils]: 2: Hoare triple {52556#true} assume true; {52556#true} is VALID [2018-11-23 13:03:45,999 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {52556#true} {52556#true} #542#return; {52556#true} is VALID [2018-11-23 13:03:45,999 INFO L256 TraceCheckUtils]: 4: Hoare triple {52556#true} call #t~ret138 := main(); {52556#true} is VALID [2018-11-23 13:03:46,000 INFO L273 TraceCheckUtils]: 5: Hoare triple {52556#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {52556#true} is VALID [2018-11-23 13:03:46,000 INFO L256 TraceCheckUtils]: 6: Hoare triple {52556#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {52556#true} is VALID [2018-11-23 13:03:46,000 INFO L273 TraceCheckUtils]: 7: Hoare triple {52556#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 13:03:46,000 INFO L273 TraceCheckUtils]: 8: Hoare triple {52556#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {52556#true} is VALID [2018-11-23 13:03:46,000 INFO L273 TraceCheckUtils]: 9: Hoare triple {52556#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {52556#true} is VALID [2018-11-23 13:03:46,001 INFO L273 TraceCheckUtils]: 10: Hoare triple {52556#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {52556#true} is VALID [2018-11-23 13:03:46,001 INFO L273 TraceCheckUtils]: 11: Hoare triple {52556#true} assume !false; {52556#true} is VALID [2018-11-23 13:03:46,001 INFO L273 TraceCheckUtils]: 12: Hoare triple {52556#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 13:03:46,001 INFO L273 TraceCheckUtils]: 13: Hoare triple {52556#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 13:03:46,001 INFO L273 TraceCheckUtils]: 14: Hoare triple {52556#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 13:03:46,001 INFO L273 TraceCheckUtils]: 15: Hoare triple {52556#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 13:03:46,002 INFO L273 TraceCheckUtils]: 16: Hoare triple {52556#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 13:03:46,002 INFO L273 TraceCheckUtils]: 17: Hoare triple {52556#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 13:03:46,002 INFO L273 TraceCheckUtils]: 18: Hoare triple {52556#true} assume 4368 == #t~mem27;havoc #t~mem27; {52556#true} is VALID [2018-11-23 13:03:46,002 INFO L273 TraceCheckUtils]: 19: Hoare triple {52556#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {52556#true} is VALID [2018-11-23 13:03:46,002 INFO L273 TraceCheckUtils]: 20: Hoare triple {52556#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {52556#true} is VALID [2018-11-23 13:03:46,002 INFO L273 TraceCheckUtils]: 21: Hoare triple {52556#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 13:03:46,003 INFO L273 TraceCheckUtils]: 22: Hoare triple {52556#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {52556#true} is VALID [2018-11-23 13:03:46,003 INFO L273 TraceCheckUtils]: 23: Hoare triple {52556#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {52556#true} is VALID [2018-11-23 13:03:46,003 INFO L273 TraceCheckUtils]: 24: Hoare triple {52556#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {52556#true} is VALID [2018-11-23 13:03:46,003 INFO L273 TraceCheckUtils]: 25: Hoare triple {52556#true} ~skip~0 := 0; {52556#true} is VALID [2018-11-23 13:03:46,003 INFO L273 TraceCheckUtils]: 26: Hoare triple {52556#true} assume !false; {52556#true} is VALID [2018-11-23 13:03:46,004 INFO L273 TraceCheckUtils]: 27: Hoare triple {52556#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 13:03:46,004 INFO L273 TraceCheckUtils]: 28: Hoare triple {52556#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 13:03:46,004 INFO L273 TraceCheckUtils]: 29: Hoare triple {52556#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 13:03:46,004 INFO L273 TraceCheckUtils]: 30: Hoare triple {52556#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 13:03:46,004 INFO L273 TraceCheckUtils]: 31: Hoare triple {52556#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 13:03:46,004 INFO L273 TraceCheckUtils]: 32: Hoare triple {52556#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 13:03:46,005 INFO L273 TraceCheckUtils]: 33: Hoare triple {52556#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 13:03:46,005 INFO L273 TraceCheckUtils]: 34: Hoare triple {52556#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {52556#true} is VALID [2018-11-23 13:03:46,005 INFO L273 TraceCheckUtils]: 35: Hoare triple {52556#true} assume 4384 == #t~mem29;havoc #t~mem29; {52556#true} is VALID [2018-11-23 13:03:46,005 INFO L273 TraceCheckUtils]: 36: Hoare triple {52556#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {52556#true} is VALID [2018-11-23 13:03:46,018 INFO L273 TraceCheckUtils]: 37: Hoare triple {52556#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,030 INFO L273 TraceCheckUtils]: 38: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,043 INFO L273 TraceCheckUtils]: 39: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,061 INFO L273 TraceCheckUtils]: 40: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,070 INFO L273 TraceCheckUtils]: 41: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,085 INFO L273 TraceCheckUtils]: 42: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,094 INFO L273 TraceCheckUtils]: 43: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} ~skip~0 := 0; {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,106 INFO L273 TraceCheckUtils]: 44: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !false; {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,119 INFO L273 TraceCheckUtils]: 45: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,133 INFO L273 TraceCheckUtils]: 46: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,141 INFO L273 TraceCheckUtils]: 47: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,141 INFO L273 TraceCheckUtils]: 48: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,143 INFO L273 TraceCheckUtils]: 49: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,143 INFO L273 TraceCheckUtils]: 50: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,145 INFO L273 TraceCheckUtils]: 51: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,145 INFO L273 TraceCheckUtils]: 52: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,147 INFO L273 TraceCheckUtils]: 53: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,147 INFO L273 TraceCheckUtils]: 54: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,149 INFO L273 TraceCheckUtils]: 55: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume 4400 == #t~mem31;havoc #t~mem31; {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,149 INFO L273 TraceCheckUtils]: 56: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} call #t~mem69.base, #t~mem69.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem70.base, #t~mem70.offset := read~$Pointer$(#t~mem69.base, 836 + #t~mem69.offset, 4);call #t~mem71 := read~int(#t~mem70.base, 12 + #t~mem70.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,149 INFO L273 TraceCheckUtils]: 57: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume 0 != ~bitwiseAnd(#t~mem71, 256) % 4294967296;havoc #t~mem69.base, #t~mem69.offset;havoc #t~mem71;havoc #t~mem70.base, #t~mem70.offset;~skip~0 := 1; {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,150 INFO L273 TraceCheckUtils]: 58: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,150 INFO L273 TraceCheckUtils]: 59: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,150 INFO L273 TraceCheckUtils]: 60: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,150 INFO L273 TraceCheckUtils]: 61: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} ~skip~0 := 0; {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,151 INFO L273 TraceCheckUtils]: 62: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !false; {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,151 INFO L273 TraceCheckUtils]: 63: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,151 INFO L273 TraceCheckUtils]: 64: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,152 INFO L273 TraceCheckUtils]: 65: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,152 INFO L273 TraceCheckUtils]: 66: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,152 INFO L273 TraceCheckUtils]: 67: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,153 INFO L273 TraceCheckUtils]: 68: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,153 INFO L273 TraceCheckUtils]: 69: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,154 INFO L273 TraceCheckUtils]: 70: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,154 INFO L273 TraceCheckUtils]: 71: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,155 INFO L273 TraceCheckUtils]: 72: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,155 INFO L273 TraceCheckUtils]: 73: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,156 INFO L273 TraceCheckUtils]: 74: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,156 INFO L273 TraceCheckUtils]: 75: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,157 INFO L273 TraceCheckUtils]: 76: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,157 INFO L273 TraceCheckUtils]: 77: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume 4432 == #t~mem35;havoc #t~mem35; {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,158 INFO L273 TraceCheckUtils]: 78: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {52558#(<= ssl3_connect_~blastFlag~0 2)} is VALID [2018-11-23 13:03:46,158 INFO L273 TraceCheckUtils]: 79: Hoare triple {52558#(<= ssl3_connect_~blastFlag~0 2)} assume 5 == ~blastFlag~0; {52557#false} is VALID [2018-11-23 13:03:46,159 INFO L273 TraceCheckUtils]: 80: Hoare triple {52557#false} assume !false; {52557#false} is VALID [2018-11-23 13:03:46,164 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2018-11-23 13:03:46,164 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:03:46,164 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 13:03:46,165 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 81 [2018-11-23 13:03:46,165 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:03:46,165 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 13:03:46,227 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 60 edges. 60 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:46,227 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 13:03:46,227 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 13:03:46,228 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:03:46,228 INFO L87 Difference]: Start difference. First operand 421 states and 606 transitions. Second operand 3 states. [2018-11-23 13:03:46,781 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:46,781 INFO L93 Difference]: Finished difference Result 831 states and 1204 transitions. [2018-11-23 13:03:46,781 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 13:03:46,781 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 81 [2018-11-23 13:03:46,781 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:03:46,781 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 13:03:46,784 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 496 transitions. [2018-11-23 13:03:46,784 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 13:03:46,787 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 496 transitions. [2018-11-23 13:03:46,787 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 496 transitions. [2018-11-23 13:03:47,325 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 496 edges. 496 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:47,342 INFO L225 Difference]: With dead ends: 831 [2018-11-23 13:03:47,342 INFO L226 Difference]: Without dead ends: 574 [2018-11-23 13:03:47,342 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:03:47,343 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 574 states. [2018-11-23 13:03:47,498 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 574 to 574. [2018-11-23 13:03:47,499 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:03:47,499 INFO L82 GeneralOperation]: Start isEquivalent. First operand 574 states. Second operand 574 states. [2018-11-23 13:03:47,499 INFO L74 IsIncluded]: Start isIncluded. First operand 574 states. Second operand 574 states. [2018-11-23 13:03:47,499 INFO L87 Difference]: Start difference. First operand 574 states. Second operand 574 states. [2018-11-23 13:03:47,518 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:47,518 INFO L93 Difference]: Finished difference Result 574 states and 827 transitions. [2018-11-23 13:03:47,518 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 827 transitions. [2018-11-23 13:03:47,519 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:47,519 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:47,519 INFO L74 IsIncluded]: Start isIncluded. First operand 574 states. Second operand 574 states. [2018-11-23 13:03:47,519 INFO L87 Difference]: Start difference. First operand 574 states. Second operand 574 states. [2018-11-23 13:03:47,537 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:47,538 INFO L93 Difference]: Finished difference Result 574 states and 827 transitions. [2018-11-23 13:03:47,538 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 827 transitions. [2018-11-23 13:03:47,539 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:47,539 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:47,539 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:03:47,539 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:03:47,539 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 574 states. [2018-11-23 13:03:47,554 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 574 states to 574 states and 827 transitions. [2018-11-23 13:03:47,555 INFO L78 Accepts]: Start accepts. Automaton has 574 states and 827 transitions. Word has length 81 [2018-11-23 13:03:47,555 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:03:47,555 INFO L480 AbstractCegarLoop]: Abstraction has 574 states and 827 transitions. [2018-11-23 13:03:47,555 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 13:03:47,555 INFO L276 IsEmpty]: Start isEmpty. Operand 574 states and 827 transitions. [2018-11-23 13:03:47,556 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2018-11-23 13:03:47,556 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:03:47,557 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:03:47,557 INFO L423 AbstractCegarLoop]: === Iteration 24 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:03:47,557 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:03:47,557 INFO L82 PathProgramCache]: Analyzing trace with hash 1024261319, now seen corresponding path program 1 times [2018-11-23 13:03:47,557 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:03:47,557 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:03:47,558 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:47,558 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:03:47,559 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:47,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:03:47,703 INFO L256 TraceCheckUtils]: 0: Hoare triple {55303#true} call ULTIMATE.init(); {55303#true} is VALID [2018-11-23 13:03:47,703 INFO L273 TraceCheckUtils]: 1: Hoare triple {55303#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,703 INFO L273 TraceCheckUtils]: 2: Hoare triple {55303#true} assume true; {55303#true} is VALID [2018-11-23 13:03:47,704 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {55303#true} {55303#true} #542#return; {55303#true} is VALID [2018-11-23 13:03:47,704 INFO L256 TraceCheckUtils]: 4: Hoare triple {55303#true} call #t~ret138 := main(); {55303#true} is VALID [2018-11-23 13:03:47,704 INFO L273 TraceCheckUtils]: 5: Hoare triple {55303#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {55303#true} is VALID [2018-11-23 13:03:47,704 INFO L256 TraceCheckUtils]: 6: Hoare triple {55303#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {55303#true} is VALID [2018-11-23 13:03:47,704 INFO L273 TraceCheckUtils]: 7: Hoare triple {55303#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,704 INFO L273 TraceCheckUtils]: 8: Hoare triple {55303#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {55303#true} is VALID [2018-11-23 13:03:47,704 INFO L273 TraceCheckUtils]: 9: Hoare triple {55303#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {55303#true} is VALID [2018-11-23 13:03:47,704 INFO L273 TraceCheckUtils]: 10: Hoare triple {55303#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {55303#true} is VALID [2018-11-23 13:03:47,704 INFO L273 TraceCheckUtils]: 11: Hoare triple {55303#true} assume !false; {55303#true} is VALID [2018-11-23 13:03:47,705 INFO L273 TraceCheckUtils]: 12: Hoare triple {55303#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,705 INFO L273 TraceCheckUtils]: 13: Hoare triple {55303#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,705 INFO L273 TraceCheckUtils]: 14: Hoare triple {55303#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,705 INFO L273 TraceCheckUtils]: 15: Hoare triple {55303#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,705 INFO L273 TraceCheckUtils]: 16: Hoare triple {55303#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,705 INFO L273 TraceCheckUtils]: 17: Hoare triple {55303#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,705 INFO L273 TraceCheckUtils]: 18: Hoare triple {55303#true} assume 4368 == #t~mem27;havoc #t~mem27; {55303#true} is VALID [2018-11-23 13:03:47,705 INFO L273 TraceCheckUtils]: 19: Hoare triple {55303#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {55303#true} is VALID [2018-11-23 13:03:47,705 INFO L273 TraceCheckUtils]: 20: Hoare triple {55303#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {55303#true} is VALID [2018-11-23 13:03:47,706 INFO L273 TraceCheckUtils]: 21: Hoare triple {55303#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,706 INFO L273 TraceCheckUtils]: 22: Hoare triple {55303#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {55303#true} is VALID [2018-11-23 13:03:47,706 INFO L273 TraceCheckUtils]: 23: Hoare triple {55303#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,706 INFO L273 TraceCheckUtils]: 24: Hoare triple {55303#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {55303#true} is VALID [2018-11-23 13:03:47,706 INFO L273 TraceCheckUtils]: 25: Hoare triple {55303#true} ~skip~0 := 0; {55303#true} is VALID [2018-11-23 13:03:47,706 INFO L273 TraceCheckUtils]: 26: Hoare triple {55303#true} assume !false; {55303#true} is VALID [2018-11-23 13:03:47,706 INFO L273 TraceCheckUtils]: 27: Hoare triple {55303#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,706 INFO L273 TraceCheckUtils]: 28: Hoare triple {55303#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,707 INFO L273 TraceCheckUtils]: 29: Hoare triple {55303#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,707 INFO L273 TraceCheckUtils]: 30: Hoare triple {55303#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,707 INFO L273 TraceCheckUtils]: 31: Hoare triple {55303#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,707 INFO L273 TraceCheckUtils]: 32: Hoare triple {55303#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,707 INFO L273 TraceCheckUtils]: 33: Hoare triple {55303#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,707 INFO L273 TraceCheckUtils]: 34: Hoare triple {55303#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,707 INFO L273 TraceCheckUtils]: 35: Hoare triple {55303#true} assume 4384 == #t~mem29;havoc #t~mem29; {55303#true} is VALID [2018-11-23 13:03:47,707 INFO L273 TraceCheckUtils]: 36: Hoare triple {55303#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {55303#true} is VALID [2018-11-23 13:03:47,707 INFO L273 TraceCheckUtils]: 37: Hoare triple {55303#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {55303#true} is VALID [2018-11-23 13:03:47,708 INFO L273 TraceCheckUtils]: 38: Hoare triple {55303#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,708 INFO L273 TraceCheckUtils]: 39: Hoare triple {55303#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,708 INFO L273 TraceCheckUtils]: 40: Hoare triple {55303#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,708 INFO L273 TraceCheckUtils]: 41: Hoare triple {55303#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,708 INFO L273 TraceCheckUtils]: 42: Hoare triple {55303#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {55303#true} is VALID [2018-11-23 13:03:47,708 INFO L273 TraceCheckUtils]: 43: Hoare triple {55303#true} ~skip~0 := 0; {55303#true} is VALID [2018-11-23 13:03:47,708 INFO L273 TraceCheckUtils]: 44: Hoare triple {55303#true} assume !false; {55303#true} is VALID [2018-11-23 13:03:47,708 INFO L273 TraceCheckUtils]: 45: Hoare triple {55303#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,709 INFO L273 TraceCheckUtils]: 46: Hoare triple {55303#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,709 INFO L273 TraceCheckUtils]: 47: Hoare triple {55303#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,709 INFO L273 TraceCheckUtils]: 48: Hoare triple {55303#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,709 INFO L273 TraceCheckUtils]: 49: Hoare triple {55303#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,709 INFO L273 TraceCheckUtils]: 50: Hoare triple {55303#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,709 INFO L273 TraceCheckUtils]: 51: Hoare triple {55303#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,709 INFO L273 TraceCheckUtils]: 52: Hoare triple {55303#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,709 INFO L273 TraceCheckUtils]: 53: Hoare triple {55303#true} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,709 INFO L273 TraceCheckUtils]: 54: Hoare triple {55303#true} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,710 INFO L273 TraceCheckUtils]: 55: Hoare triple {55303#true} assume 4400 == #t~mem31;havoc #t~mem31; {55303#true} is VALID [2018-11-23 13:03:47,710 INFO L273 TraceCheckUtils]: 56: Hoare triple {55303#true} call #t~mem69.base, #t~mem69.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem70.base, #t~mem70.offset := read~$Pointer$(#t~mem69.base, 836 + #t~mem69.offset, 4);call #t~mem71 := read~int(#t~mem70.base, 12 + #t~mem70.offset, 4); {55303#true} is VALID [2018-11-23 13:03:47,710 INFO L273 TraceCheckUtils]: 57: Hoare triple {55303#true} assume !(0 != ~bitwiseAnd(#t~mem71, 256) % 4294967296);havoc #t~mem69.base, #t~mem69.offset;havoc #t~mem71;havoc #t~mem70.base, #t~mem70.offset;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~ret~0 := #t~nondet72;havoc #t~nondet72; {55303#true} is VALID [2018-11-23 13:03:47,711 INFO L273 TraceCheckUtils]: 58: Hoare triple {55303#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 13:03:47,713 INFO L273 TraceCheckUtils]: 59: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(~ret~0 <= 0); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 13:03:47,713 INFO L273 TraceCheckUtils]: 60: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 13:03:47,715 INFO L273 TraceCheckUtils]: 61: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 13:03:47,715 INFO L273 TraceCheckUtils]: 62: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 13:03:47,717 INFO L273 TraceCheckUtils]: 63: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} ~skip~0 := 0; {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 13:03:47,717 INFO L273 TraceCheckUtils]: 64: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !false; {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 13:03:47,719 INFO L273 TraceCheckUtils]: 65: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 13:03:47,719 INFO L273 TraceCheckUtils]: 66: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 13:03:47,719 INFO L273 TraceCheckUtils]: 67: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 13:03:47,729 INFO L273 TraceCheckUtils]: 68: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 13:03:47,729 INFO L273 TraceCheckUtils]: 69: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 13:03:47,730 INFO L273 TraceCheckUtils]: 70: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 13:03:47,730 INFO L273 TraceCheckUtils]: 71: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 13:03:47,731 INFO L273 TraceCheckUtils]: 72: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 13:03:47,731 INFO L273 TraceCheckUtils]: 73: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 13:03:47,731 INFO L273 TraceCheckUtils]: 74: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 13:03:47,732 INFO L273 TraceCheckUtils]: 75: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 13:03:47,732 INFO L273 TraceCheckUtils]: 76: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 13:03:47,732 INFO L273 TraceCheckUtils]: 77: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 13:03:47,732 INFO L273 TraceCheckUtils]: 78: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 13:03:47,733 INFO L273 TraceCheckUtils]: 79: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume 4432 == #t~mem35;havoc #t~mem35; {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 13:03:47,733 INFO L273 TraceCheckUtils]: 80: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {55305#(<= ssl3_connect_~blastFlag~0 3)} is VALID [2018-11-23 13:03:47,733 INFO L273 TraceCheckUtils]: 81: Hoare triple {55305#(<= ssl3_connect_~blastFlag~0 3)} assume 5 == ~blastFlag~0; {55304#false} is VALID [2018-11-23 13:03:47,734 INFO L273 TraceCheckUtils]: 82: Hoare triple {55304#false} assume !false; {55304#false} is VALID [2018-11-23 13:03:47,737 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2018-11-23 13:03:47,738 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:03:47,738 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 13:03:47,738 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 83 [2018-11-23 13:03:47,738 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:03:47,738 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 13:03:47,803 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 64 edges. 64 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:47,803 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 13:03:47,803 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 13:03:47,804 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:03:47,804 INFO L87 Difference]: Start difference. First operand 574 states and 827 transitions. Second operand 3 states. [2018-11-23 13:03:48,380 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:48,380 INFO L93 Difference]: Finished difference Result 729 states and 1052 transitions. [2018-11-23 13:03:48,380 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 13:03:48,381 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 83 [2018-11-23 13:03:48,381 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:03:48,381 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 13:03:48,382 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 337 transitions. [2018-11-23 13:03:48,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 13:03:48,385 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 337 transitions. [2018-11-23 13:03:48,385 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 337 transitions. [2018-11-23 13:03:48,731 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 337 edges. 337 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:48,756 INFO L225 Difference]: With dead ends: 729 [2018-11-23 13:03:48,757 INFO L226 Difference]: Without dead ends: 727 [2018-11-23 13:03:48,757 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:03:48,758 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 727 states. [2018-11-23 13:03:49,086 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 727 to 727. [2018-11-23 13:03:49,086 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:03:49,086 INFO L82 GeneralOperation]: Start isEquivalent. First operand 727 states. Second operand 727 states. [2018-11-23 13:03:49,086 INFO L74 IsIncluded]: Start isIncluded. First operand 727 states. Second operand 727 states. [2018-11-23 13:03:49,086 INFO L87 Difference]: Start difference. First operand 727 states. Second operand 727 states. [2018-11-23 13:03:49,108 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:49,109 INFO L93 Difference]: Finished difference Result 727 states and 1049 transitions. [2018-11-23 13:03:49,109 INFO L276 IsEmpty]: Start isEmpty. Operand 727 states and 1049 transitions. [2018-11-23 13:03:49,110 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:49,110 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:49,110 INFO L74 IsIncluded]: Start isIncluded. First operand 727 states. Second operand 727 states. [2018-11-23 13:03:49,110 INFO L87 Difference]: Start difference. First operand 727 states. Second operand 727 states. [2018-11-23 13:03:49,129 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:49,130 INFO L93 Difference]: Finished difference Result 727 states and 1049 transitions. [2018-11-23 13:03:49,130 INFO L276 IsEmpty]: Start isEmpty. Operand 727 states and 1049 transitions. [2018-11-23 13:03:49,130 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:49,131 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:49,131 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:03:49,131 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:03:49,131 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 727 states. [2018-11-23 13:03:49,149 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 727 states to 727 states and 1049 transitions. [2018-11-23 13:03:49,149 INFO L78 Accepts]: Start accepts. Automaton has 727 states and 1049 transitions. Word has length 83 [2018-11-23 13:03:49,149 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:03:49,150 INFO L480 AbstractCegarLoop]: Abstraction has 727 states and 1049 transitions. [2018-11-23 13:03:49,150 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 13:03:49,150 INFO L276 IsEmpty]: Start isEmpty. Operand 727 states and 1049 transitions. [2018-11-23 13:03:49,151 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 13:03:49,151 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:03:49,151 INFO L402 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:03:49,151 INFO L423 AbstractCegarLoop]: === Iteration 25 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:03:49,151 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:03:49,151 INFO L82 PathProgramCache]: Analyzing trace with hash 934069236, now seen corresponding path program 1 times [2018-11-23 13:03:49,151 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:03:49,152 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:03:49,152 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:49,153 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:03:49,153 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:49,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:03:49,311 INFO L256 TraceCheckUtils]: 0: Hoare triple {58409#true} call ULTIMATE.init(); {58409#true} is VALID [2018-11-23 13:03:49,311 INFO L273 TraceCheckUtils]: 1: Hoare triple {58409#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,311 INFO L273 TraceCheckUtils]: 2: Hoare triple {58409#true} assume true; {58409#true} is VALID [2018-11-23 13:03:49,311 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {58409#true} {58409#true} #542#return; {58409#true} is VALID [2018-11-23 13:03:49,312 INFO L256 TraceCheckUtils]: 4: Hoare triple {58409#true} call #t~ret138 := main(); {58409#true} is VALID [2018-11-23 13:03:49,312 INFO L273 TraceCheckUtils]: 5: Hoare triple {58409#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {58409#true} is VALID [2018-11-23 13:03:49,312 INFO L256 TraceCheckUtils]: 6: Hoare triple {58409#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {58409#true} is VALID [2018-11-23 13:03:49,312 INFO L273 TraceCheckUtils]: 7: Hoare triple {58409#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,312 INFO L273 TraceCheckUtils]: 8: Hoare triple {58409#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {58409#true} is VALID [2018-11-23 13:03:49,313 INFO L273 TraceCheckUtils]: 9: Hoare triple {58409#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {58409#true} is VALID [2018-11-23 13:03:49,313 INFO L273 TraceCheckUtils]: 10: Hoare triple {58409#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {58409#true} is VALID [2018-11-23 13:03:49,313 INFO L273 TraceCheckUtils]: 11: Hoare triple {58409#true} assume !false; {58409#true} is VALID [2018-11-23 13:03:49,313 INFO L273 TraceCheckUtils]: 12: Hoare triple {58409#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,313 INFO L273 TraceCheckUtils]: 13: Hoare triple {58409#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,314 INFO L273 TraceCheckUtils]: 14: Hoare triple {58409#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,314 INFO L273 TraceCheckUtils]: 15: Hoare triple {58409#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,314 INFO L273 TraceCheckUtils]: 16: Hoare triple {58409#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,314 INFO L273 TraceCheckUtils]: 17: Hoare triple {58409#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,314 INFO L273 TraceCheckUtils]: 18: Hoare triple {58409#true} assume 4368 == #t~mem27;havoc #t~mem27; {58409#true} is VALID [2018-11-23 13:03:49,315 INFO L273 TraceCheckUtils]: 19: Hoare triple {58409#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {58409#true} is VALID [2018-11-23 13:03:49,315 INFO L273 TraceCheckUtils]: 20: Hoare triple {58409#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {58409#true} is VALID [2018-11-23 13:03:49,315 INFO L273 TraceCheckUtils]: 21: Hoare triple {58409#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,315 INFO L273 TraceCheckUtils]: 22: Hoare triple {58409#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {58409#true} is VALID [2018-11-23 13:03:49,315 INFO L273 TraceCheckUtils]: 23: Hoare triple {58409#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,315 INFO L273 TraceCheckUtils]: 24: Hoare triple {58409#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {58409#true} is VALID [2018-11-23 13:03:49,315 INFO L273 TraceCheckUtils]: 25: Hoare triple {58409#true} ~skip~0 := 0; {58409#true} is VALID [2018-11-23 13:03:49,315 INFO L273 TraceCheckUtils]: 26: Hoare triple {58409#true} assume !false; {58409#true} is VALID [2018-11-23 13:03:49,315 INFO L273 TraceCheckUtils]: 27: Hoare triple {58409#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,316 INFO L273 TraceCheckUtils]: 28: Hoare triple {58409#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,316 INFO L273 TraceCheckUtils]: 29: Hoare triple {58409#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,316 INFO L273 TraceCheckUtils]: 30: Hoare triple {58409#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,316 INFO L273 TraceCheckUtils]: 31: Hoare triple {58409#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,316 INFO L273 TraceCheckUtils]: 32: Hoare triple {58409#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,316 INFO L273 TraceCheckUtils]: 33: Hoare triple {58409#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,316 INFO L273 TraceCheckUtils]: 34: Hoare triple {58409#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,316 INFO L273 TraceCheckUtils]: 35: Hoare triple {58409#true} assume 4384 == #t~mem29;havoc #t~mem29; {58409#true} is VALID [2018-11-23 13:03:49,317 INFO L273 TraceCheckUtils]: 36: Hoare triple {58409#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {58409#true} is VALID [2018-11-23 13:03:49,317 INFO L273 TraceCheckUtils]: 37: Hoare triple {58409#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {58409#true} is VALID [2018-11-23 13:03:49,317 INFO L273 TraceCheckUtils]: 38: Hoare triple {58409#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,317 INFO L273 TraceCheckUtils]: 39: Hoare triple {58409#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,317 INFO L273 TraceCheckUtils]: 40: Hoare triple {58409#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,317 INFO L273 TraceCheckUtils]: 41: Hoare triple {58409#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,317 INFO L273 TraceCheckUtils]: 42: Hoare triple {58409#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {58409#true} is VALID [2018-11-23 13:03:49,317 INFO L273 TraceCheckUtils]: 43: Hoare triple {58409#true} ~skip~0 := 0; {58409#true} is VALID [2018-11-23 13:03:49,317 INFO L273 TraceCheckUtils]: 44: Hoare triple {58409#true} assume !false; {58409#true} is VALID [2018-11-23 13:03:49,318 INFO L273 TraceCheckUtils]: 45: Hoare triple {58409#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,318 INFO L273 TraceCheckUtils]: 46: Hoare triple {58409#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,318 INFO L273 TraceCheckUtils]: 47: Hoare triple {58409#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,318 INFO L273 TraceCheckUtils]: 48: Hoare triple {58409#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,318 INFO L273 TraceCheckUtils]: 49: Hoare triple {58409#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,318 INFO L273 TraceCheckUtils]: 50: Hoare triple {58409#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,318 INFO L273 TraceCheckUtils]: 51: Hoare triple {58409#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,319 INFO L273 TraceCheckUtils]: 52: Hoare triple {58409#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,319 INFO L273 TraceCheckUtils]: 53: Hoare triple {58409#true} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,319 INFO L273 TraceCheckUtils]: 54: Hoare triple {58409#true} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,319 INFO L273 TraceCheckUtils]: 55: Hoare triple {58409#true} assume 4400 == #t~mem31;havoc #t~mem31; {58409#true} is VALID [2018-11-23 13:03:49,319 INFO L273 TraceCheckUtils]: 56: Hoare triple {58409#true} call #t~mem69.base, #t~mem69.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem70.base, #t~mem70.offset := read~$Pointer$(#t~mem69.base, 836 + #t~mem69.offset, 4);call #t~mem71 := read~int(#t~mem70.base, 12 + #t~mem70.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,319 INFO L273 TraceCheckUtils]: 57: Hoare triple {58409#true} assume !(0 != ~bitwiseAnd(#t~mem71, 256) % 4294967296);havoc #t~mem69.base, #t~mem69.offset;havoc #t~mem71;havoc #t~mem70.base, #t~mem70.offset;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~ret~0 := #t~nondet72;havoc #t~nondet72; {58409#true} is VALID [2018-11-23 13:03:49,319 INFO L273 TraceCheckUtils]: 58: Hoare triple {58409#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {58409#true} is VALID [2018-11-23 13:03:49,319 INFO L273 TraceCheckUtils]: 59: Hoare triple {58409#true} assume !(~ret~0 <= 0); {58409#true} is VALID [2018-11-23 13:03:49,319 INFO L273 TraceCheckUtils]: 60: Hoare triple {58409#true} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,320 INFO L273 TraceCheckUtils]: 61: Hoare triple {58409#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,320 INFO L273 TraceCheckUtils]: 62: Hoare triple {58409#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {58409#true} is VALID [2018-11-23 13:03:49,320 INFO L273 TraceCheckUtils]: 63: Hoare triple {58409#true} ~skip~0 := 0; {58409#true} is VALID [2018-11-23 13:03:49,320 INFO L273 TraceCheckUtils]: 64: Hoare triple {58409#true} assume !false; {58409#true} is VALID [2018-11-23 13:03:49,320 INFO L273 TraceCheckUtils]: 65: Hoare triple {58409#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,320 INFO L273 TraceCheckUtils]: 66: Hoare triple {58409#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,320 INFO L273 TraceCheckUtils]: 67: Hoare triple {58409#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,320 INFO L273 TraceCheckUtils]: 68: Hoare triple {58409#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,320 INFO L273 TraceCheckUtils]: 69: Hoare triple {58409#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,321 INFO L273 TraceCheckUtils]: 70: Hoare triple {58409#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,321 INFO L273 TraceCheckUtils]: 71: Hoare triple {58409#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,321 INFO L273 TraceCheckUtils]: 72: Hoare triple {58409#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,321 INFO L273 TraceCheckUtils]: 73: Hoare triple {58409#true} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,321 INFO L273 TraceCheckUtils]: 74: Hoare triple {58409#true} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,321 INFO L273 TraceCheckUtils]: 75: Hoare triple {58409#true} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,321 INFO L273 TraceCheckUtils]: 76: Hoare triple {58409#true} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {58409#true} is VALID [2018-11-23 13:03:49,322 INFO L273 TraceCheckUtils]: 77: Hoare triple {58409#true} assume 4416 == #t~mem33;havoc #t~mem33; {58409#true} is VALID [2018-11-23 13:03:49,322 INFO L273 TraceCheckUtils]: 78: Hoare triple {58409#true} assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; {58409#true} is VALID [2018-11-23 13:03:49,322 INFO L273 TraceCheckUtils]: 79: Hoare triple {58409#true} assume 3 == ~blastFlag~0;~blastFlag~0 := 4; {58411#(= 4 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:03:49,323 INFO L273 TraceCheckUtils]: 80: Hoare triple {58411#(= 4 ssl3_connect_~blastFlag~0)} assume !(~ret~0 <= 0);call write~int(4432, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~tmp___6~0 := #t~nondet74;havoc #t~nondet74; {58411#(= 4 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:03:49,323 INFO L273 TraceCheckUtils]: 81: Hoare triple {58411#(= 4 ssl3_connect_~blastFlag~0)} assume !(0 == ~tmp___6~0); {58411#(= 4 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:03:49,325 INFO L273 TraceCheckUtils]: 82: Hoare triple {58411#(= 4 ssl3_connect_~blastFlag~0)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {58411#(= 4 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:03:49,325 INFO L273 TraceCheckUtils]: 83: Hoare triple {58411#(= 4 ssl3_connect_~blastFlag~0)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {58411#(= 4 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:03:49,327 INFO L273 TraceCheckUtils]: 84: Hoare triple {58411#(= 4 ssl3_connect_~blastFlag~0)} ~skip~0 := 0; {58411#(= 4 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:03:49,327 INFO L273 TraceCheckUtils]: 85: Hoare triple {58411#(= 4 ssl3_connect_~blastFlag~0)} assume !false; {58411#(= 4 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:03:49,329 INFO L273 TraceCheckUtils]: 86: Hoare triple {58411#(= 4 ssl3_connect_~blastFlag~0)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(= 4 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:03:49,329 INFO L273 TraceCheckUtils]: 87: Hoare triple {58411#(= 4 ssl3_connect_~blastFlag~0)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(= 4 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:03:49,331 INFO L273 TraceCheckUtils]: 88: Hoare triple {58411#(= 4 ssl3_connect_~blastFlag~0)} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(= 4 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:03:49,331 INFO L273 TraceCheckUtils]: 89: Hoare triple {58411#(= 4 ssl3_connect_~blastFlag~0)} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(= 4 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:03:49,333 INFO L273 TraceCheckUtils]: 90: Hoare triple {58411#(= 4 ssl3_connect_~blastFlag~0)} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(= 4 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:03:49,333 INFO L273 TraceCheckUtils]: 91: Hoare triple {58411#(= 4 ssl3_connect_~blastFlag~0)} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(= 4 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:03:49,335 INFO L273 TraceCheckUtils]: 92: Hoare triple {58411#(= 4 ssl3_connect_~blastFlag~0)} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(= 4 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:03:49,335 INFO L273 TraceCheckUtils]: 93: Hoare triple {58411#(= 4 ssl3_connect_~blastFlag~0)} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(= 4 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:03:49,335 INFO L273 TraceCheckUtils]: 94: Hoare triple {58411#(= 4 ssl3_connect_~blastFlag~0)} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(= 4 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:03:49,336 INFO L273 TraceCheckUtils]: 95: Hoare triple {58411#(= 4 ssl3_connect_~blastFlag~0)} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(= 4 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:03:49,337 INFO L273 TraceCheckUtils]: 96: Hoare triple {58411#(= 4 ssl3_connect_~blastFlag~0)} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(= 4 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:03:49,337 INFO L273 TraceCheckUtils]: 97: Hoare triple {58411#(= 4 ssl3_connect_~blastFlag~0)} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(= 4 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:03:49,339 INFO L273 TraceCheckUtils]: 98: Hoare triple {58411#(= 4 ssl3_connect_~blastFlag~0)} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(= 4 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:03:49,339 INFO L273 TraceCheckUtils]: 99: Hoare triple {58411#(= 4 ssl3_connect_~blastFlag~0)} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {58411#(= 4 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:03:49,339 INFO L273 TraceCheckUtils]: 100: Hoare triple {58411#(= 4 ssl3_connect_~blastFlag~0)} assume 4432 == #t~mem35;havoc #t~mem35; {58411#(= 4 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:03:49,340 INFO L273 TraceCheckUtils]: 101: Hoare triple {58411#(= 4 ssl3_connect_~blastFlag~0)} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {58411#(= 4 ssl3_connect_~blastFlag~0)} is VALID [2018-11-23 13:03:49,340 INFO L273 TraceCheckUtils]: 102: Hoare triple {58411#(= 4 ssl3_connect_~blastFlag~0)} assume 5 == ~blastFlag~0; {58410#false} is VALID [2018-11-23 13:03:49,340 INFO L273 TraceCheckUtils]: 103: Hoare triple {58410#false} assume !false; {58410#false} is VALID [2018-11-23 13:03:49,377 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 53 proven. 0 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2018-11-23 13:03:49,377 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:03:49,378 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 13:03:49,378 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 104 [2018-11-23 13:03:49,378 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:03:49,378 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 13:03:49,452 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 71 edges. 71 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:49,452 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 13:03:49,453 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 13:03:49,453 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:03:49,453 INFO L87 Difference]: Start difference. First operand 727 states and 1049 transitions. Second operand 3 states. [2018-11-23 13:03:50,266 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:50,267 INFO L93 Difference]: Finished difference Result 1287 states and 1862 transitions. [2018-11-23 13:03:50,267 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 13:03:50,267 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 104 [2018-11-23 13:03:50,267 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:03:50,267 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 13:03:50,269 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 490 transitions. [2018-11-23 13:03:50,269 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 13:03:50,271 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 490 transitions. [2018-11-23 13:03:50,271 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 490 transitions. [2018-11-23 13:03:50,782 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 490 edges. 490 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:50,806 INFO L225 Difference]: With dead ends: 1287 [2018-11-23 13:03:50,806 INFO L226 Difference]: Without dead ends: 724 [2018-11-23 13:03:50,807 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 13:03:50,808 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 724 states. [2018-11-23 13:03:50,987 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 724 to 724. [2018-11-23 13:03:50,988 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:03:50,988 INFO L82 GeneralOperation]: Start isEquivalent. First operand 724 states. Second operand 724 states. [2018-11-23 13:03:50,988 INFO L74 IsIncluded]: Start isIncluded. First operand 724 states. Second operand 724 states. [2018-11-23 13:03:50,988 INFO L87 Difference]: Start difference. First operand 724 states. Second operand 724 states. [2018-11-23 13:03:51,009 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:51,009 INFO L93 Difference]: Finished difference Result 724 states and 1039 transitions. [2018-11-23 13:03:51,009 INFO L276 IsEmpty]: Start isEmpty. Operand 724 states and 1039 transitions. [2018-11-23 13:03:51,010 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:51,010 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:51,010 INFO L74 IsIncluded]: Start isIncluded. First operand 724 states. Second operand 724 states. [2018-11-23 13:03:51,011 INFO L87 Difference]: Start difference. First operand 724 states. Second operand 724 states. [2018-11-23 13:03:51,033 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:51,033 INFO L93 Difference]: Finished difference Result 724 states and 1039 transitions. [2018-11-23 13:03:51,033 INFO L276 IsEmpty]: Start isEmpty. Operand 724 states and 1039 transitions. [2018-11-23 13:03:51,034 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:51,034 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:51,034 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:03:51,034 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:03:51,034 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 724 states. [2018-11-23 13:03:51,054 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 724 states to 724 states and 1039 transitions. [2018-11-23 13:03:51,054 INFO L78 Accepts]: Start accepts. Automaton has 724 states and 1039 transitions. Word has length 104 [2018-11-23 13:03:51,054 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:03:51,054 INFO L480 AbstractCegarLoop]: Abstraction has 724 states and 1039 transitions. [2018-11-23 13:03:51,055 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 13:03:51,055 INFO L276 IsEmpty]: Start isEmpty. Operand 724 states and 1039 transitions. [2018-11-23 13:03:51,055 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2018-11-23 13:03:51,056 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:03:51,056 INFO L402 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:03:51,056 INFO L423 AbstractCegarLoop]: === Iteration 26 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:03:51,056 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:03:51,056 INFO L82 PathProgramCache]: Analyzing trace with hash -148840977, now seen corresponding path program 1 times [2018-11-23 13:03:51,056 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:03:51,056 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:03:51,057 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:51,057 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:03:51,057 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:51,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:03:51,307 INFO L256 TraceCheckUtils]: 0: Hoare triple {62134#true} call ULTIMATE.init(); {62134#true} is VALID [2018-11-23 13:03:51,307 INFO L273 TraceCheckUtils]: 1: Hoare triple {62134#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,308 INFO L273 TraceCheckUtils]: 2: Hoare triple {62134#true} assume true; {62134#true} is VALID [2018-11-23 13:03:51,308 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {62134#true} {62134#true} #542#return; {62134#true} is VALID [2018-11-23 13:03:51,308 INFO L256 TraceCheckUtils]: 4: Hoare triple {62134#true} call #t~ret138 := main(); {62134#true} is VALID [2018-11-23 13:03:51,308 INFO L273 TraceCheckUtils]: 5: Hoare triple {62134#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {62134#true} is VALID [2018-11-23 13:03:51,309 INFO L256 TraceCheckUtils]: 6: Hoare triple {62134#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {62134#true} is VALID [2018-11-23 13:03:51,309 INFO L273 TraceCheckUtils]: 7: Hoare triple {62134#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,309 INFO L273 TraceCheckUtils]: 8: Hoare triple {62134#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {62134#true} is VALID [2018-11-23 13:03:51,309 INFO L273 TraceCheckUtils]: 9: Hoare triple {62134#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {62134#true} is VALID [2018-11-23 13:03:51,309 INFO L273 TraceCheckUtils]: 10: Hoare triple {62134#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {62134#true} is VALID [2018-11-23 13:03:51,310 INFO L273 TraceCheckUtils]: 11: Hoare triple {62134#true} assume !false; {62134#true} is VALID [2018-11-23 13:03:51,310 INFO L273 TraceCheckUtils]: 12: Hoare triple {62134#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,310 INFO L273 TraceCheckUtils]: 13: Hoare triple {62134#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,310 INFO L273 TraceCheckUtils]: 14: Hoare triple {62134#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,310 INFO L273 TraceCheckUtils]: 15: Hoare triple {62134#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,310 INFO L273 TraceCheckUtils]: 16: Hoare triple {62134#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,311 INFO L273 TraceCheckUtils]: 17: Hoare triple {62134#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,311 INFO L273 TraceCheckUtils]: 18: Hoare triple {62134#true} assume 4368 == #t~mem27;havoc #t~mem27; {62134#true} is VALID [2018-11-23 13:03:51,311 INFO L273 TraceCheckUtils]: 19: Hoare triple {62134#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {62134#true} is VALID [2018-11-23 13:03:51,311 INFO L273 TraceCheckUtils]: 20: Hoare triple {62134#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {62134#true} is VALID [2018-11-23 13:03:51,311 INFO L273 TraceCheckUtils]: 21: Hoare triple {62134#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,311 INFO L273 TraceCheckUtils]: 22: Hoare triple {62134#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {62134#true} is VALID [2018-11-23 13:03:51,311 INFO L273 TraceCheckUtils]: 23: Hoare triple {62134#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,311 INFO L273 TraceCheckUtils]: 24: Hoare triple {62134#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {62134#true} is VALID [2018-11-23 13:03:51,311 INFO L273 TraceCheckUtils]: 25: Hoare triple {62134#true} ~skip~0 := 0; {62134#true} is VALID [2018-11-23 13:03:51,312 INFO L273 TraceCheckUtils]: 26: Hoare triple {62134#true} assume !false; {62134#true} is VALID [2018-11-23 13:03:51,312 INFO L273 TraceCheckUtils]: 27: Hoare triple {62134#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,312 INFO L273 TraceCheckUtils]: 28: Hoare triple {62134#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,312 INFO L273 TraceCheckUtils]: 29: Hoare triple {62134#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,312 INFO L273 TraceCheckUtils]: 30: Hoare triple {62134#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,312 INFO L273 TraceCheckUtils]: 31: Hoare triple {62134#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,312 INFO L273 TraceCheckUtils]: 32: Hoare triple {62134#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,312 INFO L273 TraceCheckUtils]: 33: Hoare triple {62134#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,312 INFO L273 TraceCheckUtils]: 34: Hoare triple {62134#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,313 INFO L273 TraceCheckUtils]: 35: Hoare triple {62134#true} assume 4384 == #t~mem29;havoc #t~mem29; {62134#true} is VALID [2018-11-23 13:03:51,313 INFO L273 TraceCheckUtils]: 36: Hoare triple {62134#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {62134#true} is VALID [2018-11-23 13:03:51,313 INFO L273 TraceCheckUtils]: 37: Hoare triple {62134#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {62134#true} is VALID [2018-11-23 13:03:51,313 INFO L273 TraceCheckUtils]: 38: Hoare triple {62134#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,313 INFO L273 TraceCheckUtils]: 39: Hoare triple {62134#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,313 INFO L273 TraceCheckUtils]: 40: Hoare triple {62134#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,313 INFO L273 TraceCheckUtils]: 41: Hoare triple {62134#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,313 INFO L273 TraceCheckUtils]: 42: Hoare triple {62134#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {62134#true} is VALID [2018-11-23 13:03:51,314 INFO L273 TraceCheckUtils]: 43: Hoare triple {62134#true} ~skip~0 := 0; {62134#true} is VALID [2018-11-23 13:03:51,314 INFO L273 TraceCheckUtils]: 44: Hoare triple {62134#true} assume !false; {62134#true} is VALID [2018-11-23 13:03:51,314 INFO L273 TraceCheckUtils]: 45: Hoare triple {62134#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,314 INFO L273 TraceCheckUtils]: 46: Hoare triple {62134#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,314 INFO L273 TraceCheckUtils]: 47: Hoare triple {62134#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,314 INFO L273 TraceCheckUtils]: 48: Hoare triple {62134#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,314 INFO L273 TraceCheckUtils]: 49: Hoare triple {62134#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,314 INFO L273 TraceCheckUtils]: 50: Hoare triple {62134#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,314 INFO L273 TraceCheckUtils]: 51: Hoare triple {62134#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,315 INFO L273 TraceCheckUtils]: 52: Hoare triple {62134#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,315 INFO L273 TraceCheckUtils]: 53: Hoare triple {62134#true} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,315 INFO L273 TraceCheckUtils]: 54: Hoare triple {62134#true} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,315 INFO L273 TraceCheckUtils]: 55: Hoare triple {62134#true} assume 4400 == #t~mem31;havoc #t~mem31; {62134#true} is VALID [2018-11-23 13:03:51,315 INFO L273 TraceCheckUtils]: 56: Hoare triple {62134#true} call #t~mem69.base, #t~mem69.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem70.base, #t~mem70.offset := read~$Pointer$(#t~mem69.base, 836 + #t~mem69.offset, 4);call #t~mem71 := read~int(#t~mem70.base, 12 + #t~mem70.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,315 INFO L273 TraceCheckUtils]: 57: Hoare triple {62134#true} assume !(0 != ~bitwiseAnd(#t~mem71, 256) % 4294967296);havoc #t~mem69.base, #t~mem69.offset;havoc #t~mem71;havoc #t~mem70.base, #t~mem70.offset;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~ret~0 := #t~nondet72;havoc #t~nondet72; {62134#true} is VALID [2018-11-23 13:03:51,315 INFO L273 TraceCheckUtils]: 58: Hoare triple {62134#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {62134#true} is VALID [2018-11-23 13:03:51,315 INFO L273 TraceCheckUtils]: 59: Hoare triple {62134#true} assume !(~ret~0 <= 0); {62134#true} is VALID [2018-11-23 13:03:51,315 INFO L273 TraceCheckUtils]: 60: Hoare triple {62134#true} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,316 INFO L273 TraceCheckUtils]: 61: Hoare triple {62134#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,316 INFO L273 TraceCheckUtils]: 62: Hoare triple {62134#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {62134#true} is VALID [2018-11-23 13:03:51,316 INFO L273 TraceCheckUtils]: 63: Hoare triple {62134#true} ~skip~0 := 0; {62134#true} is VALID [2018-11-23 13:03:51,316 INFO L273 TraceCheckUtils]: 64: Hoare triple {62134#true} assume !false; {62134#true} is VALID [2018-11-23 13:03:51,316 INFO L273 TraceCheckUtils]: 65: Hoare triple {62134#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,316 INFO L273 TraceCheckUtils]: 66: Hoare triple {62134#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,316 INFO L273 TraceCheckUtils]: 67: Hoare triple {62134#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,316 INFO L273 TraceCheckUtils]: 68: Hoare triple {62134#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,316 INFO L273 TraceCheckUtils]: 69: Hoare triple {62134#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,317 INFO L273 TraceCheckUtils]: 70: Hoare triple {62134#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,317 INFO L273 TraceCheckUtils]: 71: Hoare triple {62134#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,317 INFO L273 TraceCheckUtils]: 72: Hoare triple {62134#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,317 INFO L273 TraceCheckUtils]: 73: Hoare triple {62134#true} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,317 INFO L273 TraceCheckUtils]: 74: Hoare triple {62134#true} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,317 INFO L273 TraceCheckUtils]: 75: Hoare triple {62134#true} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,317 INFO L273 TraceCheckUtils]: 76: Hoare triple {62134#true} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {62134#true} is VALID [2018-11-23 13:03:51,317 INFO L273 TraceCheckUtils]: 77: Hoare triple {62134#true} assume 4416 == #t~mem33;havoc #t~mem33; {62134#true} is VALID [2018-11-23 13:03:51,317 INFO L273 TraceCheckUtils]: 78: Hoare triple {62134#true} assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; {62134#true} is VALID [2018-11-23 13:03:51,318 INFO L273 TraceCheckUtils]: 79: Hoare triple {62134#true} assume 3 == ~blastFlag~0;~blastFlag~0 := 4; {62134#true} is VALID [2018-11-23 13:03:51,319 INFO L273 TraceCheckUtils]: 80: Hoare triple {62134#true} assume !(~ret~0 <= 0);call write~int(4432, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~tmp___6~0 := #t~nondet74;havoc #t~nondet74; {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:51,319 INFO L273 TraceCheckUtils]: 81: Hoare triple {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(0 == ~tmp___6~0); {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:51,319 INFO L273 TraceCheckUtils]: 82: Hoare triple {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:51,320 INFO L273 TraceCheckUtils]: 83: Hoare triple {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:51,320 INFO L273 TraceCheckUtils]: 84: Hoare triple {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} ~skip~0 := 0; {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:51,321 INFO L273 TraceCheckUtils]: 85: Hoare triple {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !false; {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:51,321 INFO L273 TraceCheckUtils]: 86: Hoare triple {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:51,322 INFO L273 TraceCheckUtils]: 87: Hoare triple {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:51,322 INFO L273 TraceCheckUtils]: 88: Hoare triple {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:51,323 INFO L273 TraceCheckUtils]: 89: Hoare triple {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:51,323 INFO L273 TraceCheckUtils]: 90: Hoare triple {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:51,324 INFO L273 TraceCheckUtils]: 91: Hoare triple {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:51,324 INFO L273 TraceCheckUtils]: 92: Hoare triple {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:51,325 INFO L273 TraceCheckUtils]: 93: Hoare triple {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:51,325 INFO L273 TraceCheckUtils]: 94: Hoare triple {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:51,326 INFO L273 TraceCheckUtils]: 95: Hoare triple {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:51,326 INFO L273 TraceCheckUtils]: 96: Hoare triple {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:51,327 INFO L273 TraceCheckUtils]: 97: Hoare triple {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:51,327 INFO L273 TraceCheckUtils]: 98: Hoare triple {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:03:51,328 INFO L273 TraceCheckUtils]: 99: Hoare triple {62136#(= 4432 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {62137#(= |ssl3_connect_#t~mem35| 4432)} is VALID [2018-11-23 13:03:51,328 INFO L273 TraceCheckUtils]: 100: Hoare triple {62137#(= |ssl3_connect_#t~mem35| 4432)} assume !(4432 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {62135#false} is VALID [2018-11-23 13:03:51,329 INFO L273 TraceCheckUtils]: 101: Hoare triple {62135#false} assume !(4433 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {62135#false} is VALID [2018-11-23 13:03:51,329 INFO L273 TraceCheckUtils]: 102: Hoare triple {62135#false} assume 4448 == #t~mem37;havoc #t~mem37; {62135#false} is VALID [2018-11-23 13:03:51,329 INFO L273 TraceCheckUtils]: 103: Hoare triple {62135#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {62135#false} is VALID [2018-11-23 13:03:51,329 INFO L273 TraceCheckUtils]: 104: Hoare triple {62135#false} assume 4 == ~blastFlag~0; {62135#false} is VALID [2018-11-23 13:03:51,330 INFO L273 TraceCheckUtils]: 105: Hoare triple {62135#false} assume !false; {62135#false} is VALID [2018-11-23 13:03:51,337 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 53 proven. 0 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2018-11-23 13:03:51,338 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:03:51,338 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:03:51,338 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 106 [2018-11-23 13:03:51,338 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:03:51,338 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:03:51,415 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 73 edges. 73 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:51,415 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:03:51,416 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:03:51,416 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:03:51,416 INFO L87 Difference]: Start difference. First operand 724 states and 1039 transitions. Second operand 4 states. [2018-11-23 13:03:53,116 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:53,117 INFO L93 Difference]: Finished difference Result 1692 states and 2439 transitions. [2018-11-23 13:03:53,117 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:03:53,117 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 106 [2018-11-23 13:03:53,117 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:03:53,117 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:53,119 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 414 transitions. [2018-11-23 13:03:53,119 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:53,121 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 414 transitions. [2018-11-23 13:03:53,121 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 414 transitions. [2018-11-23 13:03:53,559 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 414 edges. 414 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:53,601 INFO L225 Difference]: With dead ends: 1692 [2018-11-23 13:03:53,601 INFO L226 Difference]: Without dead ends: 981 [2018-11-23 13:03:53,602 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:03:53,603 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 981 states. [2018-11-23 13:03:53,881 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 981 to 844. [2018-11-23 13:03:53,881 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:03:53,881 INFO L82 GeneralOperation]: Start isEquivalent. First operand 981 states. Second operand 844 states. [2018-11-23 13:03:53,881 INFO L74 IsIncluded]: Start isIncluded. First operand 981 states. Second operand 844 states. [2018-11-23 13:03:53,881 INFO L87 Difference]: Start difference. First operand 981 states. Second operand 844 states. [2018-11-23 13:03:53,917 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:53,918 INFO L93 Difference]: Finished difference Result 981 states and 1412 transitions. [2018-11-23 13:03:53,918 INFO L276 IsEmpty]: Start isEmpty. Operand 981 states and 1412 transitions. [2018-11-23 13:03:53,919 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:53,919 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:53,919 INFO L74 IsIncluded]: Start isIncluded. First operand 844 states. Second operand 981 states. [2018-11-23 13:03:53,919 INFO L87 Difference]: Start difference. First operand 844 states. Second operand 981 states. [2018-11-23 13:03:53,949 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:53,949 INFO L93 Difference]: Finished difference Result 981 states and 1412 transitions. [2018-11-23 13:03:53,949 INFO L276 IsEmpty]: Start isEmpty. Operand 981 states and 1412 transitions. [2018-11-23 13:03:53,950 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:53,950 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:53,950 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:03:53,950 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:03:53,950 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 844 states. [2018-11-23 13:03:53,981 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 844 states to 844 states and 1249 transitions. [2018-11-23 13:03:53,981 INFO L78 Accepts]: Start accepts. Automaton has 844 states and 1249 transitions. Word has length 106 [2018-11-23 13:03:53,981 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:03:53,981 INFO L480 AbstractCegarLoop]: Abstraction has 844 states and 1249 transitions. [2018-11-23 13:03:53,982 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:03:53,982 INFO L276 IsEmpty]: Start isEmpty. Operand 844 states and 1249 transitions. [2018-11-23 13:03:53,983 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2018-11-23 13:03:53,983 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:03:53,984 INFO L402 BasicCegarLoop]: trace histogram [6, 6, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:03:53,984 INFO L423 AbstractCegarLoop]: === Iteration 27 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:03:53,984 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:03:53,984 INFO L82 PathProgramCache]: Analyzing trace with hash -1084285646, now seen corresponding path program 1 times [2018-11-23 13:03:53,984 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:03:53,985 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:03:53,985 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:53,986 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:03:53,986 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:54,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:03:54,286 WARN L180 SmtUtils]: Spent 110.00 ms on a formula simplification. DAG size of input: 12 DAG size of output: 9 [2018-11-23 13:03:54,602 INFO L256 TraceCheckUtils]: 0: Hoare triple {66964#true} call ULTIMATE.init(); {66964#true} is VALID [2018-11-23 13:03:54,602 INFO L273 TraceCheckUtils]: 1: Hoare triple {66964#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,602 INFO L273 TraceCheckUtils]: 2: Hoare triple {66964#true} assume true; {66964#true} is VALID [2018-11-23 13:03:54,603 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {66964#true} {66964#true} #542#return; {66964#true} is VALID [2018-11-23 13:03:54,603 INFO L256 TraceCheckUtils]: 4: Hoare triple {66964#true} call #t~ret138 := main(); {66964#true} is VALID [2018-11-23 13:03:54,603 INFO L273 TraceCheckUtils]: 5: Hoare triple {66964#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {66964#true} is VALID [2018-11-23 13:03:54,603 INFO L256 TraceCheckUtils]: 6: Hoare triple {66964#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {66964#true} is VALID [2018-11-23 13:03:54,603 INFO L273 TraceCheckUtils]: 7: Hoare triple {66964#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,603 INFO L273 TraceCheckUtils]: 8: Hoare triple {66964#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {66964#true} is VALID [2018-11-23 13:03:54,603 INFO L273 TraceCheckUtils]: 9: Hoare triple {66964#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {66964#true} is VALID [2018-11-23 13:03:54,604 INFO L273 TraceCheckUtils]: 10: Hoare triple {66964#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {66964#true} is VALID [2018-11-23 13:03:54,604 INFO L273 TraceCheckUtils]: 11: Hoare triple {66964#true} assume !false; {66964#true} is VALID [2018-11-23 13:03:54,604 INFO L273 TraceCheckUtils]: 12: Hoare triple {66964#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,604 INFO L273 TraceCheckUtils]: 13: Hoare triple {66964#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,604 INFO L273 TraceCheckUtils]: 14: Hoare triple {66964#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,604 INFO L273 TraceCheckUtils]: 15: Hoare triple {66964#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,604 INFO L273 TraceCheckUtils]: 16: Hoare triple {66964#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,604 INFO L273 TraceCheckUtils]: 17: Hoare triple {66964#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,604 INFO L273 TraceCheckUtils]: 18: Hoare triple {66964#true} assume 4368 == #t~mem27;havoc #t~mem27; {66964#true} is VALID [2018-11-23 13:03:54,605 INFO L273 TraceCheckUtils]: 19: Hoare triple {66964#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {66964#true} is VALID [2018-11-23 13:03:54,605 INFO L273 TraceCheckUtils]: 20: Hoare triple {66964#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {66964#true} is VALID [2018-11-23 13:03:54,605 INFO L273 TraceCheckUtils]: 21: Hoare triple {66964#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,605 INFO L273 TraceCheckUtils]: 22: Hoare triple {66964#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {66964#true} is VALID [2018-11-23 13:03:54,605 INFO L273 TraceCheckUtils]: 23: Hoare triple {66964#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,605 INFO L273 TraceCheckUtils]: 24: Hoare triple {66964#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {66964#true} is VALID [2018-11-23 13:03:54,605 INFO L273 TraceCheckUtils]: 25: Hoare triple {66964#true} ~skip~0 := 0; {66964#true} is VALID [2018-11-23 13:03:54,606 INFO L273 TraceCheckUtils]: 26: Hoare triple {66964#true} assume !false; {66964#true} is VALID [2018-11-23 13:03:54,606 INFO L273 TraceCheckUtils]: 27: Hoare triple {66964#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,606 INFO L273 TraceCheckUtils]: 28: Hoare triple {66964#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,606 INFO L273 TraceCheckUtils]: 29: Hoare triple {66964#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,606 INFO L273 TraceCheckUtils]: 30: Hoare triple {66964#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,606 INFO L273 TraceCheckUtils]: 31: Hoare triple {66964#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,606 INFO L273 TraceCheckUtils]: 32: Hoare triple {66964#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,606 INFO L273 TraceCheckUtils]: 33: Hoare triple {66964#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,606 INFO L273 TraceCheckUtils]: 34: Hoare triple {66964#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,607 INFO L273 TraceCheckUtils]: 35: Hoare triple {66964#true} assume 4384 == #t~mem29;havoc #t~mem29; {66964#true} is VALID [2018-11-23 13:03:54,607 INFO L273 TraceCheckUtils]: 36: Hoare triple {66964#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {66964#true} is VALID [2018-11-23 13:03:54,607 INFO L273 TraceCheckUtils]: 37: Hoare triple {66964#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {66964#true} is VALID [2018-11-23 13:03:54,607 INFO L273 TraceCheckUtils]: 38: Hoare triple {66964#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,607 INFO L273 TraceCheckUtils]: 39: Hoare triple {66964#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,607 INFO L273 TraceCheckUtils]: 40: Hoare triple {66964#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,607 INFO L273 TraceCheckUtils]: 41: Hoare triple {66964#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,607 INFO L273 TraceCheckUtils]: 42: Hoare triple {66964#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {66964#true} is VALID [2018-11-23 13:03:54,607 INFO L273 TraceCheckUtils]: 43: Hoare triple {66964#true} ~skip~0 := 0; {66964#true} is VALID [2018-11-23 13:03:54,608 INFO L273 TraceCheckUtils]: 44: Hoare triple {66964#true} assume !false; {66964#true} is VALID [2018-11-23 13:03:54,608 INFO L273 TraceCheckUtils]: 45: Hoare triple {66964#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,608 INFO L273 TraceCheckUtils]: 46: Hoare triple {66964#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,608 INFO L273 TraceCheckUtils]: 47: Hoare triple {66964#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,608 INFO L273 TraceCheckUtils]: 48: Hoare triple {66964#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,608 INFO L273 TraceCheckUtils]: 49: Hoare triple {66964#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,608 INFO L273 TraceCheckUtils]: 50: Hoare triple {66964#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,608 INFO L273 TraceCheckUtils]: 51: Hoare triple {66964#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,608 INFO L273 TraceCheckUtils]: 52: Hoare triple {66964#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,609 INFO L273 TraceCheckUtils]: 53: Hoare triple {66964#true} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,609 INFO L273 TraceCheckUtils]: 54: Hoare triple {66964#true} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,609 INFO L273 TraceCheckUtils]: 55: Hoare triple {66964#true} assume 4400 == #t~mem31;havoc #t~mem31; {66964#true} is VALID [2018-11-23 13:03:54,609 INFO L273 TraceCheckUtils]: 56: Hoare triple {66964#true} call #t~mem69.base, #t~mem69.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem70.base, #t~mem70.offset := read~$Pointer$(#t~mem69.base, 836 + #t~mem69.offset, 4);call #t~mem71 := read~int(#t~mem70.base, 12 + #t~mem70.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,609 INFO L273 TraceCheckUtils]: 57: Hoare triple {66964#true} assume !(0 != ~bitwiseAnd(#t~mem71, 256) % 4294967296);havoc #t~mem69.base, #t~mem69.offset;havoc #t~mem71;havoc #t~mem70.base, #t~mem70.offset;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~ret~0 := #t~nondet72;havoc #t~nondet72; {66964#true} is VALID [2018-11-23 13:03:54,609 INFO L273 TraceCheckUtils]: 58: Hoare triple {66964#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {66964#true} is VALID [2018-11-23 13:03:54,609 INFO L273 TraceCheckUtils]: 59: Hoare triple {66964#true} assume !(~ret~0 <= 0); {66964#true} is VALID [2018-11-23 13:03:54,609 INFO L273 TraceCheckUtils]: 60: Hoare triple {66964#true} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,609 INFO L273 TraceCheckUtils]: 61: Hoare triple {66964#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,610 INFO L273 TraceCheckUtils]: 62: Hoare triple {66964#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {66964#true} is VALID [2018-11-23 13:03:54,610 INFO L273 TraceCheckUtils]: 63: Hoare triple {66964#true} ~skip~0 := 0; {66964#true} is VALID [2018-11-23 13:03:54,610 INFO L273 TraceCheckUtils]: 64: Hoare triple {66964#true} assume !false; {66964#true} is VALID [2018-11-23 13:03:54,610 INFO L273 TraceCheckUtils]: 65: Hoare triple {66964#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,610 INFO L273 TraceCheckUtils]: 66: Hoare triple {66964#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,610 INFO L273 TraceCheckUtils]: 67: Hoare triple {66964#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,610 INFO L273 TraceCheckUtils]: 68: Hoare triple {66964#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,610 INFO L273 TraceCheckUtils]: 69: Hoare triple {66964#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,611 INFO L273 TraceCheckUtils]: 70: Hoare triple {66964#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,611 INFO L273 TraceCheckUtils]: 71: Hoare triple {66964#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,611 INFO L273 TraceCheckUtils]: 72: Hoare triple {66964#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,611 INFO L273 TraceCheckUtils]: 73: Hoare triple {66964#true} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,611 INFO L273 TraceCheckUtils]: 74: Hoare triple {66964#true} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,611 INFO L273 TraceCheckUtils]: 75: Hoare triple {66964#true} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,611 INFO L273 TraceCheckUtils]: 76: Hoare triple {66964#true} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {66964#true} is VALID [2018-11-23 13:03:54,611 INFO L273 TraceCheckUtils]: 77: Hoare triple {66964#true} assume 4416 == #t~mem33;havoc #t~mem33; {66964#true} is VALID [2018-11-23 13:03:54,611 INFO L273 TraceCheckUtils]: 78: Hoare triple {66964#true} assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; {66964#true} is VALID [2018-11-23 13:03:54,612 INFO L273 TraceCheckUtils]: 79: Hoare triple {66964#true} assume 3 == ~blastFlag~0;~blastFlag~0 := 4; {66964#true} is VALID [2018-11-23 13:03:54,613 INFO L273 TraceCheckUtils]: 80: Hoare triple {66964#true} assume !(~ret~0 <= 0);call write~int(4432, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~tmp___6~0 := #t~nondet74;havoc #t~nondet74; {66966#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:03:54,614 INFO L273 TraceCheckUtils]: 81: Hoare triple {66966#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(0 == ~tmp___6~0); {66966#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:03:54,614 INFO L273 TraceCheckUtils]: 82: Hoare triple {66966#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {66966#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:03:54,616 INFO L273 TraceCheckUtils]: 83: Hoare triple {66966#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {66966#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:03:54,616 INFO L273 TraceCheckUtils]: 84: Hoare triple {66966#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} ~skip~0 := 0; {66966#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:03:54,618 INFO L273 TraceCheckUtils]: 85: Hoare triple {66966#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !false; {66966#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:03:54,618 INFO L273 TraceCheckUtils]: 86: Hoare triple {66966#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {66967#(= |ssl3_connect_#t~mem22| 4432)} is VALID [2018-11-23 13:03:54,621 INFO L273 TraceCheckUtils]: 87: Hoare triple {66967#(= |ssl3_connect_#t~mem22| 4432)} assume 12292 == #t~mem22;havoc #t~mem22; {66965#false} is VALID [2018-11-23 13:03:54,621 INFO L273 TraceCheckUtils]: 88: Hoare triple {66965#false} call write~int(1, ~s.base, 40 + ~s.offset, 4);call write~int(4096, ~s.base, 52 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem56 := read~int(#t~mem55.base, 64 + #t~mem55.offset, 4);call write~int(1 + #t~mem56, #t~mem55.base, 64 + #t~mem55.offset, 4);havoc #t~mem55.base, #t~mem55.offset;havoc #t~mem56; {66965#false} is VALID [2018-11-23 13:03:54,621 INFO L273 TraceCheckUtils]: 89: Hoare triple {66965#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {66965#false} is VALID [2018-11-23 13:03:54,621 INFO L273 TraceCheckUtils]: 90: Hoare triple {66965#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {66965#false} is VALID [2018-11-23 13:03:54,621 INFO L273 TraceCheckUtils]: 91: Hoare triple {66965#false} call #t~mem57 := read~int(~s.base, ~s.offset, 4); {66965#false} is VALID [2018-11-23 13:03:54,621 INFO L273 TraceCheckUtils]: 92: Hoare triple {66965#false} assume !(768 != ~bitwiseAnd(#t~mem57, 65280));havoc #t~mem57;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {66965#false} is VALID [2018-11-23 13:03:54,621 INFO L273 TraceCheckUtils]: 93: Hoare triple {66965#false} assume !(0 == (#t~mem58.base + #t~mem58.offset) % 4294967296);havoc #t~mem58.base, #t~mem58.offset; {66965#false} is VALID [2018-11-23 13:03:54,621 INFO L273 TraceCheckUtils]: 94: Hoare triple {66965#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {66965#false} is VALID [2018-11-23 13:03:54,622 INFO L273 TraceCheckUtils]: 95: Hoare triple {66965#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {66965#false} is VALID [2018-11-23 13:03:54,622 INFO L273 TraceCheckUtils]: 96: Hoare triple {66965#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem63 := read~int(#t~mem62.base, 60 + #t~mem62.offset, 4);call write~int(1 + #t~mem63, #t~mem62.base, 60 + #t~mem62.offset, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, 64 + ~s.offset, 4); {66965#false} is VALID [2018-11-23 13:03:54,622 INFO L273 TraceCheckUtils]: 97: Hoare triple {66965#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {66965#false} is VALID [2018-11-23 13:03:54,622 INFO L273 TraceCheckUtils]: 98: Hoare triple {66965#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {66965#false} is VALID [2018-11-23 13:03:54,622 INFO L273 TraceCheckUtils]: 99: Hoare triple {66965#false} ~skip~0 := 0; {66965#false} is VALID [2018-11-23 13:03:54,622 INFO L273 TraceCheckUtils]: 100: Hoare triple {66965#false} assume !false; {66965#false} is VALID [2018-11-23 13:03:54,622 INFO L273 TraceCheckUtils]: 101: Hoare triple {66965#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {66965#false} is VALID [2018-11-23 13:03:54,622 INFO L273 TraceCheckUtils]: 102: Hoare triple {66965#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {66965#false} is VALID [2018-11-23 13:03:54,623 INFO L273 TraceCheckUtils]: 103: Hoare triple {66965#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {66965#false} is VALID [2018-11-23 13:03:54,623 INFO L273 TraceCheckUtils]: 104: Hoare triple {66965#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {66965#false} is VALID [2018-11-23 13:03:54,623 INFO L273 TraceCheckUtils]: 105: Hoare triple {66965#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {66965#false} is VALID [2018-11-23 13:03:54,623 INFO L273 TraceCheckUtils]: 106: Hoare triple {66965#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {66965#false} is VALID [2018-11-23 13:03:54,623 INFO L273 TraceCheckUtils]: 107: Hoare triple {66965#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {66965#false} is VALID [2018-11-23 13:03:54,623 INFO L273 TraceCheckUtils]: 108: Hoare triple {66965#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {66965#false} is VALID [2018-11-23 13:03:54,623 INFO L273 TraceCheckUtils]: 109: Hoare triple {66965#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {66965#false} is VALID [2018-11-23 13:03:54,623 INFO L273 TraceCheckUtils]: 110: Hoare triple {66965#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {66965#false} is VALID [2018-11-23 13:03:54,623 INFO L273 TraceCheckUtils]: 111: Hoare triple {66965#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {66965#false} is VALID [2018-11-23 13:03:54,624 INFO L273 TraceCheckUtils]: 112: Hoare triple {66965#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {66965#false} is VALID [2018-11-23 13:03:54,624 INFO L273 TraceCheckUtils]: 113: Hoare triple {66965#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {66965#false} is VALID [2018-11-23 13:03:54,624 INFO L273 TraceCheckUtils]: 114: Hoare triple {66965#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {66965#false} is VALID [2018-11-23 13:03:54,624 INFO L273 TraceCheckUtils]: 115: Hoare triple {66965#false} assume !(4432 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {66965#false} is VALID [2018-11-23 13:03:54,624 INFO L273 TraceCheckUtils]: 116: Hoare triple {66965#false} assume !(4433 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {66965#false} is VALID [2018-11-23 13:03:54,624 INFO L273 TraceCheckUtils]: 117: Hoare triple {66965#false} assume 4448 == #t~mem37;havoc #t~mem37; {66965#false} is VALID [2018-11-23 13:03:54,624 INFO L273 TraceCheckUtils]: 118: Hoare triple {66965#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {66965#false} is VALID [2018-11-23 13:03:54,624 INFO L273 TraceCheckUtils]: 119: Hoare triple {66965#false} assume 4 == ~blastFlag~0; {66965#false} is VALID [2018-11-23 13:03:54,624 INFO L273 TraceCheckUtils]: 120: Hoare triple {66965#false} assume !false; {66965#false} is VALID [2018-11-23 13:03:54,631 INFO L134 CoverageAnalysis]: Checked inductivity of 145 backedges. 80 proven. 0 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2018-11-23 13:03:54,631 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:03:54,631 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:03:54,631 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 121 [2018-11-23 13:03:54,631 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:03:54,631 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:03:54,722 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 88 edges. 88 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:54,723 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:03:54,723 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:03:54,723 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:03:54,723 INFO L87 Difference]: Start difference. First operand 844 states and 1249 transitions. Second operand 4 states. [2018-11-23 13:03:56,288 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:56,288 INFO L93 Difference]: Finished difference Result 1807 states and 2639 transitions. [2018-11-23 13:03:56,288 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:03:56,288 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 121 [2018-11-23 13:03:56,288 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:03:56,288 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:56,290 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 412 transitions. [2018-11-23 13:03:56,290 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:56,292 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 412 transitions. [2018-11-23 13:03:56,292 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 412 transitions. [2018-11-23 13:03:56,735 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 412 edges. 412 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:56,776 INFO L225 Difference]: With dead ends: 1807 [2018-11-23 13:03:56,777 INFO L226 Difference]: Without dead ends: 976 [2018-11-23 13:03:56,778 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:03:56,778 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 976 states. [2018-11-23 13:03:57,142 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 976 to 844. [2018-11-23 13:03:57,142 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:03:57,142 INFO L82 GeneralOperation]: Start isEquivalent. First operand 976 states. Second operand 844 states. [2018-11-23 13:03:57,143 INFO L74 IsIncluded]: Start isIncluded. First operand 976 states. Second operand 844 states. [2018-11-23 13:03:57,143 INFO L87 Difference]: Start difference. First operand 976 states. Second operand 844 states. [2018-11-23 13:03:57,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:57,181 INFO L93 Difference]: Finished difference Result 976 states and 1402 transitions. [2018-11-23 13:03:57,181 INFO L276 IsEmpty]: Start isEmpty. Operand 976 states and 1402 transitions. [2018-11-23 13:03:57,182 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:57,183 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:57,183 INFO L74 IsIncluded]: Start isIncluded. First operand 844 states. Second operand 976 states. [2018-11-23 13:03:57,183 INFO L87 Difference]: Start difference. First operand 844 states. Second operand 976 states. [2018-11-23 13:03:57,215 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:57,215 INFO L93 Difference]: Finished difference Result 976 states and 1402 transitions. [2018-11-23 13:03:57,215 INFO L276 IsEmpty]: Start isEmpty. Operand 976 states and 1402 transitions. [2018-11-23 13:03:57,216 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:03:57,216 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:03:57,216 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:03:57,216 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:03:57,216 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 844 states. [2018-11-23 13:03:57,245 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 844 states to 844 states and 1244 transitions. [2018-11-23 13:03:57,245 INFO L78 Accepts]: Start accepts. Automaton has 844 states and 1244 transitions. Word has length 121 [2018-11-23 13:03:57,245 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:03:57,245 INFO L480 AbstractCegarLoop]: Abstraction has 844 states and 1244 transitions. [2018-11-23 13:03:57,245 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:03:57,245 INFO L276 IsEmpty]: Start isEmpty. Operand 844 states and 1244 transitions. [2018-11-23 13:03:57,246 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2018-11-23 13:03:57,246 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:03:57,247 INFO L402 BasicCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 5, 5, 5, 5, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:03:57,247 INFO L423 AbstractCegarLoop]: === Iteration 28 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:03:57,247 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:03:57,247 INFO L82 PathProgramCache]: Analyzing trace with hash -1832311600, now seen corresponding path program 1 times [2018-11-23 13:03:57,247 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:03:57,247 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:03:57,248 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:57,248 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:03:57,248 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:03:57,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:03:57,530 INFO L256 TraceCheckUtils]: 0: Hoare triple {71899#true} call ULTIMATE.init(); {71899#true} is VALID [2018-11-23 13:03:57,530 INFO L273 TraceCheckUtils]: 1: Hoare triple {71899#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,531 INFO L273 TraceCheckUtils]: 2: Hoare triple {71899#true} assume true; {71899#true} is VALID [2018-11-23 13:03:57,531 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {71899#true} {71899#true} #542#return; {71899#true} is VALID [2018-11-23 13:03:57,531 INFO L256 TraceCheckUtils]: 4: Hoare triple {71899#true} call #t~ret138 := main(); {71899#true} is VALID [2018-11-23 13:03:57,532 INFO L273 TraceCheckUtils]: 5: Hoare triple {71899#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {71899#true} is VALID [2018-11-23 13:03:57,532 INFO L256 TraceCheckUtils]: 6: Hoare triple {71899#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {71899#true} is VALID [2018-11-23 13:03:57,532 INFO L273 TraceCheckUtils]: 7: Hoare triple {71899#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,532 INFO L273 TraceCheckUtils]: 8: Hoare triple {71899#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {71899#true} is VALID [2018-11-23 13:03:57,532 INFO L273 TraceCheckUtils]: 9: Hoare triple {71899#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {71899#true} is VALID [2018-11-23 13:03:57,532 INFO L273 TraceCheckUtils]: 10: Hoare triple {71899#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {71899#true} is VALID [2018-11-23 13:03:57,532 INFO L273 TraceCheckUtils]: 11: Hoare triple {71899#true} assume !false; {71899#true} is VALID [2018-11-23 13:03:57,533 INFO L273 TraceCheckUtils]: 12: Hoare triple {71899#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,533 INFO L273 TraceCheckUtils]: 13: Hoare triple {71899#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,533 INFO L273 TraceCheckUtils]: 14: Hoare triple {71899#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,533 INFO L273 TraceCheckUtils]: 15: Hoare triple {71899#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,533 INFO L273 TraceCheckUtils]: 16: Hoare triple {71899#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,533 INFO L273 TraceCheckUtils]: 17: Hoare triple {71899#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,533 INFO L273 TraceCheckUtils]: 18: Hoare triple {71899#true} assume 4368 == #t~mem27;havoc #t~mem27; {71899#true} is VALID [2018-11-23 13:03:57,533 INFO L273 TraceCheckUtils]: 19: Hoare triple {71899#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {71899#true} is VALID [2018-11-23 13:03:57,533 INFO L273 TraceCheckUtils]: 20: Hoare triple {71899#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {71899#true} is VALID [2018-11-23 13:03:57,534 INFO L273 TraceCheckUtils]: 21: Hoare triple {71899#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,534 INFO L273 TraceCheckUtils]: 22: Hoare triple {71899#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {71899#true} is VALID [2018-11-23 13:03:57,534 INFO L273 TraceCheckUtils]: 23: Hoare triple {71899#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,534 INFO L273 TraceCheckUtils]: 24: Hoare triple {71899#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {71899#true} is VALID [2018-11-23 13:03:57,534 INFO L273 TraceCheckUtils]: 25: Hoare triple {71899#true} ~skip~0 := 0; {71899#true} is VALID [2018-11-23 13:03:57,534 INFO L273 TraceCheckUtils]: 26: Hoare triple {71899#true} assume !false; {71899#true} is VALID [2018-11-23 13:03:57,534 INFO L273 TraceCheckUtils]: 27: Hoare triple {71899#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,534 INFO L273 TraceCheckUtils]: 28: Hoare triple {71899#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,534 INFO L273 TraceCheckUtils]: 29: Hoare triple {71899#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,535 INFO L273 TraceCheckUtils]: 30: Hoare triple {71899#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,535 INFO L273 TraceCheckUtils]: 31: Hoare triple {71899#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,535 INFO L273 TraceCheckUtils]: 32: Hoare triple {71899#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,535 INFO L273 TraceCheckUtils]: 33: Hoare triple {71899#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,535 INFO L273 TraceCheckUtils]: 34: Hoare triple {71899#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,535 INFO L273 TraceCheckUtils]: 35: Hoare triple {71899#true} assume 4384 == #t~mem29;havoc #t~mem29; {71899#true} is VALID [2018-11-23 13:03:57,535 INFO L273 TraceCheckUtils]: 36: Hoare triple {71899#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {71899#true} is VALID [2018-11-23 13:03:57,535 INFO L273 TraceCheckUtils]: 37: Hoare triple {71899#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {71899#true} is VALID [2018-11-23 13:03:57,536 INFO L273 TraceCheckUtils]: 38: Hoare triple {71899#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,536 INFO L273 TraceCheckUtils]: 39: Hoare triple {71899#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,536 INFO L273 TraceCheckUtils]: 40: Hoare triple {71899#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,536 INFO L273 TraceCheckUtils]: 41: Hoare triple {71899#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,536 INFO L273 TraceCheckUtils]: 42: Hoare triple {71899#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {71899#true} is VALID [2018-11-23 13:03:57,536 INFO L273 TraceCheckUtils]: 43: Hoare triple {71899#true} ~skip~0 := 0; {71899#true} is VALID [2018-11-23 13:03:57,536 INFO L273 TraceCheckUtils]: 44: Hoare triple {71899#true} assume !false; {71899#true} is VALID [2018-11-23 13:03:57,536 INFO L273 TraceCheckUtils]: 45: Hoare triple {71899#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,536 INFO L273 TraceCheckUtils]: 46: Hoare triple {71899#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,537 INFO L273 TraceCheckUtils]: 47: Hoare triple {71899#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,537 INFO L273 TraceCheckUtils]: 48: Hoare triple {71899#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,537 INFO L273 TraceCheckUtils]: 49: Hoare triple {71899#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,537 INFO L273 TraceCheckUtils]: 50: Hoare triple {71899#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,537 INFO L273 TraceCheckUtils]: 51: Hoare triple {71899#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,537 INFO L273 TraceCheckUtils]: 52: Hoare triple {71899#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,537 INFO L273 TraceCheckUtils]: 53: Hoare triple {71899#true} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,537 INFO L273 TraceCheckUtils]: 54: Hoare triple {71899#true} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,537 INFO L273 TraceCheckUtils]: 55: Hoare triple {71899#true} assume 4400 == #t~mem31;havoc #t~mem31; {71899#true} is VALID [2018-11-23 13:03:57,538 INFO L273 TraceCheckUtils]: 56: Hoare triple {71899#true} call #t~mem69.base, #t~mem69.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem70.base, #t~mem70.offset := read~$Pointer$(#t~mem69.base, 836 + #t~mem69.offset, 4);call #t~mem71 := read~int(#t~mem70.base, 12 + #t~mem70.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,538 INFO L273 TraceCheckUtils]: 57: Hoare triple {71899#true} assume !(0 != ~bitwiseAnd(#t~mem71, 256) % 4294967296);havoc #t~mem69.base, #t~mem69.offset;havoc #t~mem71;havoc #t~mem70.base, #t~mem70.offset;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~ret~0 := #t~nondet72;havoc #t~nondet72; {71899#true} is VALID [2018-11-23 13:03:57,538 INFO L273 TraceCheckUtils]: 58: Hoare triple {71899#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {71899#true} is VALID [2018-11-23 13:03:57,538 INFO L273 TraceCheckUtils]: 59: Hoare triple {71899#true} assume !(~ret~0 <= 0); {71899#true} is VALID [2018-11-23 13:03:57,538 INFO L273 TraceCheckUtils]: 60: Hoare triple {71899#true} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,538 INFO L273 TraceCheckUtils]: 61: Hoare triple {71899#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,538 INFO L273 TraceCheckUtils]: 62: Hoare triple {71899#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {71899#true} is VALID [2018-11-23 13:03:57,538 INFO L273 TraceCheckUtils]: 63: Hoare triple {71899#true} ~skip~0 := 0; {71899#true} is VALID [2018-11-23 13:03:57,539 INFO L273 TraceCheckUtils]: 64: Hoare triple {71899#true} assume !false; {71899#true} is VALID [2018-11-23 13:03:57,539 INFO L273 TraceCheckUtils]: 65: Hoare triple {71899#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,539 INFO L273 TraceCheckUtils]: 66: Hoare triple {71899#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,539 INFO L273 TraceCheckUtils]: 67: Hoare triple {71899#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,539 INFO L273 TraceCheckUtils]: 68: Hoare triple {71899#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,539 INFO L273 TraceCheckUtils]: 69: Hoare triple {71899#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,539 INFO L273 TraceCheckUtils]: 70: Hoare triple {71899#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,539 INFO L273 TraceCheckUtils]: 71: Hoare triple {71899#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,539 INFO L273 TraceCheckUtils]: 72: Hoare triple {71899#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,540 INFO L273 TraceCheckUtils]: 73: Hoare triple {71899#true} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,540 INFO L273 TraceCheckUtils]: 74: Hoare triple {71899#true} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,540 INFO L273 TraceCheckUtils]: 75: Hoare triple {71899#true} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,540 INFO L273 TraceCheckUtils]: 76: Hoare triple {71899#true} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {71899#true} is VALID [2018-11-23 13:03:57,540 INFO L273 TraceCheckUtils]: 77: Hoare triple {71899#true} assume 4416 == #t~mem33;havoc #t~mem33; {71899#true} is VALID [2018-11-23 13:03:57,540 INFO L273 TraceCheckUtils]: 78: Hoare triple {71899#true} assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; {71899#true} is VALID [2018-11-23 13:03:57,540 INFO L273 TraceCheckUtils]: 79: Hoare triple {71899#true} assume 3 == ~blastFlag~0;~blastFlag~0 := 4; {71899#true} is VALID [2018-11-23 13:03:57,541 INFO L273 TraceCheckUtils]: 80: Hoare triple {71899#true} assume !(~ret~0 <= 0);call write~int(4432, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~tmp___6~0 := #t~nondet74;havoc #t~nondet74; {71901#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:03:57,543 INFO L273 TraceCheckUtils]: 81: Hoare triple {71901#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(0 == ~tmp___6~0); {71901#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:03:57,545 INFO L273 TraceCheckUtils]: 82: Hoare triple {71901#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {71901#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:03:57,545 INFO L273 TraceCheckUtils]: 83: Hoare triple {71901#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {71901#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:03:57,547 INFO L273 TraceCheckUtils]: 84: Hoare triple {71901#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} ~skip~0 := 0; {71901#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:03:57,547 INFO L273 TraceCheckUtils]: 85: Hoare triple {71901#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !false; {71901#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:03:57,547 INFO L273 TraceCheckUtils]: 86: Hoare triple {71901#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {71901#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:03:57,548 INFO L273 TraceCheckUtils]: 87: Hoare triple {71901#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {71902#(= |ssl3_connect_#t~mem23| 4432)} is VALID [2018-11-23 13:03:57,548 INFO L273 TraceCheckUtils]: 88: Hoare triple {71902#(= |ssl3_connect_#t~mem23| 4432)} assume 16384 == #t~mem23;havoc #t~mem23; {71900#false} is VALID [2018-11-23 13:03:57,548 INFO L273 TraceCheckUtils]: 89: Hoare triple {71900#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {71900#false} is VALID [2018-11-23 13:03:57,548 INFO L273 TraceCheckUtils]: 90: Hoare triple {71900#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {71900#false} is VALID [2018-11-23 13:03:57,548 INFO L273 TraceCheckUtils]: 91: Hoare triple {71900#false} call #t~mem57 := read~int(~s.base, ~s.offset, 4); {71900#false} is VALID [2018-11-23 13:03:57,549 INFO L273 TraceCheckUtils]: 92: Hoare triple {71900#false} assume !(768 != ~bitwiseAnd(#t~mem57, 65280));havoc #t~mem57;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {71900#false} is VALID [2018-11-23 13:03:57,549 INFO L273 TraceCheckUtils]: 93: Hoare triple {71900#false} assume !(0 == (#t~mem58.base + #t~mem58.offset) % 4294967296);havoc #t~mem58.base, #t~mem58.offset; {71900#false} is VALID [2018-11-23 13:03:57,549 INFO L273 TraceCheckUtils]: 94: Hoare triple {71900#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {71900#false} is VALID [2018-11-23 13:03:57,549 INFO L273 TraceCheckUtils]: 95: Hoare triple {71900#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {71900#false} is VALID [2018-11-23 13:03:57,549 INFO L273 TraceCheckUtils]: 96: Hoare triple {71900#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem63 := read~int(#t~mem62.base, 60 + #t~mem62.offset, 4);call write~int(1 + #t~mem63, #t~mem62.base, 60 + #t~mem62.offset, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, 64 + ~s.offset, 4); {71900#false} is VALID [2018-11-23 13:03:57,549 INFO L273 TraceCheckUtils]: 97: Hoare triple {71900#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {71900#false} is VALID [2018-11-23 13:03:57,549 INFO L273 TraceCheckUtils]: 98: Hoare triple {71900#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {71900#false} is VALID [2018-11-23 13:03:57,549 INFO L273 TraceCheckUtils]: 99: Hoare triple {71900#false} ~skip~0 := 0; {71900#false} is VALID [2018-11-23 13:03:57,549 INFO L273 TraceCheckUtils]: 100: Hoare triple {71900#false} assume !false; {71900#false} is VALID [2018-11-23 13:03:57,550 INFO L273 TraceCheckUtils]: 101: Hoare triple {71900#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {71900#false} is VALID [2018-11-23 13:03:57,550 INFO L273 TraceCheckUtils]: 102: Hoare triple {71900#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {71900#false} is VALID [2018-11-23 13:03:57,550 INFO L273 TraceCheckUtils]: 103: Hoare triple {71900#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {71900#false} is VALID [2018-11-23 13:03:57,550 INFO L273 TraceCheckUtils]: 104: Hoare triple {71900#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {71900#false} is VALID [2018-11-23 13:03:57,550 INFO L273 TraceCheckUtils]: 105: Hoare triple {71900#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {71900#false} is VALID [2018-11-23 13:03:57,550 INFO L273 TraceCheckUtils]: 106: Hoare triple {71900#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {71900#false} is VALID [2018-11-23 13:03:57,550 INFO L273 TraceCheckUtils]: 107: Hoare triple {71900#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {71900#false} is VALID [2018-11-23 13:03:57,550 INFO L273 TraceCheckUtils]: 108: Hoare triple {71900#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {71900#false} is VALID [2018-11-23 13:03:57,550 INFO L273 TraceCheckUtils]: 109: Hoare triple {71900#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {71900#false} is VALID [2018-11-23 13:03:57,551 INFO L273 TraceCheckUtils]: 110: Hoare triple {71900#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {71900#false} is VALID [2018-11-23 13:03:57,551 INFO L273 TraceCheckUtils]: 111: Hoare triple {71900#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {71900#false} is VALID [2018-11-23 13:03:57,551 INFO L273 TraceCheckUtils]: 112: Hoare triple {71900#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {71900#false} is VALID [2018-11-23 13:03:57,551 INFO L273 TraceCheckUtils]: 113: Hoare triple {71900#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {71900#false} is VALID [2018-11-23 13:03:57,551 INFO L273 TraceCheckUtils]: 114: Hoare triple {71900#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {71900#false} is VALID [2018-11-23 13:03:57,551 INFO L273 TraceCheckUtils]: 115: Hoare triple {71900#false} assume !(4432 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {71900#false} is VALID [2018-11-23 13:03:57,551 INFO L273 TraceCheckUtils]: 116: Hoare triple {71900#false} assume !(4433 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {71900#false} is VALID [2018-11-23 13:03:57,551 INFO L273 TraceCheckUtils]: 117: Hoare triple {71900#false} assume 4448 == #t~mem37;havoc #t~mem37; {71900#false} is VALID [2018-11-23 13:03:57,551 INFO L273 TraceCheckUtils]: 118: Hoare triple {71900#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {71900#false} is VALID [2018-11-23 13:03:57,552 INFO L273 TraceCheckUtils]: 119: Hoare triple {71900#false} assume 4 == ~blastFlag~0; {71900#false} is VALID [2018-11-23 13:03:57,552 INFO L273 TraceCheckUtils]: 120: Hoare triple {71900#false} assume !false; {71900#false} is VALID [2018-11-23 13:03:57,557 INFO L134 CoverageAnalysis]: Checked inductivity of 150 backedges. 85 proven. 0 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2018-11-23 13:03:57,558 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:03:57,558 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:03:57,558 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 121 [2018-11-23 13:03:57,558 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:03:57,558 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:03:57,645 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 88 edges. 88 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:57,645 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:03:57,645 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:03:57,646 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:03:57,646 INFO L87 Difference]: Start difference. First operand 844 states and 1244 transitions. Second operand 4 states. [2018-11-23 13:03:59,299 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:03:59,300 INFO L93 Difference]: Finished difference Result 1807 states and 2629 transitions. [2018-11-23 13:03:59,300 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:03:59,300 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 121 [2018-11-23 13:03:59,300 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:03:59,300 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:59,302 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 411 transitions. [2018-11-23 13:03:59,302 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:03:59,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 411 transitions. [2018-11-23 13:03:59,304 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 411 transitions. [2018-11-23 13:03:59,765 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 411 edges. 411 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:03:59,809 INFO L225 Difference]: With dead ends: 1807 [2018-11-23 13:03:59,809 INFO L226 Difference]: Without dead ends: 976 [2018-11-23 13:03:59,810 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:03:59,811 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 976 states. [2018-11-23 13:04:00,078 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 976 to 844. [2018-11-23 13:04:00,078 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:04:00,078 INFO L82 GeneralOperation]: Start isEquivalent. First operand 976 states. Second operand 844 states. [2018-11-23 13:04:00,078 INFO L74 IsIncluded]: Start isIncluded. First operand 976 states. Second operand 844 states. [2018-11-23 13:04:00,078 INFO L87 Difference]: Start difference. First operand 976 states. Second operand 844 states. [2018-11-23 13:04:00,113 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:04:00,113 INFO L93 Difference]: Finished difference Result 976 states and 1397 transitions. [2018-11-23 13:04:00,113 INFO L276 IsEmpty]: Start isEmpty. Operand 976 states and 1397 transitions. [2018-11-23 13:04:00,115 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:04:00,115 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:04:00,115 INFO L74 IsIncluded]: Start isIncluded. First operand 844 states. Second operand 976 states. [2018-11-23 13:04:00,115 INFO L87 Difference]: Start difference. First operand 844 states. Second operand 976 states. [2018-11-23 13:04:00,145 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:04:00,145 INFO L93 Difference]: Finished difference Result 976 states and 1397 transitions. [2018-11-23 13:04:00,145 INFO L276 IsEmpty]: Start isEmpty. Operand 976 states and 1397 transitions. [2018-11-23 13:04:00,146 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:04:00,146 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:04:00,146 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:04:00,147 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:04:00,147 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 844 states. [2018-11-23 13:04:00,172 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 844 states to 844 states and 1239 transitions. [2018-11-23 13:04:00,172 INFO L78 Accepts]: Start accepts. Automaton has 844 states and 1239 transitions. Word has length 121 [2018-11-23 13:04:00,172 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:04:00,172 INFO L480 AbstractCegarLoop]: Abstraction has 844 states and 1239 transitions. [2018-11-23 13:04:00,172 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:04:00,172 INFO L276 IsEmpty]: Start isEmpty. Operand 844 states and 1239 transitions. [2018-11-23 13:04:00,173 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2018-11-23 13:04:00,173 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:04:00,173 INFO L402 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 5, 5, 5, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:04:00,174 INFO L423 AbstractCegarLoop]: === Iteration 29 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:04:00,174 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:04:00,174 INFO L82 PathProgramCache]: Analyzing trace with hash -1213590989, now seen corresponding path program 1 times [2018-11-23 13:04:00,174 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:04:00,174 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:04:00,175 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:04:00,175 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:04:00,175 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:04:00,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:04:00,319 INFO L256 TraceCheckUtils]: 0: Hoare triple {76834#true} call ULTIMATE.init(); {76834#true} is VALID [2018-11-23 13:04:00,319 INFO L273 TraceCheckUtils]: 1: Hoare triple {76834#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,319 INFO L273 TraceCheckUtils]: 2: Hoare triple {76834#true} assume true; {76834#true} is VALID [2018-11-23 13:04:00,320 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {76834#true} {76834#true} #542#return; {76834#true} is VALID [2018-11-23 13:04:00,320 INFO L256 TraceCheckUtils]: 4: Hoare triple {76834#true} call #t~ret138 := main(); {76834#true} is VALID [2018-11-23 13:04:00,320 INFO L273 TraceCheckUtils]: 5: Hoare triple {76834#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {76834#true} is VALID [2018-11-23 13:04:00,320 INFO L256 TraceCheckUtils]: 6: Hoare triple {76834#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {76834#true} is VALID [2018-11-23 13:04:00,320 INFO L273 TraceCheckUtils]: 7: Hoare triple {76834#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,321 INFO L273 TraceCheckUtils]: 8: Hoare triple {76834#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {76834#true} is VALID [2018-11-23 13:04:00,321 INFO L273 TraceCheckUtils]: 9: Hoare triple {76834#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {76834#true} is VALID [2018-11-23 13:04:00,321 INFO L273 TraceCheckUtils]: 10: Hoare triple {76834#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {76834#true} is VALID [2018-11-23 13:04:00,321 INFO L273 TraceCheckUtils]: 11: Hoare triple {76834#true} assume !false; {76834#true} is VALID [2018-11-23 13:04:00,321 INFO L273 TraceCheckUtils]: 12: Hoare triple {76834#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,322 INFO L273 TraceCheckUtils]: 13: Hoare triple {76834#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,322 INFO L273 TraceCheckUtils]: 14: Hoare triple {76834#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,322 INFO L273 TraceCheckUtils]: 15: Hoare triple {76834#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,322 INFO L273 TraceCheckUtils]: 16: Hoare triple {76834#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,322 INFO L273 TraceCheckUtils]: 17: Hoare triple {76834#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,322 INFO L273 TraceCheckUtils]: 18: Hoare triple {76834#true} assume 4368 == #t~mem27;havoc #t~mem27; {76834#true} is VALID [2018-11-23 13:04:00,322 INFO L273 TraceCheckUtils]: 19: Hoare triple {76834#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {76834#true} is VALID [2018-11-23 13:04:00,322 INFO L273 TraceCheckUtils]: 20: Hoare triple {76834#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {76834#true} is VALID [2018-11-23 13:04:00,322 INFO L273 TraceCheckUtils]: 21: Hoare triple {76834#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,323 INFO L273 TraceCheckUtils]: 22: Hoare triple {76834#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {76834#true} is VALID [2018-11-23 13:04:00,323 INFO L273 TraceCheckUtils]: 23: Hoare triple {76834#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,323 INFO L273 TraceCheckUtils]: 24: Hoare triple {76834#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {76834#true} is VALID [2018-11-23 13:04:00,323 INFO L273 TraceCheckUtils]: 25: Hoare triple {76834#true} ~skip~0 := 0; {76834#true} is VALID [2018-11-23 13:04:00,323 INFO L273 TraceCheckUtils]: 26: Hoare triple {76834#true} assume !false; {76834#true} is VALID [2018-11-23 13:04:00,323 INFO L273 TraceCheckUtils]: 27: Hoare triple {76834#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,323 INFO L273 TraceCheckUtils]: 28: Hoare triple {76834#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,323 INFO L273 TraceCheckUtils]: 29: Hoare triple {76834#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,323 INFO L273 TraceCheckUtils]: 30: Hoare triple {76834#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,324 INFO L273 TraceCheckUtils]: 31: Hoare triple {76834#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,324 INFO L273 TraceCheckUtils]: 32: Hoare triple {76834#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,324 INFO L273 TraceCheckUtils]: 33: Hoare triple {76834#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,324 INFO L273 TraceCheckUtils]: 34: Hoare triple {76834#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,324 INFO L273 TraceCheckUtils]: 35: Hoare triple {76834#true} assume 4384 == #t~mem29;havoc #t~mem29; {76834#true} is VALID [2018-11-23 13:04:00,324 INFO L273 TraceCheckUtils]: 36: Hoare triple {76834#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {76834#true} is VALID [2018-11-23 13:04:00,324 INFO L273 TraceCheckUtils]: 37: Hoare triple {76834#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {76834#true} is VALID [2018-11-23 13:04:00,324 INFO L273 TraceCheckUtils]: 38: Hoare triple {76834#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,324 INFO L273 TraceCheckUtils]: 39: Hoare triple {76834#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,325 INFO L273 TraceCheckUtils]: 40: Hoare triple {76834#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,325 INFO L273 TraceCheckUtils]: 41: Hoare triple {76834#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,325 INFO L273 TraceCheckUtils]: 42: Hoare triple {76834#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {76834#true} is VALID [2018-11-23 13:04:00,325 INFO L273 TraceCheckUtils]: 43: Hoare triple {76834#true} ~skip~0 := 0; {76834#true} is VALID [2018-11-23 13:04:00,325 INFO L273 TraceCheckUtils]: 44: Hoare triple {76834#true} assume !false; {76834#true} is VALID [2018-11-23 13:04:00,325 INFO L273 TraceCheckUtils]: 45: Hoare triple {76834#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,325 INFO L273 TraceCheckUtils]: 46: Hoare triple {76834#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,325 INFO L273 TraceCheckUtils]: 47: Hoare triple {76834#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,325 INFO L273 TraceCheckUtils]: 48: Hoare triple {76834#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,326 INFO L273 TraceCheckUtils]: 49: Hoare triple {76834#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,326 INFO L273 TraceCheckUtils]: 50: Hoare triple {76834#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,326 INFO L273 TraceCheckUtils]: 51: Hoare triple {76834#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,326 INFO L273 TraceCheckUtils]: 52: Hoare triple {76834#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,326 INFO L273 TraceCheckUtils]: 53: Hoare triple {76834#true} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,326 INFO L273 TraceCheckUtils]: 54: Hoare triple {76834#true} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,326 INFO L273 TraceCheckUtils]: 55: Hoare triple {76834#true} assume 4400 == #t~mem31;havoc #t~mem31; {76834#true} is VALID [2018-11-23 13:04:00,326 INFO L273 TraceCheckUtils]: 56: Hoare triple {76834#true} call #t~mem69.base, #t~mem69.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem70.base, #t~mem70.offset := read~$Pointer$(#t~mem69.base, 836 + #t~mem69.offset, 4);call #t~mem71 := read~int(#t~mem70.base, 12 + #t~mem70.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,326 INFO L273 TraceCheckUtils]: 57: Hoare triple {76834#true} assume !(0 != ~bitwiseAnd(#t~mem71, 256) % 4294967296);havoc #t~mem69.base, #t~mem69.offset;havoc #t~mem71;havoc #t~mem70.base, #t~mem70.offset;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~ret~0 := #t~nondet72;havoc #t~nondet72; {76834#true} is VALID [2018-11-23 13:04:00,327 INFO L273 TraceCheckUtils]: 58: Hoare triple {76834#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {76834#true} is VALID [2018-11-23 13:04:00,327 INFO L273 TraceCheckUtils]: 59: Hoare triple {76834#true} assume !(~ret~0 <= 0); {76834#true} is VALID [2018-11-23 13:04:00,327 INFO L273 TraceCheckUtils]: 60: Hoare triple {76834#true} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,327 INFO L273 TraceCheckUtils]: 61: Hoare triple {76834#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,327 INFO L273 TraceCheckUtils]: 62: Hoare triple {76834#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {76834#true} is VALID [2018-11-23 13:04:00,327 INFO L273 TraceCheckUtils]: 63: Hoare triple {76834#true} ~skip~0 := 0; {76834#true} is VALID [2018-11-23 13:04:00,327 INFO L273 TraceCheckUtils]: 64: Hoare triple {76834#true} assume !false; {76834#true} is VALID [2018-11-23 13:04:00,327 INFO L273 TraceCheckUtils]: 65: Hoare triple {76834#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,327 INFO L273 TraceCheckUtils]: 66: Hoare triple {76834#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,328 INFO L273 TraceCheckUtils]: 67: Hoare triple {76834#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,328 INFO L273 TraceCheckUtils]: 68: Hoare triple {76834#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,328 INFO L273 TraceCheckUtils]: 69: Hoare triple {76834#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,328 INFO L273 TraceCheckUtils]: 70: Hoare triple {76834#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,328 INFO L273 TraceCheckUtils]: 71: Hoare triple {76834#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,328 INFO L273 TraceCheckUtils]: 72: Hoare triple {76834#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,328 INFO L273 TraceCheckUtils]: 73: Hoare triple {76834#true} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,328 INFO L273 TraceCheckUtils]: 74: Hoare triple {76834#true} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,328 INFO L273 TraceCheckUtils]: 75: Hoare triple {76834#true} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,329 INFO L273 TraceCheckUtils]: 76: Hoare triple {76834#true} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,329 INFO L273 TraceCheckUtils]: 77: Hoare triple {76834#true} assume 4416 == #t~mem33;havoc #t~mem33; {76834#true} is VALID [2018-11-23 13:04:00,329 INFO L273 TraceCheckUtils]: 78: Hoare triple {76834#true} assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; {76834#true} is VALID [2018-11-23 13:04:00,329 INFO L273 TraceCheckUtils]: 79: Hoare triple {76834#true} assume 3 == ~blastFlag~0;~blastFlag~0 := 4; {76834#true} is VALID [2018-11-23 13:04:00,329 INFO L273 TraceCheckUtils]: 80: Hoare triple {76834#true} assume !(~ret~0 <= 0);call write~int(4432, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~tmp___6~0 := #t~nondet74;havoc #t~nondet74; {76834#true} is VALID [2018-11-23 13:04:00,329 INFO L273 TraceCheckUtils]: 81: Hoare triple {76834#true} assume !(0 == ~tmp___6~0); {76834#true} is VALID [2018-11-23 13:04:00,329 INFO L273 TraceCheckUtils]: 82: Hoare triple {76834#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,329 INFO L273 TraceCheckUtils]: 83: Hoare triple {76834#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {76834#true} is VALID [2018-11-23 13:04:00,329 INFO L273 TraceCheckUtils]: 84: Hoare triple {76834#true} ~skip~0 := 0; {76834#true} is VALID [2018-11-23 13:04:00,330 INFO L273 TraceCheckUtils]: 85: Hoare triple {76834#true} assume !false; {76834#true} is VALID [2018-11-23 13:04:00,330 INFO L273 TraceCheckUtils]: 86: Hoare triple {76834#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,330 INFO L273 TraceCheckUtils]: 87: Hoare triple {76834#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,330 INFO L273 TraceCheckUtils]: 88: Hoare triple {76834#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,330 INFO L273 TraceCheckUtils]: 89: Hoare triple {76834#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,330 INFO L273 TraceCheckUtils]: 90: Hoare triple {76834#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,330 INFO L273 TraceCheckUtils]: 91: Hoare triple {76834#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {76834#true} is VALID [2018-11-23 13:04:00,330 INFO L273 TraceCheckUtils]: 92: Hoare triple {76834#true} assume 4368 == #t~mem27;havoc #t~mem27; {76834#true} is VALID [2018-11-23 13:04:00,330 INFO L273 TraceCheckUtils]: 93: Hoare triple {76834#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {76834#true} is VALID [2018-11-23 13:04:00,331 INFO L273 TraceCheckUtils]: 94: Hoare triple {76834#true} assume !(0 == ~blastFlag~0); {76834#true} is VALID [2018-11-23 13:04:00,332 INFO L273 TraceCheckUtils]: 95: Hoare triple {76834#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:00,332 INFO L273 TraceCheckUtils]: 96: Hoare triple {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:00,337 INFO L273 TraceCheckUtils]: 97: Hoare triple {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:00,337 INFO L273 TraceCheckUtils]: 98: Hoare triple {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:00,337 INFO L273 TraceCheckUtils]: 99: Hoare triple {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} ~skip~0 := 0; {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:00,338 INFO L273 TraceCheckUtils]: 100: Hoare triple {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !false; {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:00,338 INFO L273 TraceCheckUtils]: 101: Hoare triple {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:00,338 INFO L273 TraceCheckUtils]: 102: Hoare triple {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:00,339 INFO L273 TraceCheckUtils]: 103: Hoare triple {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:00,339 INFO L273 TraceCheckUtils]: 104: Hoare triple {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:00,339 INFO L273 TraceCheckUtils]: 105: Hoare triple {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:00,339 INFO L273 TraceCheckUtils]: 106: Hoare triple {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:00,340 INFO L273 TraceCheckUtils]: 107: Hoare triple {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:00,340 INFO L273 TraceCheckUtils]: 108: Hoare triple {76836#(= 4384 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {76837#(= |ssl3_connect_#t~mem29| 4384)} is VALID [2018-11-23 13:04:00,341 INFO L273 TraceCheckUtils]: 109: Hoare triple {76837#(= |ssl3_connect_#t~mem29| 4384)} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {76835#false} is VALID [2018-11-23 13:04:00,341 INFO L273 TraceCheckUtils]: 110: Hoare triple {76835#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {76835#false} is VALID [2018-11-23 13:04:00,341 INFO L273 TraceCheckUtils]: 111: Hoare triple {76835#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {76835#false} is VALID [2018-11-23 13:04:00,341 INFO L273 TraceCheckUtils]: 112: Hoare triple {76835#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {76835#false} is VALID [2018-11-23 13:04:00,341 INFO L273 TraceCheckUtils]: 113: Hoare triple {76835#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {76835#false} is VALID [2018-11-23 13:04:00,341 INFO L273 TraceCheckUtils]: 114: Hoare triple {76835#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {76835#false} is VALID [2018-11-23 13:04:00,341 INFO L273 TraceCheckUtils]: 115: Hoare triple {76835#false} assume !(4432 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {76835#false} is VALID [2018-11-23 13:04:00,341 INFO L273 TraceCheckUtils]: 116: Hoare triple {76835#false} assume !(4433 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {76835#false} is VALID [2018-11-23 13:04:00,342 INFO L273 TraceCheckUtils]: 117: Hoare triple {76835#false} assume 4448 == #t~mem37;havoc #t~mem37; {76835#false} is VALID [2018-11-23 13:04:00,342 INFO L273 TraceCheckUtils]: 118: Hoare triple {76835#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {76835#false} is VALID [2018-11-23 13:04:00,342 INFO L273 TraceCheckUtils]: 119: Hoare triple {76835#false} assume 4 == ~blastFlag~0; {76835#false} is VALID [2018-11-23 13:04:00,342 INFO L273 TraceCheckUtils]: 120: Hoare triple {76835#false} assume !false; {76835#false} is VALID [2018-11-23 13:04:00,350 INFO L134 CoverageAnalysis]: Checked inductivity of 174 backedges. 65 proven. 0 refuted. 0 times theorem prover too weak. 109 trivial. 0 not checked. [2018-11-23 13:04:00,350 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:04:00,350 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:04:00,351 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 121 [2018-11-23 13:04:00,351 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:04:00,351 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:04:00,437 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 76 edges. 76 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:04:00,437 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:04:00,437 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:04:00,437 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:04:00,438 INFO L87 Difference]: Start difference. First operand 844 states and 1239 transitions. Second operand 4 states. [2018-11-23 13:04:01,838 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:04:01,838 INFO L93 Difference]: Finished difference Result 1638 states and 2411 transitions. [2018-11-23 13:04:01,838 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:04:01,838 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 121 [2018-11-23 13:04:01,839 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:04:01,839 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:04:01,840 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 388 transitions. [2018-11-23 13:04:01,840 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:04:01,842 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 388 transitions. [2018-11-23 13:04:01,842 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 388 transitions. [2018-11-23 13:04:02,254 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 388 edges. 388 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:04:02,299 INFO L225 Difference]: With dead ends: 1638 [2018-11-23 13:04:02,300 INFO L226 Difference]: Without dead ends: 982 [2018-11-23 13:04:02,301 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:04:02,302 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 982 states. [2018-11-23 13:04:02,651 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 982 to 916. [2018-11-23 13:04:02,651 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:04:02,651 INFO L82 GeneralOperation]: Start isEquivalent. First operand 982 states. Second operand 916 states. [2018-11-23 13:04:02,651 INFO L74 IsIncluded]: Start isIncluded. First operand 982 states. Second operand 916 states. [2018-11-23 13:04:02,652 INFO L87 Difference]: Start difference. First operand 982 states. Second operand 916 states. [2018-11-23 13:04:02,684 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:04:02,684 INFO L93 Difference]: Finished difference Result 982 states and 1440 transitions. [2018-11-23 13:04:02,684 INFO L276 IsEmpty]: Start isEmpty. Operand 982 states and 1440 transitions. [2018-11-23 13:04:02,685 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:04:02,686 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:04:02,686 INFO L74 IsIncluded]: Start isIncluded. First operand 916 states. Second operand 982 states. [2018-11-23 13:04:02,686 INFO L87 Difference]: Start difference. First operand 916 states. Second operand 982 states. [2018-11-23 13:04:02,721 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:04:02,721 INFO L93 Difference]: Finished difference Result 982 states and 1440 transitions. [2018-11-23 13:04:02,721 INFO L276 IsEmpty]: Start isEmpty. Operand 982 states and 1440 transitions. [2018-11-23 13:04:02,722 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:04:02,722 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:04:02,723 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:04:02,723 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:04:02,723 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 916 states. [2018-11-23 13:04:02,752 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 916 states to 916 states and 1359 transitions. [2018-11-23 13:04:02,752 INFO L78 Accepts]: Start accepts. Automaton has 916 states and 1359 transitions. Word has length 121 [2018-11-23 13:04:02,753 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:04:02,753 INFO L480 AbstractCegarLoop]: Abstraction has 916 states and 1359 transitions. [2018-11-23 13:04:02,753 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:04:02,753 INFO L276 IsEmpty]: Start isEmpty. Operand 916 states and 1359 transitions. [2018-11-23 13:04:02,754 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 123 [2018-11-23 13:04:02,754 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:04:02,754 INFO L402 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 5, 5, 5, 5, 5, 5, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:04:02,754 INFO L423 AbstractCegarLoop]: === Iteration 30 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:04:02,754 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:04:02,755 INFO L82 PathProgramCache]: Analyzing trace with hash -1233245309, now seen corresponding path program 1 times [2018-11-23 13:04:02,755 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:04:02,755 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:04:02,755 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:04:02,755 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:04:02,755 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:04:02,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:04:02,996 INFO L256 TraceCheckUtils]: 0: Hoare triple {81659#true} call ULTIMATE.init(); {81659#true} is VALID [2018-11-23 13:04:02,996 INFO L273 TraceCheckUtils]: 1: Hoare triple {81659#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {81659#true} is VALID [2018-11-23 13:04:02,996 INFO L273 TraceCheckUtils]: 2: Hoare triple {81659#true} assume true; {81659#true} is VALID [2018-11-23 13:04:02,996 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {81659#true} {81659#true} #542#return; {81659#true} is VALID [2018-11-23 13:04:02,997 INFO L256 TraceCheckUtils]: 4: Hoare triple {81659#true} call #t~ret138 := main(); {81659#true} is VALID [2018-11-23 13:04:02,997 INFO L273 TraceCheckUtils]: 5: Hoare triple {81659#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {81659#true} is VALID [2018-11-23 13:04:02,997 INFO L256 TraceCheckUtils]: 6: Hoare triple {81659#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {81659#true} is VALID [2018-11-23 13:04:02,997 INFO L273 TraceCheckUtils]: 7: Hoare triple {81659#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:02,997 INFO L273 TraceCheckUtils]: 8: Hoare triple {81659#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {81659#true} is VALID [2018-11-23 13:04:02,997 INFO L273 TraceCheckUtils]: 9: Hoare triple {81659#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {81659#true} is VALID [2018-11-23 13:04:02,997 INFO L273 TraceCheckUtils]: 10: Hoare triple {81659#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {81659#true} is VALID [2018-11-23 13:04:02,997 INFO L273 TraceCheckUtils]: 11: Hoare triple {81659#true} assume !false; {81659#true} is VALID [2018-11-23 13:04:02,998 INFO L273 TraceCheckUtils]: 12: Hoare triple {81659#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:02,998 INFO L273 TraceCheckUtils]: 13: Hoare triple {81659#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:02,998 INFO L273 TraceCheckUtils]: 14: Hoare triple {81659#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:02,998 INFO L273 TraceCheckUtils]: 15: Hoare triple {81659#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:02,998 INFO L273 TraceCheckUtils]: 16: Hoare triple {81659#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:02,998 INFO L273 TraceCheckUtils]: 17: Hoare triple {81659#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:02,998 INFO L273 TraceCheckUtils]: 18: Hoare triple {81659#true} assume 4368 == #t~mem27;havoc #t~mem27; {81659#true} is VALID [2018-11-23 13:04:02,998 INFO L273 TraceCheckUtils]: 19: Hoare triple {81659#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {81659#true} is VALID [2018-11-23 13:04:02,998 INFO L273 TraceCheckUtils]: 20: Hoare triple {81659#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {81659#true} is VALID [2018-11-23 13:04:02,999 INFO L273 TraceCheckUtils]: 21: Hoare triple {81659#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:02,999 INFO L273 TraceCheckUtils]: 22: Hoare triple {81659#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {81659#true} is VALID [2018-11-23 13:04:02,999 INFO L273 TraceCheckUtils]: 23: Hoare triple {81659#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {81659#true} is VALID [2018-11-23 13:04:02,999 INFO L273 TraceCheckUtils]: 24: Hoare triple {81659#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {81659#true} is VALID [2018-11-23 13:04:02,999 INFO L273 TraceCheckUtils]: 25: Hoare triple {81659#true} ~skip~0 := 0; {81659#true} is VALID [2018-11-23 13:04:02,999 INFO L273 TraceCheckUtils]: 26: Hoare triple {81659#true} assume !false; {81659#true} is VALID [2018-11-23 13:04:02,999 INFO L273 TraceCheckUtils]: 27: Hoare triple {81659#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:02,999 INFO L273 TraceCheckUtils]: 28: Hoare triple {81659#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:02,999 INFO L273 TraceCheckUtils]: 29: Hoare triple {81659#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,000 INFO L273 TraceCheckUtils]: 30: Hoare triple {81659#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,000 INFO L273 TraceCheckUtils]: 31: Hoare triple {81659#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,000 INFO L273 TraceCheckUtils]: 32: Hoare triple {81659#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,000 INFO L273 TraceCheckUtils]: 33: Hoare triple {81659#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,000 INFO L273 TraceCheckUtils]: 34: Hoare triple {81659#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,000 INFO L273 TraceCheckUtils]: 35: Hoare triple {81659#true} assume 4384 == #t~mem29;havoc #t~mem29; {81659#true} is VALID [2018-11-23 13:04:03,000 INFO L273 TraceCheckUtils]: 36: Hoare triple {81659#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {81659#true} is VALID [2018-11-23 13:04:03,000 INFO L273 TraceCheckUtils]: 37: Hoare triple {81659#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {81659#true} is VALID [2018-11-23 13:04:03,000 INFO L273 TraceCheckUtils]: 38: Hoare triple {81659#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,001 INFO L273 TraceCheckUtils]: 39: Hoare triple {81659#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,001 INFO L273 TraceCheckUtils]: 40: Hoare triple {81659#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,001 INFO L273 TraceCheckUtils]: 41: Hoare triple {81659#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,001 INFO L273 TraceCheckUtils]: 42: Hoare triple {81659#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {81659#true} is VALID [2018-11-23 13:04:03,001 INFO L273 TraceCheckUtils]: 43: Hoare triple {81659#true} ~skip~0 := 0; {81659#true} is VALID [2018-11-23 13:04:03,001 INFO L273 TraceCheckUtils]: 44: Hoare triple {81659#true} assume !false; {81659#true} is VALID [2018-11-23 13:04:03,001 INFO L273 TraceCheckUtils]: 45: Hoare triple {81659#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,001 INFO L273 TraceCheckUtils]: 46: Hoare triple {81659#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,001 INFO L273 TraceCheckUtils]: 47: Hoare triple {81659#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,002 INFO L273 TraceCheckUtils]: 48: Hoare triple {81659#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,002 INFO L273 TraceCheckUtils]: 49: Hoare triple {81659#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,002 INFO L273 TraceCheckUtils]: 50: Hoare triple {81659#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,002 INFO L273 TraceCheckUtils]: 51: Hoare triple {81659#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,002 INFO L273 TraceCheckUtils]: 52: Hoare triple {81659#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,002 INFO L273 TraceCheckUtils]: 53: Hoare triple {81659#true} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,002 INFO L273 TraceCheckUtils]: 54: Hoare triple {81659#true} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,002 INFO L273 TraceCheckUtils]: 55: Hoare triple {81659#true} assume 4400 == #t~mem31;havoc #t~mem31; {81659#true} is VALID [2018-11-23 13:04:03,002 INFO L273 TraceCheckUtils]: 56: Hoare triple {81659#true} call #t~mem69.base, #t~mem69.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem70.base, #t~mem70.offset := read~$Pointer$(#t~mem69.base, 836 + #t~mem69.offset, 4);call #t~mem71 := read~int(#t~mem70.base, 12 + #t~mem70.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,003 INFO L273 TraceCheckUtils]: 57: Hoare triple {81659#true} assume !(0 != ~bitwiseAnd(#t~mem71, 256) % 4294967296);havoc #t~mem69.base, #t~mem69.offset;havoc #t~mem71;havoc #t~mem70.base, #t~mem70.offset;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~ret~0 := #t~nondet72;havoc #t~nondet72; {81659#true} is VALID [2018-11-23 13:04:03,003 INFO L273 TraceCheckUtils]: 58: Hoare triple {81659#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {81659#true} is VALID [2018-11-23 13:04:03,003 INFO L273 TraceCheckUtils]: 59: Hoare triple {81659#true} assume !(~ret~0 <= 0); {81659#true} is VALID [2018-11-23 13:04:03,003 INFO L273 TraceCheckUtils]: 60: Hoare triple {81659#true} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,003 INFO L273 TraceCheckUtils]: 61: Hoare triple {81659#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,003 INFO L273 TraceCheckUtils]: 62: Hoare triple {81659#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {81659#true} is VALID [2018-11-23 13:04:03,003 INFO L273 TraceCheckUtils]: 63: Hoare triple {81659#true} ~skip~0 := 0; {81659#true} is VALID [2018-11-23 13:04:03,003 INFO L273 TraceCheckUtils]: 64: Hoare triple {81659#true} assume !false; {81659#true} is VALID [2018-11-23 13:04:03,003 INFO L273 TraceCheckUtils]: 65: Hoare triple {81659#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,004 INFO L273 TraceCheckUtils]: 66: Hoare triple {81659#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,004 INFO L273 TraceCheckUtils]: 67: Hoare triple {81659#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,004 INFO L273 TraceCheckUtils]: 68: Hoare triple {81659#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,004 INFO L273 TraceCheckUtils]: 69: Hoare triple {81659#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,004 INFO L273 TraceCheckUtils]: 70: Hoare triple {81659#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,004 INFO L273 TraceCheckUtils]: 71: Hoare triple {81659#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,004 INFO L273 TraceCheckUtils]: 72: Hoare triple {81659#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,004 INFO L273 TraceCheckUtils]: 73: Hoare triple {81659#true} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,005 INFO L273 TraceCheckUtils]: 74: Hoare triple {81659#true} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,005 INFO L273 TraceCheckUtils]: 75: Hoare triple {81659#true} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,005 INFO L273 TraceCheckUtils]: 76: Hoare triple {81659#true} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {81659#true} is VALID [2018-11-23 13:04:03,005 INFO L273 TraceCheckUtils]: 77: Hoare triple {81659#true} assume 4416 == #t~mem33;havoc #t~mem33; {81659#true} is VALID [2018-11-23 13:04:03,005 INFO L273 TraceCheckUtils]: 78: Hoare triple {81659#true} assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; {81659#true} is VALID [2018-11-23 13:04:03,005 INFO L273 TraceCheckUtils]: 79: Hoare triple {81659#true} assume 3 == ~blastFlag~0;~blastFlag~0 := 4; {81659#true} is VALID [2018-11-23 13:04:03,006 INFO L273 TraceCheckUtils]: 80: Hoare triple {81659#true} assume !(~ret~0 <= 0);call write~int(4432, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~tmp___6~0 := #t~nondet74;havoc #t~nondet74; {81661#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:03,007 INFO L273 TraceCheckUtils]: 81: Hoare triple {81661#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(0 == ~tmp___6~0); {81661#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:03,008 INFO L273 TraceCheckUtils]: 82: Hoare triple {81661#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {81661#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:03,008 INFO L273 TraceCheckUtils]: 83: Hoare triple {81661#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {81661#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:03,010 INFO L273 TraceCheckUtils]: 84: Hoare triple {81661#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} ~skip~0 := 0; {81661#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:03,010 INFO L273 TraceCheckUtils]: 85: Hoare triple {81661#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !false; {81661#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:03,010 INFO L273 TraceCheckUtils]: 86: Hoare triple {81661#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {81661#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:03,011 INFO L273 TraceCheckUtils]: 87: Hoare triple {81661#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {81661#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:03,011 INFO L273 TraceCheckUtils]: 88: Hoare triple {81661#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {81662#(= |ssl3_connect_#t~mem24| 4432)} is VALID [2018-11-23 13:04:03,011 INFO L273 TraceCheckUtils]: 89: Hoare triple {81662#(= |ssl3_connect_#t~mem24| 4432)} assume 4096 == #t~mem24;havoc #t~mem24; {81660#false} is VALID [2018-11-23 13:04:03,011 INFO L273 TraceCheckUtils]: 90: Hoare triple {81660#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {81660#false} is VALID [2018-11-23 13:04:03,012 INFO L273 TraceCheckUtils]: 91: Hoare triple {81660#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {81660#false} is VALID [2018-11-23 13:04:03,012 INFO L273 TraceCheckUtils]: 92: Hoare triple {81660#false} call #t~mem57 := read~int(~s.base, ~s.offset, 4); {81660#false} is VALID [2018-11-23 13:04:03,012 INFO L273 TraceCheckUtils]: 93: Hoare triple {81660#false} assume !(768 != ~bitwiseAnd(#t~mem57, 65280));havoc #t~mem57;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {81660#false} is VALID [2018-11-23 13:04:03,012 INFO L273 TraceCheckUtils]: 94: Hoare triple {81660#false} assume !(0 == (#t~mem58.base + #t~mem58.offset) % 4294967296);havoc #t~mem58.base, #t~mem58.offset; {81660#false} is VALID [2018-11-23 13:04:03,012 INFO L273 TraceCheckUtils]: 95: Hoare triple {81660#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {81660#false} is VALID [2018-11-23 13:04:03,012 INFO L273 TraceCheckUtils]: 96: Hoare triple {81660#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {81660#false} is VALID [2018-11-23 13:04:03,012 INFO L273 TraceCheckUtils]: 97: Hoare triple {81660#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem63 := read~int(#t~mem62.base, 60 + #t~mem62.offset, 4);call write~int(1 + #t~mem63, #t~mem62.base, 60 + #t~mem62.offset, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, 64 + ~s.offset, 4); {81660#false} is VALID [2018-11-23 13:04:03,012 INFO L273 TraceCheckUtils]: 98: Hoare triple {81660#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {81660#false} is VALID [2018-11-23 13:04:03,012 INFO L273 TraceCheckUtils]: 99: Hoare triple {81660#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {81660#false} is VALID [2018-11-23 13:04:03,013 INFO L273 TraceCheckUtils]: 100: Hoare triple {81660#false} ~skip~0 := 0; {81660#false} is VALID [2018-11-23 13:04:03,013 INFO L273 TraceCheckUtils]: 101: Hoare triple {81660#false} assume !false; {81660#false} is VALID [2018-11-23 13:04:03,013 INFO L273 TraceCheckUtils]: 102: Hoare triple {81660#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {81660#false} is VALID [2018-11-23 13:04:03,013 INFO L273 TraceCheckUtils]: 103: Hoare triple {81660#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {81660#false} is VALID [2018-11-23 13:04:03,013 INFO L273 TraceCheckUtils]: 104: Hoare triple {81660#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {81660#false} is VALID [2018-11-23 13:04:03,013 INFO L273 TraceCheckUtils]: 105: Hoare triple {81660#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {81660#false} is VALID [2018-11-23 13:04:03,013 INFO L273 TraceCheckUtils]: 106: Hoare triple {81660#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {81660#false} is VALID [2018-11-23 13:04:03,013 INFO L273 TraceCheckUtils]: 107: Hoare triple {81660#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {81660#false} is VALID [2018-11-23 13:04:03,013 INFO L273 TraceCheckUtils]: 108: Hoare triple {81660#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {81660#false} is VALID [2018-11-23 13:04:03,014 INFO L273 TraceCheckUtils]: 109: Hoare triple {81660#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {81660#false} is VALID [2018-11-23 13:04:03,014 INFO L273 TraceCheckUtils]: 110: Hoare triple {81660#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {81660#false} is VALID [2018-11-23 13:04:03,014 INFO L273 TraceCheckUtils]: 111: Hoare triple {81660#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {81660#false} is VALID [2018-11-23 13:04:03,014 INFO L273 TraceCheckUtils]: 112: Hoare triple {81660#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {81660#false} is VALID [2018-11-23 13:04:03,014 INFO L273 TraceCheckUtils]: 113: Hoare triple {81660#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {81660#false} is VALID [2018-11-23 13:04:03,014 INFO L273 TraceCheckUtils]: 114: Hoare triple {81660#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {81660#false} is VALID [2018-11-23 13:04:03,014 INFO L273 TraceCheckUtils]: 115: Hoare triple {81660#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {81660#false} is VALID [2018-11-23 13:04:03,014 INFO L273 TraceCheckUtils]: 116: Hoare triple {81660#false} assume !(4432 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {81660#false} is VALID [2018-11-23 13:04:03,014 INFO L273 TraceCheckUtils]: 117: Hoare triple {81660#false} assume !(4433 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {81660#false} is VALID [2018-11-23 13:04:03,015 INFO L273 TraceCheckUtils]: 118: Hoare triple {81660#false} assume 4448 == #t~mem37;havoc #t~mem37; {81660#false} is VALID [2018-11-23 13:04:03,015 INFO L273 TraceCheckUtils]: 119: Hoare triple {81660#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {81660#false} is VALID [2018-11-23 13:04:03,015 INFO L273 TraceCheckUtils]: 120: Hoare triple {81660#false} assume 4 == ~blastFlag~0; {81660#false} is VALID [2018-11-23 13:04:03,015 INFO L273 TraceCheckUtils]: 121: Hoare triple {81660#false} assume !false; {81660#false} is VALID [2018-11-23 13:04:03,021 INFO L134 CoverageAnalysis]: Checked inductivity of 155 backedges. 90 proven. 0 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2018-11-23 13:04:03,022 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:04:03,022 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:04:03,022 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 122 [2018-11-23 13:04:03,022 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:04:03,022 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:04:03,112 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 89 edges. 89 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:04:03,112 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:04:03,113 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:04:03,113 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:04:03,113 INFO L87 Difference]: Start difference. First operand 916 states and 1359 transitions. Second operand 4 states. [2018-11-23 13:04:05,023 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:04:05,023 INFO L93 Difference]: Finished difference Result 1951 states and 2859 transitions. [2018-11-23 13:04:05,023 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:04:05,023 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 122 [2018-11-23 13:04:05,023 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:04:05,023 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:04:05,025 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 410 transitions. [2018-11-23 13:04:05,025 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:04:05,026 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 410 transitions. [2018-11-23 13:04:05,027 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 410 transitions. [2018-11-23 13:04:05,507 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 410 edges. 410 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:04:05,558 INFO L225 Difference]: With dead ends: 1951 [2018-11-23 13:04:05,558 INFO L226 Difference]: Without dead ends: 1048 [2018-11-23 13:04:05,560 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:04:05,561 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1048 states. [2018-11-23 13:04:06,097 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1048 to 916. [2018-11-23 13:04:06,097 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:04:06,097 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1048 states. Second operand 916 states. [2018-11-23 13:04:06,098 INFO L74 IsIncluded]: Start isIncluded. First operand 1048 states. Second operand 916 states. [2018-11-23 13:04:06,098 INFO L87 Difference]: Start difference. First operand 1048 states. Second operand 916 states. [2018-11-23 13:04:06,137 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:04:06,137 INFO L93 Difference]: Finished difference Result 1048 states and 1512 transitions. [2018-11-23 13:04:06,137 INFO L276 IsEmpty]: Start isEmpty. Operand 1048 states and 1512 transitions. [2018-11-23 13:04:06,138 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:04:06,138 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:04:06,138 INFO L74 IsIncluded]: Start isIncluded. First operand 916 states. Second operand 1048 states. [2018-11-23 13:04:06,138 INFO L87 Difference]: Start difference. First operand 916 states. Second operand 1048 states. [2018-11-23 13:04:06,172 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:04:06,172 INFO L93 Difference]: Finished difference Result 1048 states and 1512 transitions. [2018-11-23 13:04:06,172 INFO L276 IsEmpty]: Start isEmpty. Operand 1048 states and 1512 transitions. [2018-11-23 13:04:06,173 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:04:06,174 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:04:06,174 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:04:06,174 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:04:06,174 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 916 states. [2018-11-23 13:04:06,205 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 916 states to 916 states and 1354 transitions. [2018-11-23 13:04:06,205 INFO L78 Accepts]: Start accepts. Automaton has 916 states and 1354 transitions. Word has length 122 [2018-11-23 13:04:06,205 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:04:06,205 INFO L480 AbstractCegarLoop]: Abstraction has 916 states and 1354 transitions. [2018-11-23 13:04:06,205 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:04:06,206 INFO L276 IsEmpty]: Start isEmpty. Operand 916 states and 1354 transitions. [2018-11-23 13:04:06,207 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 124 [2018-11-23 13:04:06,207 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:04:06,207 INFO L402 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 5, 5, 5, 5, 5, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:04:06,207 INFO L423 AbstractCegarLoop]: === Iteration 31 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:04:06,208 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:04:06,208 INFO L82 PathProgramCache]: Analyzing trace with hash 2124457781, now seen corresponding path program 1 times [2018-11-23 13:04:06,208 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:04:06,208 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:04:06,209 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:04:06,209 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:04:06,209 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:04:06,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:04:06,379 INFO L256 TraceCheckUtils]: 0: Hoare triple {86966#true} call ULTIMATE.init(); {86966#true} is VALID [2018-11-23 13:04:06,380 INFO L273 TraceCheckUtils]: 1: Hoare triple {86966#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,380 INFO L273 TraceCheckUtils]: 2: Hoare triple {86966#true} assume true; {86966#true} is VALID [2018-11-23 13:04:06,380 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {86966#true} {86966#true} #542#return; {86966#true} is VALID [2018-11-23 13:04:06,380 INFO L256 TraceCheckUtils]: 4: Hoare triple {86966#true} call #t~ret138 := main(); {86966#true} is VALID [2018-11-23 13:04:06,381 INFO L273 TraceCheckUtils]: 5: Hoare triple {86966#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {86966#true} is VALID [2018-11-23 13:04:06,381 INFO L256 TraceCheckUtils]: 6: Hoare triple {86966#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {86966#true} is VALID [2018-11-23 13:04:06,381 INFO L273 TraceCheckUtils]: 7: Hoare triple {86966#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,381 INFO L273 TraceCheckUtils]: 8: Hoare triple {86966#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {86966#true} is VALID [2018-11-23 13:04:06,381 INFO L273 TraceCheckUtils]: 9: Hoare triple {86966#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {86966#true} is VALID [2018-11-23 13:04:06,382 INFO L273 TraceCheckUtils]: 10: Hoare triple {86966#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {86966#true} is VALID [2018-11-23 13:04:06,382 INFO L273 TraceCheckUtils]: 11: Hoare triple {86966#true} assume !false; {86966#true} is VALID [2018-11-23 13:04:06,382 INFO L273 TraceCheckUtils]: 12: Hoare triple {86966#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,382 INFO L273 TraceCheckUtils]: 13: Hoare triple {86966#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,382 INFO L273 TraceCheckUtils]: 14: Hoare triple {86966#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,383 INFO L273 TraceCheckUtils]: 15: Hoare triple {86966#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,383 INFO L273 TraceCheckUtils]: 16: Hoare triple {86966#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,383 INFO L273 TraceCheckUtils]: 17: Hoare triple {86966#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,383 INFO L273 TraceCheckUtils]: 18: Hoare triple {86966#true} assume 4368 == #t~mem27;havoc #t~mem27; {86966#true} is VALID [2018-11-23 13:04:06,383 INFO L273 TraceCheckUtils]: 19: Hoare triple {86966#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {86966#true} is VALID [2018-11-23 13:04:06,383 INFO L273 TraceCheckUtils]: 20: Hoare triple {86966#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {86966#true} is VALID [2018-11-23 13:04:06,383 INFO L273 TraceCheckUtils]: 21: Hoare triple {86966#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,383 INFO L273 TraceCheckUtils]: 22: Hoare triple {86966#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {86966#true} is VALID [2018-11-23 13:04:06,384 INFO L273 TraceCheckUtils]: 23: Hoare triple {86966#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,384 INFO L273 TraceCheckUtils]: 24: Hoare triple {86966#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {86966#true} is VALID [2018-11-23 13:04:06,384 INFO L273 TraceCheckUtils]: 25: Hoare triple {86966#true} ~skip~0 := 0; {86966#true} is VALID [2018-11-23 13:04:06,384 INFO L273 TraceCheckUtils]: 26: Hoare triple {86966#true} assume !false; {86966#true} is VALID [2018-11-23 13:04:06,384 INFO L273 TraceCheckUtils]: 27: Hoare triple {86966#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,384 INFO L273 TraceCheckUtils]: 28: Hoare triple {86966#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,384 INFO L273 TraceCheckUtils]: 29: Hoare triple {86966#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,384 INFO L273 TraceCheckUtils]: 30: Hoare triple {86966#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,384 INFO L273 TraceCheckUtils]: 31: Hoare triple {86966#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,385 INFO L273 TraceCheckUtils]: 32: Hoare triple {86966#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,385 INFO L273 TraceCheckUtils]: 33: Hoare triple {86966#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,385 INFO L273 TraceCheckUtils]: 34: Hoare triple {86966#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,385 INFO L273 TraceCheckUtils]: 35: Hoare triple {86966#true} assume 4384 == #t~mem29;havoc #t~mem29; {86966#true} is VALID [2018-11-23 13:04:06,385 INFO L273 TraceCheckUtils]: 36: Hoare triple {86966#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {86966#true} is VALID [2018-11-23 13:04:06,385 INFO L273 TraceCheckUtils]: 37: Hoare triple {86966#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {86966#true} is VALID [2018-11-23 13:04:06,385 INFO L273 TraceCheckUtils]: 38: Hoare triple {86966#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,385 INFO L273 TraceCheckUtils]: 39: Hoare triple {86966#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,385 INFO L273 TraceCheckUtils]: 40: Hoare triple {86966#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,386 INFO L273 TraceCheckUtils]: 41: Hoare triple {86966#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,386 INFO L273 TraceCheckUtils]: 42: Hoare triple {86966#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {86966#true} is VALID [2018-11-23 13:04:06,386 INFO L273 TraceCheckUtils]: 43: Hoare triple {86966#true} ~skip~0 := 0; {86966#true} is VALID [2018-11-23 13:04:06,386 INFO L273 TraceCheckUtils]: 44: Hoare triple {86966#true} assume !false; {86966#true} is VALID [2018-11-23 13:04:06,386 INFO L273 TraceCheckUtils]: 45: Hoare triple {86966#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,386 INFO L273 TraceCheckUtils]: 46: Hoare triple {86966#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,386 INFO L273 TraceCheckUtils]: 47: Hoare triple {86966#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,386 INFO L273 TraceCheckUtils]: 48: Hoare triple {86966#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,386 INFO L273 TraceCheckUtils]: 49: Hoare triple {86966#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,387 INFO L273 TraceCheckUtils]: 50: Hoare triple {86966#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,387 INFO L273 TraceCheckUtils]: 51: Hoare triple {86966#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,387 INFO L273 TraceCheckUtils]: 52: Hoare triple {86966#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,387 INFO L273 TraceCheckUtils]: 53: Hoare triple {86966#true} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,387 INFO L273 TraceCheckUtils]: 54: Hoare triple {86966#true} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,387 INFO L273 TraceCheckUtils]: 55: Hoare triple {86966#true} assume 4400 == #t~mem31;havoc #t~mem31; {86966#true} is VALID [2018-11-23 13:04:06,387 INFO L273 TraceCheckUtils]: 56: Hoare triple {86966#true} call #t~mem69.base, #t~mem69.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem70.base, #t~mem70.offset := read~$Pointer$(#t~mem69.base, 836 + #t~mem69.offset, 4);call #t~mem71 := read~int(#t~mem70.base, 12 + #t~mem70.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,387 INFO L273 TraceCheckUtils]: 57: Hoare triple {86966#true} assume !(0 != ~bitwiseAnd(#t~mem71, 256) % 4294967296);havoc #t~mem69.base, #t~mem69.offset;havoc #t~mem71;havoc #t~mem70.base, #t~mem70.offset;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~ret~0 := #t~nondet72;havoc #t~nondet72; {86966#true} is VALID [2018-11-23 13:04:06,387 INFO L273 TraceCheckUtils]: 58: Hoare triple {86966#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {86966#true} is VALID [2018-11-23 13:04:06,388 INFO L273 TraceCheckUtils]: 59: Hoare triple {86966#true} assume !(~ret~0 <= 0); {86966#true} is VALID [2018-11-23 13:04:06,388 INFO L273 TraceCheckUtils]: 60: Hoare triple {86966#true} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,388 INFO L273 TraceCheckUtils]: 61: Hoare triple {86966#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,388 INFO L273 TraceCheckUtils]: 62: Hoare triple {86966#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {86966#true} is VALID [2018-11-23 13:04:06,388 INFO L273 TraceCheckUtils]: 63: Hoare triple {86966#true} ~skip~0 := 0; {86966#true} is VALID [2018-11-23 13:04:06,388 INFO L273 TraceCheckUtils]: 64: Hoare triple {86966#true} assume !false; {86966#true} is VALID [2018-11-23 13:04:06,388 INFO L273 TraceCheckUtils]: 65: Hoare triple {86966#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,388 INFO L273 TraceCheckUtils]: 66: Hoare triple {86966#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,388 INFO L273 TraceCheckUtils]: 67: Hoare triple {86966#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,389 INFO L273 TraceCheckUtils]: 68: Hoare triple {86966#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,389 INFO L273 TraceCheckUtils]: 69: Hoare triple {86966#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,389 INFO L273 TraceCheckUtils]: 70: Hoare triple {86966#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,389 INFO L273 TraceCheckUtils]: 71: Hoare triple {86966#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,389 INFO L273 TraceCheckUtils]: 72: Hoare triple {86966#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,389 INFO L273 TraceCheckUtils]: 73: Hoare triple {86966#true} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,389 INFO L273 TraceCheckUtils]: 74: Hoare triple {86966#true} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,389 INFO L273 TraceCheckUtils]: 75: Hoare triple {86966#true} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,389 INFO L273 TraceCheckUtils]: 76: Hoare triple {86966#true} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {86966#true} is VALID [2018-11-23 13:04:06,390 INFO L273 TraceCheckUtils]: 77: Hoare triple {86966#true} assume 4416 == #t~mem33;havoc #t~mem33; {86966#true} is VALID [2018-11-23 13:04:06,390 INFO L273 TraceCheckUtils]: 78: Hoare triple {86966#true} assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; {86966#true} is VALID [2018-11-23 13:04:06,390 INFO L273 TraceCheckUtils]: 79: Hoare triple {86966#true} assume 3 == ~blastFlag~0;~blastFlag~0 := 4; {86966#true} is VALID [2018-11-23 13:04:06,391 INFO L273 TraceCheckUtils]: 80: Hoare triple {86966#true} assume !(~ret~0 <= 0);call write~int(4432, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~tmp___6~0 := #t~nondet74;havoc #t~nondet74; {86968#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:06,391 INFO L273 TraceCheckUtils]: 81: Hoare triple {86968#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(0 == ~tmp___6~0); {86968#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:06,392 INFO L273 TraceCheckUtils]: 82: Hoare triple {86968#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {86968#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:06,392 INFO L273 TraceCheckUtils]: 83: Hoare triple {86968#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {86968#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:06,393 INFO L273 TraceCheckUtils]: 84: Hoare triple {86968#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} ~skip~0 := 0; {86968#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:06,393 INFO L273 TraceCheckUtils]: 85: Hoare triple {86968#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !false; {86968#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:06,394 INFO L273 TraceCheckUtils]: 86: Hoare triple {86968#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {86968#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:06,394 INFO L273 TraceCheckUtils]: 87: Hoare triple {86968#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {86968#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:06,395 INFO L273 TraceCheckUtils]: 88: Hoare triple {86968#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {86968#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:06,395 INFO L273 TraceCheckUtils]: 89: Hoare triple {86968#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {86969#(= |ssl3_connect_#t~mem25| 4432)} is VALID [2018-11-23 13:04:06,396 INFO L273 TraceCheckUtils]: 90: Hoare triple {86969#(= |ssl3_connect_#t~mem25| 4432)} assume 20480 == #t~mem25;havoc #t~mem25; {86967#false} is VALID [2018-11-23 13:04:06,396 INFO L273 TraceCheckUtils]: 91: Hoare triple {86967#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {86967#false} is VALID [2018-11-23 13:04:06,397 INFO L273 TraceCheckUtils]: 92: Hoare triple {86967#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {86967#false} is VALID [2018-11-23 13:04:06,397 INFO L273 TraceCheckUtils]: 93: Hoare triple {86967#false} call #t~mem57 := read~int(~s.base, ~s.offset, 4); {86967#false} is VALID [2018-11-23 13:04:06,397 INFO L273 TraceCheckUtils]: 94: Hoare triple {86967#false} assume !(768 != ~bitwiseAnd(#t~mem57, 65280));havoc #t~mem57;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {86967#false} is VALID [2018-11-23 13:04:06,397 INFO L273 TraceCheckUtils]: 95: Hoare triple {86967#false} assume !(0 == (#t~mem58.base + #t~mem58.offset) % 4294967296);havoc #t~mem58.base, #t~mem58.offset; {86967#false} is VALID [2018-11-23 13:04:06,397 INFO L273 TraceCheckUtils]: 96: Hoare triple {86967#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {86967#false} is VALID [2018-11-23 13:04:06,397 INFO L273 TraceCheckUtils]: 97: Hoare triple {86967#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {86967#false} is VALID [2018-11-23 13:04:06,398 INFO L273 TraceCheckUtils]: 98: Hoare triple {86967#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem63 := read~int(#t~mem62.base, 60 + #t~mem62.offset, 4);call write~int(1 + #t~mem63, #t~mem62.base, 60 + #t~mem62.offset, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, 64 + ~s.offset, 4); {86967#false} is VALID [2018-11-23 13:04:06,398 INFO L273 TraceCheckUtils]: 99: Hoare triple {86967#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {86967#false} is VALID [2018-11-23 13:04:06,398 INFO L273 TraceCheckUtils]: 100: Hoare triple {86967#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {86967#false} is VALID [2018-11-23 13:04:06,398 INFO L273 TraceCheckUtils]: 101: Hoare triple {86967#false} ~skip~0 := 0; {86967#false} is VALID [2018-11-23 13:04:06,398 INFO L273 TraceCheckUtils]: 102: Hoare triple {86967#false} assume !false; {86967#false} is VALID [2018-11-23 13:04:06,399 INFO L273 TraceCheckUtils]: 103: Hoare triple {86967#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {86967#false} is VALID [2018-11-23 13:04:06,399 INFO L273 TraceCheckUtils]: 104: Hoare triple {86967#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {86967#false} is VALID [2018-11-23 13:04:06,399 INFO L273 TraceCheckUtils]: 105: Hoare triple {86967#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {86967#false} is VALID [2018-11-23 13:04:06,399 INFO L273 TraceCheckUtils]: 106: Hoare triple {86967#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {86967#false} is VALID [2018-11-23 13:04:06,399 INFO L273 TraceCheckUtils]: 107: Hoare triple {86967#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {86967#false} is VALID [2018-11-23 13:04:06,399 INFO L273 TraceCheckUtils]: 108: Hoare triple {86967#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {86967#false} is VALID [2018-11-23 13:04:06,399 INFO L273 TraceCheckUtils]: 109: Hoare triple {86967#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {86967#false} is VALID [2018-11-23 13:04:06,399 INFO L273 TraceCheckUtils]: 110: Hoare triple {86967#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {86967#false} is VALID [2018-11-23 13:04:06,400 INFO L273 TraceCheckUtils]: 111: Hoare triple {86967#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {86967#false} is VALID [2018-11-23 13:04:06,400 INFO L273 TraceCheckUtils]: 112: Hoare triple {86967#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {86967#false} is VALID [2018-11-23 13:04:06,400 INFO L273 TraceCheckUtils]: 113: Hoare triple {86967#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {86967#false} is VALID [2018-11-23 13:04:06,400 INFO L273 TraceCheckUtils]: 114: Hoare triple {86967#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {86967#false} is VALID [2018-11-23 13:04:06,400 INFO L273 TraceCheckUtils]: 115: Hoare triple {86967#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {86967#false} is VALID [2018-11-23 13:04:06,400 INFO L273 TraceCheckUtils]: 116: Hoare triple {86967#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {86967#false} is VALID [2018-11-23 13:04:06,400 INFO L273 TraceCheckUtils]: 117: Hoare triple {86967#false} assume !(4432 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {86967#false} is VALID [2018-11-23 13:04:06,400 INFO L273 TraceCheckUtils]: 118: Hoare triple {86967#false} assume !(4433 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {86967#false} is VALID [2018-11-23 13:04:06,400 INFO L273 TraceCheckUtils]: 119: Hoare triple {86967#false} assume 4448 == #t~mem37;havoc #t~mem37; {86967#false} is VALID [2018-11-23 13:04:06,401 INFO L273 TraceCheckUtils]: 120: Hoare triple {86967#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {86967#false} is VALID [2018-11-23 13:04:06,401 INFO L273 TraceCheckUtils]: 121: Hoare triple {86967#false} assume 4 == ~blastFlag~0; {86967#false} is VALID [2018-11-23 13:04:06,401 INFO L273 TraceCheckUtils]: 122: Hoare triple {86967#false} assume !false; {86967#false} is VALID [2018-11-23 13:04:06,411 INFO L134 CoverageAnalysis]: Checked inductivity of 160 backedges. 95 proven. 0 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2018-11-23 13:04:06,411 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:04:06,412 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:04:06,412 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 123 [2018-11-23 13:04:06,412 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:04:06,412 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:04:06,509 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 90 edges. 90 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:04:06,509 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:04:06,509 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:04:06,509 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:04:06,510 INFO L87 Difference]: Start difference. First operand 916 states and 1354 transitions. Second operand 4 states. [2018-11-23 13:04:08,159 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:04:08,159 INFO L93 Difference]: Finished difference Result 1951 states and 2849 transitions. [2018-11-23 13:04:08,159 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:04:08,160 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 123 [2018-11-23 13:04:08,160 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:04:08,160 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:04:08,162 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 409 transitions. [2018-11-23 13:04:08,162 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:04:08,163 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 409 transitions. [2018-11-23 13:04:08,163 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 409 transitions. [2018-11-23 13:04:08,664 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 409 edges. 409 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:04:08,715 INFO L225 Difference]: With dead ends: 1951 [2018-11-23 13:04:08,715 INFO L226 Difference]: Without dead ends: 1048 [2018-11-23 13:04:08,716 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:04:08,717 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1048 states. [2018-11-23 13:04:09,030 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1048 to 916. [2018-11-23 13:04:09,030 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:04:09,030 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1048 states. Second operand 916 states. [2018-11-23 13:04:09,030 INFO L74 IsIncluded]: Start isIncluded. First operand 1048 states. Second operand 916 states. [2018-11-23 13:04:09,031 INFO L87 Difference]: Start difference. First operand 1048 states. Second operand 916 states. [2018-11-23 13:04:09,074 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:04:09,074 INFO L93 Difference]: Finished difference Result 1048 states and 1507 transitions. [2018-11-23 13:04:09,074 INFO L276 IsEmpty]: Start isEmpty. Operand 1048 states and 1507 transitions. [2018-11-23 13:04:09,076 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:04:09,076 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:04:09,076 INFO L74 IsIncluded]: Start isIncluded. First operand 916 states. Second operand 1048 states. [2018-11-23 13:04:09,076 INFO L87 Difference]: Start difference. First operand 916 states. Second operand 1048 states. [2018-11-23 13:04:09,116 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:04:09,117 INFO L93 Difference]: Finished difference Result 1048 states and 1507 transitions. [2018-11-23 13:04:09,117 INFO L276 IsEmpty]: Start isEmpty. Operand 1048 states and 1507 transitions. [2018-11-23 13:04:09,118 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:04:09,118 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:04:09,118 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:04:09,118 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:04:09,118 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 916 states. [2018-11-23 13:04:09,147 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 916 states to 916 states and 1349 transitions. [2018-11-23 13:04:09,147 INFO L78 Accepts]: Start accepts. Automaton has 916 states and 1349 transitions. Word has length 123 [2018-11-23 13:04:09,147 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:04:09,148 INFO L480 AbstractCegarLoop]: Abstraction has 916 states and 1349 transitions. [2018-11-23 13:04:09,148 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:04:09,148 INFO L276 IsEmpty]: Start isEmpty. Operand 916 states and 1349 transitions. [2018-11-23 13:04:09,149 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2018-11-23 13:04:09,150 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:04:09,150 INFO L402 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 5, 5, 5, 5, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:04:09,150 INFO L423 AbstractCegarLoop]: === Iteration 32 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:04:09,150 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:04:09,150 INFO L82 PathProgramCache]: Analyzing trace with hash 805588424, now seen corresponding path program 1 times [2018-11-23 13:04:09,150 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:04:09,150 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:04:09,151 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:04:09,151 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:04:09,151 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:04:09,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:04:09,400 INFO L256 TraceCheckUtils]: 0: Hoare triple {92273#true} call ULTIMATE.init(); {92273#true} is VALID [2018-11-23 13:04:09,400 INFO L273 TraceCheckUtils]: 1: Hoare triple {92273#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,400 INFO L273 TraceCheckUtils]: 2: Hoare triple {92273#true} assume true; {92273#true} is VALID [2018-11-23 13:04:09,400 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {92273#true} {92273#true} #542#return; {92273#true} is VALID [2018-11-23 13:04:09,401 INFO L256 TraceCheckUtils]: 4: Hoare triple {92273#true} call #t~ret138 := main(); {92273#true} is VALID [2018-11-23 13:04:09,401 INFO L273 TraceCheckUtils]: 5: Hoare triple {92273#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {92273#true} is VALID [2018-11-23 13:04:09,401 INFO L256 TraceCheckUtils]: 6: Hoare triple {92273#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {92273#true} is VALID [2018-11-23 13:04:09,401 INFO L273 TraceCheckUtils]: 7: Hoare triple {92273#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,401 INFO L273 TraceCheckUtils]: 8: Hoare triple {92273#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {92273#true} is VALID [2018-11-23 13:04:09,401 INFO L273 TraceCheckUtils]: 9: Hoare triple {92273#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {92273#true} is VALID [2018-11-23 13:04:09,401 INFO L273 TraceCheckUtils]: 10: Hoare triple {92273#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {92273#true} is VALID [2018-11-23 13:04:09,401 INFO L273 TraceCheckUtils]: 11: Hoare triple {92273#true} assume !false; {92273#true} is VALID [2018-11-23 13:04:09,402 INFO L273 TraceCheckUtils]: 12: Hoare triple {92273#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,402 INFO L273 TraceCheckUtils]: 13: Hoare triple {92273#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,402 INFO L273 TraceCheckUtils]: 14: Hoare triple {92273#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,402 INFO L273 TraceCheckUtils]: 15: Hoare triple {92273#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,402 INFO L273 TraceCheckUtils]: 16: Hoare triple {92273#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,402 INFO L273 TraceCheckUtils]: 17: Hoare triple {92273#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,402 INFO L273 TraceCheckUtils]: 18: Hoare triple {92273#true} assume 4368 == #t~mem27;havoc #t~mem27; {92273#true} is VALID [2018-11-23 13:04:09,402 INFO L273 TraceCheckUtils]: 19: Hoare triple {92273#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {92273#true} is VALID [2018-11-23 13:04:09,402 INFO L273 TraceCheckUtils]: 20: Hoare triple {92273#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {92273#true} is VALID [2018-11-23 13:04:09,403 INFO L273 TraceCheckUtils]: 21: Hoare triple {92273#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,403 INFO L273 TraceCheckUtils]: 22: Hoare triple {92273#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {92273#true} is VALID [2018-11-23 13:04:09,403 INFO L273 TraceCheckUtils]: 23: Hoare triple {92273#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,403 INFO L273 TraceCheckUtils]: 24: Hoare triple {92273#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {92273#true} is VALID [2018-11-23 13:04:09,403 INFO L273 TraceCheckUtils]: 25: Hoare triple {92273#true} ~skip~0 := 0; {92273#true} is VALID [2018-11-23 13:04:09,403 INFO L273 TraceCheckUtils]: 26: Hoare triple {92273#true} assume !false; {92273#true} is VALID [2018-11-23 13:04:09,403 INFO L273 TraceCheckUtils]: 27: Hoare triple {92273#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,403 INFO L273 TraceCheckUtils]: 28: Hoare triple {92273#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,403 INFO L273 TraceCheckUtils]: 29: Hoare triple {92273#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,404 INFO L273 TraceCheckUtils]: 30: Hoare triple {92273#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,404 INFO L273 TraceCheckUtils]: 31: Hoare triple {92273#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,404 INFO L273 TraceCheckUtils]: 32: Hoare triple {92273#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,404 INFO L273 TraceCheckUtils]: 33: Hoare triple {92273#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,404 INFO L273 TraceCheckUtils]: 34: Hoare triple {92273#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,404 INFO L273 TraceCheckUtils]: 35: Hoare triple {92273#true} assume 4384 == #t~mem29;havoc #t~mem29; {92273#true} is VALID [2018-11-23 13:04:09,404 INFO L273 TraceCheckUtils]: 36: Hoare triple {92273#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {92273#true} is VALID [2018-11-23 13:04:09,404 INFO L273 TraceCheckUtils]: 37: Hoare triple {92273#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {92273#true} is VALID [2018-11-23 13:04:09,404 INFO L273 TraceCheckUtils]: 38: Hoare triple {92273#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,405 INFO L273 TraceCheckUtils]: 39: Hoare triple {92273#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,405 INFO L273 TraceCheckUtils]: 40: Hoare triple {92273#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,405 INFO L273 TraceCheckUtils]: 41: Hoare triple {92273#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,405 INFO L273 TraceCheckUtils]: 42: Hoare triple {92273#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {92273#true} is VALID [2018-11-23 13:04:09,405 INFO L273 TraceCheckUtils]: 43: Hoare triple {92273#true} ~skip~0 := 0; {92273#true} is VALID [2018-11-23 13:04:09,405 INFO L273 TraceCheckUtils]: 44: Hoare triple {92273#true} assume !false; {92273#true} is VALID [2018-11-23 13:04:09,405 INFO L273 TraceCheckUtils]: 45: Hoare triple {92273#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,405 INFO L273 TraceCheckUtils]: 46: Hoare triple {92273#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,405 INFO L273 TraceCheckUtils]: 47: Hoare triple {92273#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,406 INFO L273 TraceCheckUtils]: 48: Hoare triple {92273#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,406 INFO L273 TraceCheckUtils]: 49: Hoare triple {92273#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,406 INFO L273 TraceCheckUtils]: 50: Hoare triple {92273#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,406 INFO L273 TraceCheckUtils]: 51: Hoare triple {92273#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,406 INFO L273 TraceCheckUtils]: 52: Hoare triple {92273#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,406 INFO L273 TraceCheckUtils]: 53: Hoare triple {92273#true} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,406 INFO L273 TraceCheckUtils]: 54: Hoare triple {92273#true} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,406 INFO L273 TraceCheckUtils]: 55: Hoare triple {92273#true} assume 4400 == #t~mem31;havoc #t~mem31; {92273#true} is VALID [2018-11-23 13:04:09,406 INFO L273 TraceCheckUtils]: 56: Hoare triple {92273#true} call #t~mem69.base, #t~mem69.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem70.base, #t~mem70.offset := read~$Pointer$(#t~mem69.base, 836 + #t~mem69.offset, 4);call #t~mem71 := read~int(#t~mem70.base, 12 + #t~mem70.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,407 INFO L273 TraceCheckUtils]: 57: Hoare triple {92273#true} assume !(0 != ~bitwiseAnd(#t~mem71, 256) % 4294967296);havoc #t~mem69.base, #t~mem69.offset;havoc #t~mem71;havoc #t~mem70.base, #t~mem70.offset;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~ret~0 := #t~nondet72;havoc #t~nondet72; {92273#true} is VALID [2018-11-23 13:04:09,407 INFO L273 TraceCheckUtils]: 58: Hoare triple {92273#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {92273#true} is VALID [2018-11-23 13:04:09,407 INFO L273 TraceCheckUtils]: 59: Hoare triple {92273#true} assume !(~ret~0 <= 0); {92273#true} is VALID [2018-11-23 13:04:09,407 INFO L273 TraceCheckUtils]: 60: Hoare triple {92273#true} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,407 INFO L273 TraceCheckUtils]: 61: Hoare triple {92273#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,407 INFO L273 TraceCheckUtils]: 62: Hoare triple {92273#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {92273#true} is VALID [2018-11-23 13:04:09,407 INFO L273 TraceCheckUtils]: 63: Hoare triple {92273#true} ~skip~0 := 0; {92273#true} is VALID [2018-11-23 13:04:09,407 INFO L273 TraceCheckUtils]: 64: Hoare triple {92273#true} assume !false; {92273#true} is VALID [2018-11-23 13:04:09,407 INFO L273 TraceCheckUtils]: 65: Hoare triple {92273#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,408 INFO L273 TraceCheckUtils]: 66: Hoare triple {92273#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,408 INFO L273 TraceCheckUtils]: 67: Hoare triple {92273#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,408 INFO L273 TraceCheckUtils]: 68: Hoare triple {92273#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,408 INFO L273 TraceCheckUtils]: 69: Hoare triple {92273#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,408 INFO L273 TraceCheckUtils]: 70: Hoare triple {92273#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,408 INFO L273 TraceCheckUtils]: 71: Hoare triple {92273#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,408 INFO L273 TraceCheckUtils]: 72: Hoare triple {92273#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,408 INFO L273 TraceCheckUtils]: 73: Hoare triple {92273#true} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,409 INFO L273 TraceCheckUtils]: 74: Hoare triple {92273#true} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,409 INFO L273 TraceCheckUtils]: 75: Hoare triple {92273#true} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,409 INFO L273 TraceCheckUtils]: 76: Hoare triple {92273#true} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {92273#true} is VALID [2018-11-23 13:04:09,409 INFO L273 TraceCheckUtils]: 77: Hoare triple {92273#true} assume 4416 == #t~mem33;havoc #t~mem33; {92273#true} is VALID [2018-11-23 13:04:09,409 INFO L273 TraceCheckUtils]: 78: Hoare triple {92273#true} assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; {92273#true} is VALID [2018-11-23 13:04:09,409 INFO L273 TraceCheckUtils]: 79: Hoare triple {92273#true} assume 3 == ~blastFlag~0;~blastFlag~0 := 4; {92273#true} is VALID [2018-11-23 13:04:09,415 INFO L273 TraceCheckUtils]: 80: Hoare triple {92273#true} assume !(~ret~0 <= 0);call write~int(4432, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~tmp___6~0 := #t~nondet74;havoc #t~nondet74; {92275#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:09,418 INFO L273 TraceCheckUtils]: 81: Hoare triple {92275#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(0 == ~tmp___6~0); {92275#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:09,418 INFO L273 TraceCheckUtils]: 82: Hoare triple {92275#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {92275#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:09,420 INFO L273 TraceCheckUtils]: 83: Hoare triple {92275#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {92275#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:09,420 INFO L273 TraceCheckUtils]: 84: Hoare triple {92275#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} ~skip~0 := 0; {92275#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:09,422 INFO L273 TraceCheckUtils]: 85: Hoare triple {92275#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !false; {92275#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:09,422 INFO L273 TraceCheckUtils]: 86: Hoare triple {92275#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {92275#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:09,424 INFO L273 TraceCheckUtils]: 87: Hoare triple {92275#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {92275#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:09,424 INFO L273 TraceCheckUtils]: 88: Hoare triple {92275#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {92275#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:09,426 INFO L273 TraceCheckUtils]: 89: Hoare triple {92275#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {92275#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} is VALID [2018-11-23 13:04:09,426 INFO L273 TraceCheckUtils]: 90: Hoare triple {92275#(= (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)) 4432)} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {92276#(= |ssl3_connect_#t~mem26| 4432)} is VALID [2018-11-23 13:04:09,428 INFO L273 TraceCheckUtils]: 91: Hoare triple {92276#(= |ssl3_connect_#t~mem26| 4432)} assume 4099 == #t~mem26;havoc #t~mem26; {92274#false} is VALID [2018-11-23 13:04:09,428 INFO L273 TraceCheckUtils]: 92: Hoare triple {92274#false} call write~int(0, ~s.base, 36 + ~s.offset, 4); {92274#false} is VALID [2018-11-23 13:04:09,428 INFO L273 TraceCheckUtils]: 93: Hoare triple {92274#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {92274#false} is VALID [2018-11-23 13:04:09,428 INFO L273 TraceCheckUtils]: 94: Hoare triple {92274#false} call #t~mem57 := read~int(~s.base, ~s.offset, 4); {92274#false} is VALID [2018-11-23 13:04:09,428 INFO L273 TraceCheckUtils]: 95: Hoare triple {92274#false} assume !(768 != ~bitwiseAnd(#t~mem57, 65280));havoc #t~mem57;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {92274#false} is VALID [2018-11-23 13:04:09,428 INFO L273 TraceCheckUtils]: 96: Hoare triple {92274#false} assume !(0 == (#t~mem58.base + #t~mem58.offset) % 4294967296);havoc #t~mem58.base, #t~mem58.offset; {92274#false} is VALID [2018-11-23 13:04:09,428 INFO L273 TraceCheckUtils]: 97: Hoare triple {92274#false} assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; {92274#false} is VALID [2018-11-23 13:04:09,428 INFO L273 TraceCheckUtils]: 98: Hoare triple {92274#false} assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; {92274#false} is VALID [2018-11-23 13:04:09,429 INFO L273 TraceCheckUtils]: 99: Hoare triple {92274#false} assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem63 := read~int(#t~mem62.base, 60 + #t~mem62.offset, 4);call write~int(1 + #t~mem63, #t~mem62.base, 60 + #t~mem62.offset, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, 64 + ~s.offset, 4); {92274#false} is VALID [2018-11-23 13:04:09,429 INFO L273 TraceCheckUtils]: 100: Hoare triple {92274#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {92274#false} is VALID [2018-11-23 13:04:09,429 INFO L273 TraceCheckUtils]: 101: Hoare triple {92274#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {92274#false} is VALID [2018-11-23 13:04:09,429 INFO L273 TraceCheckUtils]: 102: Hoare triple {92274#false} ~skip~0 := 0; {92274#false} is VALID [2018-11-23 13:04:09,429 INFO L273 TraceCheckUtils]: 103: Hoare triple {92274#false} assume !false; {92274#false} is VALID [2018-11-23 13:04:09,429 INFO L273 TraceCheckUtils]: 104: Hoare triple {92274#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {92274#false} is VALID [2018-11-23 13:04:09,429 INFO L273 TraceCheckUtils]: 105: Hoare triple {92274#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {92274#false} is VALID [2018-11-23 13:04:09,429 INFO L273 TraceCheckUtils]: 106: Hoare triple {92274#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {92274#false} is VALID [2018-11-23 13:04:09,429 INFO L273 TraceCheckUtils]: 107: Hoare triple {92274#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {92274#false} is VALID [2018-11-23 13:04:09,430 INFO L273 TraceCheckUtils]: 108: Hoare triple {92274#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {92274#false} is VALID [2018-11-23 13:04:09,430 INFO L273 TraceCheckUtils]: 109: Hoare triple {92274#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {92274#false} is VALID [2018-11-23 13:04:09,430 INFO L273 TraceCheckUtils]: 110: Hoare triple {92274#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {92274#false} is VALID [2018-11-23 13:04:09,430 INFO L273 TraceCheckUtils]: 111: Hoare triple {92274#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {92274#false} is VALID [2018-11-23 13:04:09,430 INFO L273 TraceCheckUtils]: 112: Hoare triple {92274#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {92274#false} is VALID [2018-11-23 13:04:09,430 INFO L273 TraceCheckUtils]: 113: Hoare triple {92274#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {92274#false} is VALID [2018-11-23 13:04:09,431 INFO L273 TraceCheckUtils]: 114: Hoare triple {92274#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {92274#false} is VALID [2018-11-23 13:04:09,431 INFO L273 TraceCheckUtils]: 115: Hoare triple {92274#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {92274#false} is VALID [2018-11-23 13:04:09,431 INFO L273 TraceCheckUtils]: 116: Hoare triple {92274#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {92274#false} is VALID [2018-11-23 13:04:09,431 INFO L273 TraceCheckUtils]: 117: Hoare triple {92274#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {92274#false} is VALID [2018-11-23 13:04:09,431 INFO L273 TraceCheckUtils]: 118: Hoare triple {92274#false} assume !(4432 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {92274#false} is VALID [2018-11-23 13:04:09,431 INFO L273 TraceCheckUtils]: 119: Hoare triple {92274#false} assume !(4433 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {92274#false} is VALID [2018-11-23 13:04:09,432 INFO L273 TraceCheckUtils]: 120: Hoare triple {92274#false} assume 4448 == #t~mem37;havoc #t~mem37; {92274#false} is VALID [2018-11-23 13:04:09,432 INFO L273 TraceCheckUtils]: 121: Hoare triple {92274#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {92274#false} is VALID [2018-11-23 13:04:09,432 INFO L273 TraceCheckUtils]: 122: Hoare triple {92274#false} assume 4 == ~blastFlag~0; {92274#false} is VALID [2018-11-23 13:04:09,432 INFO L273 TraceCheckUtils]: 123: Hoare triple {92274#false} assume !false; {92274#false} is VALID [2018-11-23 13:04:09,441 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 100 proven. 0 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2018-11-23 13:04:09,442 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:04:09,442 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:04:09,442 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 124 [2018-11-23 13:04:09,443 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:04:09,443 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:04:09,584 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 91 edges. 91 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:04:09,584 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:04:09,585 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:04:09,585 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:04:09,585 INFO L87 Difference]: Start difference. First operand 916 states and 1349 transitions. Second operand 4 states. [2018-11-23 13:04:11,116 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:04:11,117 INFO L93 Difference]: Finished difference Result 1906 states and 2784 transitions. [2018-11-23 13:04:11,117 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:04:11,117 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 124 [2018-11-23 13:04:11,117 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:04:11,117 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:04:11,119 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 397 transitions. [2018-11-23 13:04:11,119 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:04:11,120 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 397 transitions. [2018-11-23 13:04:11,120 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 397 transitions. [2018-11-23 13:04:11,535 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 397 edges. 397 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:04:11,584 INFO L225 Difference]: With dead ends: 1906 [2018-11-23 13:04:11,584 INFO L226 Difference]: Without dead ends: 1003 [2018-11-23 13:04:11,586 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:04:11,587 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1003 states. [2018-11-23 13:04:11,996 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1003 to 916. [2018-11-23 13:04:11,996 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:04:11,996 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1003 states. Second operand 916 states. [2018-11-23 13:04:11,996 INFO L74 IsIncluded]: Start isIncluded. First operand 1003 states. Second operand 916 states. [2018-11-23 13:04:11,996 INFO L87 Difference]: Start difference. First operand 1003 states. Second operand 916 states. [2018-11-23 13:04:12,030 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:04:12,031 INFO L93 Difference]: Finished difference Result 1003 states and 1447 transitions. [2018-11-23 13:04:12,031 INFO L276 IsEmpty]: Start isEmpty. Operand 1003 states and 1447 transitions. [2018-11-23 13:04:12,032 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:04:12,032 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:04:12,032 INFO L74 IsIncluded]: Start isIncluded. First operand 916 states. Second operand 1003 states. [2018-11-23 13:04:12,032 INFO L87 Difference]: Start difference. First operand 916 states. Second operand 1003 states. [2018-11-23 13:04:12,063 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:04:12,063 INFO L93 Difference]: Finished difference Result 1003 states and 1447 transitions. [2018-11-23 13:04:12,063 INFO L276 IsEmpty]: Start isEmpty. Operand 1003 states and 1447 transitions. [2018-11-23 13:04:12,064 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:04:12,065 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:04:12,065 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:04:12,065 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:04:12,065 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 916 states. [2018-11-23 13:04:12,093 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 916 states to 916 states and 1344 transitions. [2018-11-23 13:04:12,094 INFO L78 Accepts]: Start accepts. Automaton has 916 states and 1344 transitions. Word has length 124 [2018-11-23 13:04:12,094 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:04:12,094 INFO L480 AbstractCegarLoop]: Abstraction has 916 states and 1344 transitions. [2018-11-23 13:04:12,094 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:04:12,094 INFO L276 IsEmpty]: Start isEmpty. Operand 916 states and 1344 transitions. [2018-11-23 13:04:12,095 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2018-11-23 13:04:12,095 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:04:12,095 INFO L402 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 5, 5, 5, 5, 5, 4, 4, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:04:12,095 INFO L423 AbstractCegarLoop]: === Iteration 33 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:04:12,096 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:04:12,096 INFO L82 PathProgramCache]: Analyzing trace with hash -1158112039, now seen corresponding path program 1 times [2018-11-23 13:04:12,096 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:04:12,096 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:04:12,097 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:04:12,097 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:04:12,097 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:04:12,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:04:12,195 INFO L256 TraceCheckUtils]: 0: Hoare triple {97440#true} call ULTIMATE.init(); {97440#true} is VALID [2018-11-23 13:04:12,196 INFO L273 TraceCheckUtils]: 1: Hoare triple {97440#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,196 INFO L273 TraceCheckUtils]: 2: Hoare triple {97440#true} assume true; {97440#true} is VALID [2018-11-23 13:04:12,197 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {97440#true} {97440#true} #542#return; {97440#true} is VALID [2018-11-23 13:04:12,197 INFO L256 TraceCheckUtils]: 4: Hoare triple {97440#true} call #t~ret138 := main(); {97440#true} is VALID [2018-11-23 13:04:12,197 INFO L273 TraceCheckUtils]: 5: Hoare triple {97440#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {97440#true} is VALID [2018-11-23 13:04:12,198 INFO L256 TraceCheckUtils]: 6: Hoare triple {97440#true} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {97440#true} is VALID [2018-11-23 13:04:12,198 INFO L273 TraceCheckUtils]: 7: Hoare triple {97440#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,198 INFO L273 TraceCheckUtils]: 8: Hoare triple {97440#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {97440#true} is VALID [2018-11-23 13:04:12,198 INFO L273 TraceCheckUtils]: 9: Hoare triple {97440#true} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {97440#true} is VALID [2018-11-23 13:04:12,198 INFO L273 TraceCheckUtils]: 10: Hoare triple {97440#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {97440#true} is VALID [2018-11-23 13:04:12,198 INFO L273 TraceCheckUtils]: 11: Hoare triple {97440#true} assume !false; {97440#true} is VALID [2018-11-23 13:04:12,199 INFO L273 TraceCheckUtils]: 12: Hoare triple {97440#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,199 INFO L273 TraceCheckUtils]: 13: Hoare triple {97440#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,199 INFO L273 TraceCheckUtils]: 14: Hoare triple {97440#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,199 INFO L273 TraceCheckUtils]: 15: Hoare triple {97440#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,199 INFO L273 TraceCheckUtils]: 16: Hoare triple {97440#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,199 INFO L273 TraceCheckUtils]: 17: Hoare triple {97440#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,200 INFO L273 TraceCheckUtils]: 18: Hoare triple {97440#true} assume 4368 == #t~mem27;havoc #t~mem27; {97440#true} is VALID [2018-11-23 13:04:12,200 INFO L273 TraceCheckUtils]: 19: Hoare triple {97440#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {97440#true} is VALID [2018-11-23 13:04:12,200 INFO L273 TraceCheckUtils]: 20: Hoare triple {97440#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {97440#true} is VALID [2018-11-23 13:04:12,200 INFO L273 TraceCheckUtils]: 21: Hoare triple {97440#true} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,200 INFO L273 TraceCheckUtils]: 22: Hoare triple {97440#true} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {97440#true} is VALID [2018-11-23 13:04:12,200 INFO L273 TraceCheckUtils]: 23: Hoare triple {97440#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,200 INFO L273 TraceCheckUtils]: 24: Hoare triple {97440#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {97440#true} is VALID [2018-11-23 13:04:12,201 INFO L273 TraceCheckUtils]: 25: Hoare triple {97440#true} ~skip~0 := 0; {97440#true} is VALID [2018-11-23 13:04:12,201 INFO L273 TraceCheckUtils]: 26: Hoare triple {97440#true} assume !false; {97440#true} is VALID [2018-11-23 13:04:12,201 INFO L273 TraceCheckUtils]: 27: Hoare triple {97440#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,201 INFO L273 TraceCheckUtils]: 28: Hoare triple {97440#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,201 INFO L273 TraceCheckUtils]: 29: Hoare triple {97440#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,201 INFO L273 TraceCheckUtils]: 30: Hoare triple {97440#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,201 INFO L273 TraceCheckUtils]: 31: Hoare triple {97440#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,201 INFO L273 TraceCheckUtils]: 32: Hoare triple {97440#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,201 INFO L273 TraceCheckUtils]: 33: Hoare triple {97440#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,202 INFO L273 TraceCheckUtils]: 34: Hoare triple {97440#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,202 INFO L273 TraceCheckUtils]: 35: Hoare triple {97440#true} assume 4384 == #t~mem29;havoc #t~mem29; {97440#true} is VALID [2018-11-23 13:04:12,202 INFO L273 TraceCheckUtils]: 36: Hoare triple {97440#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {97440#true} is VALID [2018-11-23 13:04:12,202 INFO L273 TraceCheckUtils]: 37: Hoare triple {97440#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {97440#true} is VALID [2018-11-23 13:04:12,202 INFO L273 TraceCheckUtils]: 38: Hoare triple {97440#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,202 INFO L273 TraceCheckUtils]: 39: Hoare triple {97440#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,202 INFO L273 TraceCheckUtils]: 40: Hoare triple {97440#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,202 INFO L273 TraceCheckUtils]: 41: Hoare triple {97440#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,202 INFO L273 TraceCheckUtils]: 42: Hoare triple {97440#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {97440#true} is VALID [2018-11-23 13:04:12,203 INFO L273 TraceCheckUtils]: 43: Hoare triple {97440#true} ~skip~0 := 0; {97440#true} is VALID [2018-11-23 13:04:12,203 INFO L273 TraceCheckUtils]: 44: Hoare triple {97440#true} assume !false; {97440#true} is VALID [2018-11-23 13:04:12,203 INFO L273 TraceCheckUtils]: 45: Hoare triple {97440#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,203 INFO L273 TraceCheckUtils]: 46: Hoare triple {97440#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,203 INFO L273 TraceCheckUtils]: 47: Hoare triple {97440#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,203 INFO L273 TraceCheckUtils]: 48: Hoare triple {97440#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,203 INFO L273 TraceCheckUtils]: 49: Hoare triple {97440#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,203 INFO L273 TraceCheckUtils]: 50: Hoare triple {97440#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,203 INFO L273 TraceCheckUtils]: 51: Hoare triple {97440#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,204 INFO L273 TraceCheckUtils]: 52: Hoare triple {97440#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,204 INFO L273 TraceCheckUtils]: 53: Hoare triple {97440#true} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,204 INFO L273 TraceCheckUtils]: 54: Hoare triple {97440#true} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,204 INFO L273 TraceCheckUtils]: 55: Hoare triple {97440#true} assume 4400 == #t~mem31;havoc #t~mem31; {97440#true} is VALID [2018-11-23 13:04:12,204 INFO L273 TraceCheckUtils]: 56: Hoare triple {97440#true} call #t~mem69.base, #t~mem69.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem70.base, #t~mem70.offset := read~$Pointer$(#t~mem69.base, 836 + #t~mem69.offset, 4);call #t~mem71 := read~int(#t~mem70.base, 12 + #t~mem70.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,204 INFO L273 TraceCheckUtils]: 57: Hoare triple {97440#true} assume !(0 != ~bitwiseAnd(#t~mem71, 256) % 4294967296);havoc #t~mem69.base, #t~mem69.offset;havoc #t~mem71;havoc #t~mem70.base, #t~mem70.offset;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~ret~0 := #t~nondet72;havoc #t~nondet72; {97440#true} is VALID [2018-11-23 13:04:12,204 INFO L273 TraceCheckUtils]: 58: Hoare triple {97440#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {97440#true} is VALID [2018-11-23 13:04:12,204 INFO L273 TraceCheckUtils]: 59: Hoare triple {97440#true} assume !(~ret~0 <= 0); {97440#true} is VALID [2018-11-23 13:04:12,204 INFO L273 TraceCheckUtils]: 60: Hoare triple {97440#true} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,205 INFO L273 TraceCheckUtils]: 61: Hoare triple {97440#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,205 INFO L273 TraceCheckUtils]: 62: Hoare triple {97440#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {97440#true} is VALID [2018-11-23 13:04:12,205 INFO L273 TraceCheckUtils]: 63: Hoare triple {97440#true} ~skip~0 := 0; {97440#true} is VALID [2018-11-23 13:04:12,205 INFO L273 TraceCheckUtils]: 64: Hoare triple {97440#true} assume !false; {97440#true} is VALID [2018-11-23 13:04:12,205 INFO L273 TraceCheckUtils]: 65: Hoare triple {97440#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,205 INFO L273 TraceCheckUtils]: 66: Hoare triple {97440#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,205 INFO L273 TraceCheckUtils]: 67: Hoare triple {97440#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,206 INFO L273 TraceCheckUtils]: 68: Hoare triple {97440#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,206 INFO L273 TraceCheckUtils]: 69: Hoare triple {97440#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,206 INFO L273 TraceCheckUtils]: 70: Hoare triple {97440#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,206 INFO L273 TraceCheckUtils]: 71: Hoare triple {97440#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,206 INFO L273 TraceCheckUtils]: 72: Hoare triple {97440#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,206 INFO L273 TraceCheckUtils]: 73: Hoare triple {97440#true} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,207 INFO L273 TraceCheckUtils]: 74: Hoare triple {97440#true} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,207 INFO L273 TraceCheckUtils]: 75: Hoare triple {97440#true} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,207 INFO L273 TraceCheckUtils]: 76: Hoare triple {97440#true} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,207 INFO L273 TraceCheckUtils]: 77: Hoare triple {97440#true} assume 4416 == #t~mem33;havoc #t~mem33; {97440#true} is VALID [2018-11-23 13:04:12,207 INFO L273 TraceCheckUtils]: 78: Hoare triple {97440#true} assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; {97440#true} is VALID [2018-11-23 13:04:12,207 INFO L273 TraceCheckUtils]: 79: Hoare triple {97440#true} assume 3 == ~blastFlag~0;~blastFlag~0 := 4; {97440#true} is VALID [2018-11-23 13:04:12,207 INFO L273 TraceCheckUtils]: 80: Hoare triple {97440#true} assume !(~ret~0 <= 0);call write~int(4432, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~tmp___6~0 := #t~nondet74;havoc #t~nondet74; {97440#true} is VALID [2018-11-23 13:04:12,208 INFO L273 TraceCheckUtils]: 81: Hoare triple {97440#true} assume !(0 == ~tmp___6~0); {97440#true} is VALID [2018-11-23 13:04:12,208 INFO L273 TraceCheckUtils]: 82: Hoare triple {97440#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,208 INFO L273 TraceCheckUtils]: 83: Hoare triple {97440#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {97440#true} is VALID [2018-11-23 13:04:12,208 INFO L273 TraceCheckUtils]: 84: Hoare triple {97440#true} ~skip~0 := 0; {97440#true} is VALID [2018-11-23 13:04:12,208 INFO L273 TraceCheckUtils]: 85: Hoare triple {97440#true} assume !false; {97440#true} is VALID [2018-11-23 13:04:12,208 INFO L273 TraceCheckUtils]: 86: Hoare triple {97440#true} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,208 INFO L273 TraceCheckUtils]: 87: Hoare triple {97440#true} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,208 INFO L273 TraceCheckUtils]: 88: Hoare triple {97440#true} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,208 INFO L273 TraceCheckUtils]: 89: Hoare triple {97440#true} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,209 INFO L273 TraceCheckUtils]: 90: Hoare triple {97440#true} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,209 INFO L273 TraceCheckUtils]: 91: Hoare triple {97440#true} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,209 INFO L273 TraceCheckUtils]: 92: Hoare triple {97440#true} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,209 INFO L273 TraceCheckUtils]: 93: Hoare triple {97440#true} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,209 INFO L273 TraceCheckUtils]: 94: Hoare triple {97440#true} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,209 INFO L273 TraceCheckUtils]: 95: Hoare triple {97440#true} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,209 INFO L273 TraceCheckUtils]: 96: Hoare triple {97440#true} assume 4400 == #t~mem31;havoc #t~mem31; {97440#true} is VALID [2018-11-23 13:04:12,209 INFO L273 TraceCheckUtils]: 97: Hoare triple {97440#true} call #t~mem69.base, #t~mem69.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem70.base, #t~mem70.offset := read~$Pointer$(#t~mem69.base, 836 + #t~mem69.offset, 4);call #t~mem71 := read~int(#t~mem70.base, 12 + #t~mem70.offset, 4); {97440#true} is VALID [2018-11-23 13:04:12,209 INFO L273 TraceCheckUtils]: 98: Hoare triple {97440#true} assume 0 != ~bitwiseAnd(#t~mem71, 256) % 4294967296;havoc #t~mem69.base, #t~mem69.offset;havoc #t~mem71;havoc #t~mem70.base, #t~mem70.offset;~skip~0 := 1; {97440#true} is VALID [2018-11-23 13:04:12,211 INFO L273 TraceCheckUtils]: 99: Hoare triple {97440#true} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:12,212 INFO L273 TraceCheckUtils]: 100: Hoare triple {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:12,214 INFO L273 TraceCheckUtils]: 101: Hoare triple {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:12,214 INFO L273 TraceCheckUtils]: 102: Hoare triple {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} ~skip~0 := 0; {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:12,218 INFO L273 TraceCheckUtils]: 103: Hoare triple {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !false; {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:12,218 INFO L273 TraceCheckUtils]: 104: Hoare triple {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:12,220 INFO L273 TraceCheckUtils]: 105: Hoare triple {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:12,220 INFO L273 TraceCheckUtils]: 106: Hoare triple {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:12,222 INFO L273 TraceCheckUtils]: 107: Hoare triple {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:12,222 INFO L273 TraceCheckUtils]: 108: Hoare triple {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:12,224 INFO L273 TraceCheckUtils]: 109: Hoare triple {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:12,224 INFO L273 TraceCheckUtils]: 110: Hoare triple {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:12,228 INFO L273 TraceCheckUtils]: 111: Hoare triple {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:12,228 INFO L273 TraceCheckUtils]: 112: Hoare triple {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:12,230 INFO L273 TraceCheckUtils]: 113: Hoare triple {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:12,230 INFO L273 TraceCheckUtils]: 114: Hoare triple {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:12,232 INFO L273 TraceCheckUtils]: 115: Hoare triple {97442#(= 4416 (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 52)))} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {97443#(= |ssl3_connect_#t~mem33| 4416)} is VALID [2018-11-23 13:04:12,232 INFO L273 TraceCheckUtils]: 116: Hoare triple {97443#(= |ssl3_connect_#t~mem33| 4416)} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {97441#false} is VALID [2018-11-23 13:04:12,232 INFO L273 TraceCheckUtils]: 117: Hoare triple {97441#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {97441#false} is VALID [2018-11-23 13:04:12,232 INFO L273 TraceCheckUtils]: 118: Hoare triple {97441#false} assume !(4432 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {97441#false} is VALID [2018-11-23 13:04:12,232 INFO L273 TraceCheckUtils]: 119: Hoare triple {97441#false} assume !(4433 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {97441#false} is VALID [2018-11-23 13:04:12,232 INFO L273 TraceCheckUtils]: 120: Hoare triple {97441#false} assume 4448 == #t~mem37;havoc #t~mem37; {97441#false} is VALID [2018-11-23 13:04:12,233 INFO L273 TraceCheckUtils]: 121: Hoare triple {97441#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {97441#false} is VALID [2018-11-23 13:04:12,233 INFO L273 TraceCheckUtils]: 122: Hoare triple {97441#false} assume 4 == ~blastFlag~0; {97441#false} is VALID [2018-11-23 13:04:12,233 INFO L273 TraceCheckUtils]: 123: Hoare triple {97441#false} assume !false; {97441#false} is VALID [2018-11-23 13:04:12,241 INFO L134 CoverageAnalysis]: Checked inductivity of 187 backedges. 68 proven. 0 refuted. 0 times theorem prover too weak. 119 trivial. 0 not checked. [2018-11-23 13:04:12,241 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:04:12,241 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 13:04:12,242 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 124 [2018-11-23 13:04:12,242 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:04:12,242 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 13:04:12,326 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 75 edges. 75 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:04:12,326 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 13:04:12,327 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 13:04:12,327 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 13:04:12,327 INFO L87 Difference]: Start difference. First operand 916 states and 1344 transitions. Second operand 4 states. [2018-11-23 13:04:14,253 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:04:14,253 INFO L93 Difference]: Finished difference Result 2051 states and 3014 transitions. [2018-11-23 13:04:14,254 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 13:04:14,254 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 124 [2018-11-23 13:04:14,254 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:04:14,254 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:04:14,256 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 407 transitions. [2018-11-23 13:04:14,256 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 13:04:14,258 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 407 transitions. [2018-11-23 13:04:14,258 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 407 transitions. [2018-11-23 13:04:14,763 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 407 edges. 407 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:04:14,817 INFO L225 Difference]: With dead ends: 2051 [2018-11-23 13:04:14,818 INFO L226 Difference]: Without dead ends: 1148 [2018-11-23 13:04:14,819 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 13:04:14,820 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1148 states. [2018-11-23 13:04:15,477 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1148 to 1026. [2018-11-23 13:04:15,477 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:04:15,477 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1148 states. Second operand 1026 states. [2018-11-23 13:04:15,477 INFO L74 IsIncluded]: Start isIncluded. First operand 1148 states. Second operand 1026 states. [2018-11-23 13:04:15,477 INFO L87 Difference]: Start difference. First operand 1148 states. Second operand 1026 states. [2018-11-23 13:04:15,518 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:04:15,519 INFO L93 Difference]: Finished difference Result 1148 states and 1682 transitions. [2018-11-23 13:04:15,519 INFO L276 IsEmpty]: Start isEmpty. Operand 1148 states and 1682 transitions. [2018-11-23 13:04:15,520 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:04:15,520 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:04:15,520 INFO L74 IsIncluded]: Start isIncluded. First operand 1026 states. Second operand 1148 states. [2018-11-23 13:04:15,520 INFO L87 Difference]: Start difference. First operand 1026 states. Second operand 1148 states. [2018-11-23 13:04:15,561 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:04:15,562 INFO L93 Difference]: Finished difference Result 1148 states and 1682 transitions. [2018-11-23 13:04:15,562 INFO L276 IsEmpty]: Start isEmpty. Operand 1148 states and 1682 transitions. [2018-11-23 13:04:15,563 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:04:15,563 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:04:15,563 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:04:15,563 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:04:15,563 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1026 states. [2018-11-23 13:04:15,598 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1026 states to 1026 states and 1534 transitions. [2018-11-23 13:04:15,598 INFO L78 Accepts]: Start accepts. Automaton has 1026 states and 1534 transitions. Word has length 124 [2018-11-23 13:04:15,598 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:04:15,598 INFO L480 AbstractCegarLoop]: Abstraction has 1026 states and 1534 transitions. [2018-11-23 13:04:15,599 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 13:04:15,599 INFO L276 IsEmpty]: Start isEmpty. Operand 1026 states and 1534 transitions. [2018-11-23 13:04:15,600 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 129 [2018-11-23 13:04:15,600 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:04:15,600 INFO L402 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 5, 5, 5, 5, 5, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:04:15,601 INFO L423 AbstractCegarLoop]: === Iteration 34 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:04:15,601 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:04:15,601 INFO L82 PathProgramCache]: Analyzing trace with hash -421436053, now seen corresponding path program 1 times [2018-11-23 13:04:15,601 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:04:15,601 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:04:15,602 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:04:15,602 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:04:15,602 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:04:15,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 13:04:15,923 INFO L256 TraceCheckUtils]: 0: Hoare triple {103167#true} call ULTIMATE.init(); {103167#true} is VALID [2018-11-23 13:04:15,923 INFO L273 TraceCheckUtils]: 1: Hoare triple {103167#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); {103167#true} is VALID [2018-11-23 13:04:15,923 INFO L273 TraceCheckUtils]: 2: Hoare triple {103167#true} assume true; {103167#true} is VALID [2018-11-23 13:04:15,923 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {103167#true} {103167#true} #542#return; {103167#true} is VALID [2018-11-23 13:04:15,924 INFO L256 TraceCheckUtils]: 4: Hoare triple {103167#true} call #t~ret138 := main(); {103167#true} is VALID [2018-11-23 13:04:15,925 INFO L273 TraceCheckUtils]: 5: Hoare triple {103167#true} havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; {103169#(= 0 main_~s~0.offset)} is VALID [2018-11-23 13:04:15,926 INFO L256 TraceCheckUtils]: 6: Hoare triple {103169#(= 0 main_~s~0.offset)} call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); {103170#(= 0 |ssl3_connect_#in~s.offset|)} is VALID [2018-11-23 13:04:15,928 INFO L273 TraceCheckUtils]: 7: Hoare triple {103170#(= 0 |ssl3_connect_#in~s.offset|)} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {103171#(= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:15,928 INFO L273 TraceCheckUtils]: 8: Hoare triple {103171#(= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52)))} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {103171#(= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:15,930 INFO L273 TraceCheckUtils]: 9: Hoare triple {103171#(= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52)))} call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; {103171#(= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:15,930 INFO L273 TraceCheckUtils]: 10: Hoare triple {103171#(= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52)))} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {103171#(= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:15,931 INFO L273 TraceCheckUtils]: 11: Hoare triple {103171#(= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52)))} assume !false; {103171#(= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52)))} is VALID [2018-11-23 13:04:15,932 INFO L273 TraceCheckUtils]: 12: Hoare triple {103171#(= 12292 (select (store (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28) (+ (select (select |#memory_int| ssl3_connect_~s.base) (+ ssl3_connect_~s.offset 28)) 1)) (+ ssl3_connect_~s.offset 52)))} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {103172#(= |ssl3_connect_#t~mem22| 12292)} is VALID [2018-11-23 13:04:15,932 INFO L273 TraceCheckUtils]: 13: Hoare triple {103172#(= |ssl3_connect_#t~mem22| 12292)} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,933 INFO L273 TraceCheckUtils]: 14: Hoare triple {103168#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,933 INFO L273 TraceCheckUtils]: 15: Hoare triple {103168#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,933 INFO L273 TraceCheckUtils]: 16: Hoare triple {103168#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,933 INFO L273 TraceCheckUtils]: 17: Hoare triple {103168#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,934 INFO L273 TraceCheckUtils]: 18: Hoare triple {103168#false} assume 4368 == #t~mem27;havoc #t~mem27; {103168#false} is VALID [2018-11-23 13:04:15,934 INFO L273 TraceCheckUtils]: 19: Hoare triple {103168#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {103168#false} is VALID [2018-11-23 13:04:15,934 INFO L273 TraceCheckUtils]: 20: Hoare triple {103168#false} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {103168#false} is VALID [2018-11-23 13:04:15,934 INFO L273 TraceCheckUtils]: 21: Hoare triple {103168#false} assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,935 INFO L273 TraceCheckUtils]: 22: Hoare triple {103168#false} assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; {103168#false} is VALID [2018-11-23 13:04:15,935 INFO L273 TraceCheckUtils]: 23: Hoare triple {103168#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,935 INFO L273 TraceCheckUtils]: 24: Hoare triple {103168#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {103168#false} is VALID [2018-11-23 13:04:15,935 INFO L273 TraceCheckUtils]: 25: Hoare triple {103168#false} ~skip~0 := 0; {103168#false} is VALID [2018-11-23 13:04:15,936 INFO L273 TraceCheckUtils]: 26: Hoare triple {103168#false} assume !false; {103168#false} is VALID [2018-11-23 13:04:15,936 INFO L273 TraceCheckUtils]: 27: Hoare triple {103168#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,936 INFO L273 TraceCheckUtils]: 28: Hoare triple {103168#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,936 INFO L273 TraceCheckUtils]: 29: Hoare triple {103168#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,937 INFO L273 TraceCheckUtils]: 30: Hoare triple {103168#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,937 INFO L273 TraceCheckUtils]: 31: Hoare triple {103168#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,937 INFO L273 TraceCheckUtils]: 32: Hoare triple {103168#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,937 INFO L273 TraceCheckUtils]: 33: Hoare triple {103168#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,937 INFO L273 TraceCheckUtils]: 34: Hoare triple {103168#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,937 INFO L273 TraceCheckUtils]: 35: Hoare triple {103168#false} assume 4384 == #t~mem29;havoc #t~mem29; {103168#false} is VALID [2018-11-23 13:04:15,938 INFO L273 TraceCheckUtils]: 36: Hoare triple {103168#false} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {103168#false} is VALID [2018-11-23 13:04:15,938 INFO L273 TraceCheckUtils]: 37: Hoare triple {103168#false} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {103168#false} is VALID [2018-11-23 13:04:15,938 INFO L273 TraceCheckUtils]: 38: Hoare triple {103168#false} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,938 INFO L273 TraceCheckUtils]: 39: Hoare triple {103168#false} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(4400, ~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,938 INFO L273 TraceCheckUtils]: 40: Hoare triple {103168#false} call write~int(0, ~s.base, 64 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,938 INFO L273 TraceCheckUtils]: 41: Hoare triple {103168#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,938 INFO L273 TraceCheckUtils]: 42: Hoare triple {103168#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {103168#false} is VALID [2018-11-23 13:04:15,939 INFO L273 TraceCheckUtils]: 43: Hoare triple {103168#false} ~skip~0 := 0; {103168#false} is VALID [2018-11-23 13:04:15,939 INFO L273 TraceCheckUtils]: 44: Hoare triple {103168#false} assume !false; {103168#false} is VALID [2018-11-23 13:04:15,939 INFO L273 TraceCheckUtils]: 45: Hoare triple {103168#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,939 INFO L273 TraceCheckUtils]: 46: Hoare triple {103168#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,939 INFO L273 TraceCheckUtils]: 47: Hoare triple {103168#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,939 INFO L273 TraceCheckUtils]: 48: Hoare triple {103168#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,939 INFO L273 TraceCheckUtils]: 49: Hoare triple {103168#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,940 INFO L273 TraceCheckUtils]: 50: Hoare triple {103168#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,940 INFO L273 TraceCheckUtils]: 51: Hoare triple {103168#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,940 INFO L273 TraceCheckUtils]: 52: Hoare triple {103168#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,940 INFO L273 TraceCheckUtils]: 53: Hoare triple {103168#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,940 INFO L273 TraceCheckUtils]: 54: Hoare triple {103168#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,940 INFO L273 TraceCheckUtils]: 55: Hoare triple {103168#false} assume 4400 == #t~mem31;havoc #t~mem31; {103168#false} is VALID [2018-11-23 13:04:15,940 INFO L273 TraceCheckUtils]: 56: Hoare triple {103168#false} call #t~mem69.base, #t~mem69.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem70.base, #t~mem70.offset := read~$Pointer$(#t~mem69.base, 836 + #t~mem69.offset, 4);call #t~mem71 := read~int(#t~mem70.base, 12 + #t~mem70.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,941 INFO L273 TraceCheckUtils]: 57: Hoare triple {103168#false} assume !(0 != ~bitwiseAnd(#t~mem71, 256) % 4294967296);havoc #t~mem69.base, #t~mem69.offset;havoc #t~mem71;havoc #t~mem70.base, #t~mem70.offset;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~ret~0 := #t~nondet72;havoc #t~nondet72; {103168#false} is VALID [2018-11-23 13:04:15,941 INFO L273 TraceCheckUtils]: 58: Hoare triple {103168#false} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {103168#false} is VALID [2018-11-23 13:04:15,941 INFO L273 TraceCheckUtils]: 59: Hoare triple {103168#false} assume !(~ret~0 <= 0); {103168#false} is VALID [2018-11-23 13:04:15,941 INFO L273 TraceCheckUtils]: 60: Hoare triple {103168#false} call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,941 INFO L273 TraceCheckUtils]: 61: Hoare triple {103168#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,941 INFO L273 TraceCheckUtils]: 62: Hoare triple {103168#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {103168#false} is VALID [2018-11-23 13:04:15,941 INFO L273 TraceCheckUtils]: 63: Hoare triple {103168#false} ~skip~0 := 0; {103168#false} is VALID [2018-11-23 13:04:15,942 INFO L273 TraceCheckUtils]: 64: Hoare triple {103168#false} assume !false; {103168#false} is VALID [2018-11-23 13:04:15,942 INFO L273 TraceCheckUtils]: 65: Hoare triple {103168#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,942 INFO L273 TraceCheckUtils]: 66: Hoare triple {103168#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,942 INFO L273 TraceCheckUtils]: 67: Hoare triple {103168#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,942 INFO L273 TraceCheckUtils]: 68: Hoare triple {103168#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,942 INFO L273 TraceCheckUtils]: 69: Hoare triple {103168#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,942 INFO L273 TraceCheckUtils]: 70: Hoare triple {103168#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,943 INFO L273 TraceCheckUtils]: 71: Hoare triple {103168#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,943 INFO L273 TraceCheckUtils]: 72: Hoare triple {103168#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,943 INFO L273 TraceCheckUtils]: 73: Hoare triple {103168#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,943 INFO L273 TraceCheckUtils]: 74: Hoare triple {103168#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,943 INFO L273 TraceCheckUtils]: 75: Hoare triple {103168#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,943 INFO L273 TraceCheckUtils]: 76: Hoare triple {103168#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,943 INFO L273 TraceCheckUtils]: 77: Hoare triple {103168#false} assume 4416 == #t~mem33;havoc #t~mem33; {103168#false} is VALID [2018-11-23 13:04:15,943 INFO L273 TraceCheckUtils]: 78: Hoare triple {103168#false} assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; {103168#false} is VALID [2018-11-23 13:04:15,944 INFO L273 TraceCheckUtils]: 79: Hoare triple {103168#false} assume 3 == ~blastFlag~0;~blastFlag~0 := 4; {103168#false} is VALID [2018-11-23 13:04:15,944 INFO L273 TraceCheckUtils]: 80: Hoare triple {103168#false} assume !(~ret~0 <= 0);call write~int(4432, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~tmp___6~0 := #t~nondet74;havoc #t~nondet74; {103168#false} is VALID [2018-11-23 13:04:15,944 INFO L273 TraceCheckUtils]: 81: Hoare triple {103168#false} assume !(0 == ~tmp___6~0); {103168#false} is VALID [2018-11-23 13:04:15,944 INFO L273 TraceCheckUtils]: 82: Hoare triple {103168#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,944 INFO L273 TraceCheckUtils]: 83: Hoare triple {103168#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {103168#false} is VALID [2018-11-23 13:04:15,944 INFO L273 TraceCheckUtils]: 84: Hoare triple {103168#false} ~skip~0 := 0; {103168#false} is VALID [2018-11-23 13:04:15,944 INFO L273 TraceCheckUtils]: 85: Hoare triple {103168#false} assume !false; {103168#false} is VALID [2018-11-23 13:04:15,944 INFO L273 TraceCheckUtils]: 86: Hoare triple {103168#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,944 INFO L273 TraceCheckUtils]: 87: Hoare triple {103168#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,945 INFO L273 TraceCheckUtils]: 88: Hoare triple {103168#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,945 INFO L273 TraceCheckUtils]: 89: Hoare triple {103168#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,945 INFO L273 TraceCheckUtils]: 90: Hoare triple {103168#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,945 INFO L273 TraceCheckUtils]: 91: Hoare triple {103168#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,945 INFO L273 TraceCheckUtils]: 92: Hoare triple {103168#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,945 INFO L273 TraceCheckUtils]: 93: Hoare triple {103168#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,945 INFO L273 TraceCheckUtils]: 94: Hoare triple {103168#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,945 INFO L273 TraceCheckUtils]: 95: Hoare triple {103168#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,945 INFO L273 TraceCheckUtils]: 96: Hoare triple {103168#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,946 INFO L273 TraceCheckUtils]: 97: Hoare triple {103168#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,946 INFO L273 TraceCheckUtils]: 98: Hoare triple {103168#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,946 INFO L273 TraceCheckUtils]: 99: Hoare triple {103168#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,946 INFO L273 TraceCheckUtils]: 100: Hoare triple {103168#false} assume 4432 == #t~mem35;havoc #t~mem35; {103168#false} is VALID [2018-11-23 13:04:15,946 INFO L273 TraceCheckUtils]: 101: Hoare triple {103168#false} assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {103168#false} is VALID [2018-11-23 13:04:15,946 INFO L273 TraceCheckUtils]: 102: Hoare triple {103168#false} assume !(5 == ~blastFlag~0); {103168#false} is VALID [2018-11-23 13:04:15,946 INFO L273 TraceCheckUtils]: 103: Hoare triple {103168#false} assume !(~ret~0 <= 0);call write~int(4448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,946 INFO L273 TraceCheckUtils]: 104: Hoare triple {103168#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,947 INFO L273 TraceCheckUtils]: 105: Hoare triple {103168#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {103168#false} is VALID [2018-11-23 13:04:15,947 INFO L273 TraceCheckUtils]: 106: Hoare triple {103168#false} ~skip~0 := 0; {103168#false} is VALID [2018-11-23 13:04:15,947 INFO L273 TraceCheckUtils]: 107: Hoare triple {103168#false} assume !false; {103168#false} is VALID [2018-11-23 13:04:15,947 INFO L273 TraceCheckUtils]: 108: Hoare triple {103168#false} call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,947 INFO L273 TraceCheckUtils]: 109: Hoare triple {103168#false} assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,947 INFO L273 TraceCheckUtils]: 110: Hoare triple {103168#false} assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,947 INFO L273 TraceCheckUtils]: 111: Hoare triple {103168#false} assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,947 INFO L273 TraceCheckUtils]: 112: Hoare triple {103168#false} assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,947 INFO L273 TraceCheckUtils]: 113: Hoare triple {103168#false} assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,948 INFO L273 TraceCheckUtils]: 114: Hoare triple {103168#false} assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,948 INFO L273 TraceCheckUtils]: 115: Hoare triple {103168#false} assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,948 INFO L273 TraceCheckUtils]: 116: Hoare triple {103168#false} assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,948 INFO L273 TraceCheckUtils]: 117: Hoare triple {103168#false} assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,948 INFO L273 TraceCheckUtils]: 118: Hoare triple {103168#false} assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,948 INFO L273 TraceCheckUtils]: 119: Hoare triple {103168#false} assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,948 INFO L273 TraceCheckUtils]: 120: Hoare triple {103168#false} assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,948 INFO L273 TraceCheckUtils]: 121: Hoare triple {103168#false} assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,948 INFO L273 TraceCheckUtils]: 122: Hoare triple {103168#false} assume !(4432 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,948 INFO L273 TraceCheckUtils]: 123: Hoare triple {103168#false} assume !(4433 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {103168#false} is VALID [2018-11-23 13:04:15,949 INFO L273 TraceCheckUtils]: 124: Hoare triple {103168#false} assume 4448 == #t~mem37;havoc #t~mem37; {103168#false} is VALID [2018-11-23 13:04:15,949 INFO L273 TraceCheckUtils]: 125: Hoare triple {103168#false} assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; {103168#false} is VALID [2018-11-23 13:04:15,949 INFO L273 TraceCheckUtils]: 126: Hoare triple {103168#false} assume 4 == ~blastFlag~0; {103168#false} is VALID [2018-11-23 13:04:15,949 INFO L273 TraceCheckUtils]: 127: Hoare triple {103168#false} assume !false; {103168#false} is VALID [2018-11-23 13:04:15,962 INFO L134 CoverageAnalysis]: Checked inductivity of 190 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 175 trivial. 0 not checked. [2018-11-23 13:04:15,962 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 13:04:15,962 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 13:04:15,962 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 128 [2018-11-23 13:04:15,963 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 13:04:15,963 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2018-11-23 13:04:16,043 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 64 edges. 64 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:04:16,044 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-23 13:04:16,044 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 13:04:16,044 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-23 13:04:16,044 INFO L87 Difference]: Start difference. First operand 1026 states and 1534 transitions. Second operand 6 states. [2018-11-23 13:04:17,685 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:04:17,685 INFO L93 Difference]: Finished difference Result 2043 states and 3056 transitions. [2018-11-23 13:04:17,685 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-23 13:04:17,685 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 128 [2018-11-23 13:04:17,685 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 13:04:17,685 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2018-11-23 13:04:17,687 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 340 transitions. [2018-11-23 13:04:17,688 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2018-11-23 13:04:17,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 340 transitions. [2018-11-23 13:04:17,690 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 340 transitions. [2018-11-23 13:04:18,074 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 340 edges. 340 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 13:04:18,119 INFO L225 Difference]: With dead ends: 2043 [2018-11-23 13:04:18,119 INFO L226 Difference]: Without dead ends: 1030 [2018-11-23 13:04:18,120 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 2 SyntacticMatches, 3 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2018-11-23 13:04:18,121 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1030 states. [2018-11-23 13:04:18,545 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1030 to 1029. [2018-11-23 13:04:18,545 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 13:04:18,546 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1030 states. Second operand 1029 states. [2018-11-23 13:04:18,546 INFO L74 IsIncluded]: Start isIncluded. First operand 1030 states. Second operand 1029 states. [2018-11-23 13:04:18,546 INFO L87 Difference]: Start difference. First operand 1030 states. Second operand 1029 states. [2018-11-23 13:04:18,584 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:04:18,585 INFO L93 Difference]: Finished difference Result 1030 states and 1538 transitions. [2018-11-23 13:04:18,585 INFO L276 IsEmpty]: Start isEmpty. Operand 1030 states and 1538 transitions. [2018-11-23 13:04:18,586 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:04:18,586 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:04:18,586 INFO L74 IsIncluded]: Start isIncluded. First operand 1029 states. Second operand 1030 states. [2018-11-23 13:04:18,587 INFO L87 Difference]: Start difference. First operand 1029 states. Second operand 1030 states. [2018-11-23 13:04:18,621 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 13:04:18,621 INFO L93 Difference]: Finished difference Result 1030 states and 1538 transitions. [2018-11-23 13:04:18,621 INFO L276 IsEmpty]: Start isEmpty. Operand 1030 states and 1538 transitions. [2018-11-23 13:04:18,622 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 13:04:18,622 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 13:04:18,622 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 13:04:18,622 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 13:04:18,622 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1029 states. [2018-11-23 13:04:18,657 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1029 states to 1029 states and 1537 transitions. [2018-11-23 13:04:18,657 INFO L78 Accepts]: Start accepts. Automaton has 1029 states and 1537 transitions. Word has length 128 [2018-11-23 13:04:18,658 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 13:04:18,658 INFO L480 AbstractCegarLoop]: Abstraction has 1029 states and 1537 transitions. [2018-11-23 13:04:18,658 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-23 13:04:18,658 INFO L276 IsEmpty]: Start isEmpty. Operand 1029 states and 1537 transitions. [2018-11-23 13:04:18,659 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 144 [2018-11-23 13:04:18,659 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 13:04:18,659 INFO L402 BasicCegarLoop]: trace histogram [7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 5, 5, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 13:04:18,659 INFO L423 AbstractCegarLoop]: === Iteration 35 === [ssl3_connectErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 13:04:18,659 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 13:04:18,659 INFO L82 PathProgramCache]: Analyzing trace with hash 1528997636, now seen corresponding path program 1 times [2018-11-23 13:04:18,660 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 13:04:18,660 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 13:04:18,660 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:04:18,660 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 13:04:18,661 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 13:04:18,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 13:04:19,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 13:04:19,082 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=20503, |#NULL.offset|=20536, |old(#NULL.base)|=20503, |old(#NULL.offset)|=20536, |old(~#SSLv3_client_data~0.base)|=20488, |old(~#SSLv3_client_data~0.offset)|=20485, |old(~init~0)|=20542, |~#SSLv3_client_data~0.base|=20488, |~#SSLv3_client_data~0.offset|=20485, ~init~0=20542] [?] #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); VAL [|#NULL.base|=0, |#NULL.offset|=0, |old(#NULL.base)|=20503, |old(#NULL.offset)|=20536, |old(~#SSLv3_client_data~0.base)|=20488, |old(~#SSLv3_client_data~0.offset)|=20485, |old(~init~0)|=20542, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume true; VAL [|#NULL.base|=0, |#NULL.offset|=0, |old(#NULL.base)|=20503, |old(#NULL.offset)|=20536, |old(~#SSLv3_client_data~0.base)|=20488, |old(~#SSLv3_client_data~0.offset)|=20485, |old(~init~0)|=20542, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] RET #542#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] havoc ~s~0.base, ~s~0.offset;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4);assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647;call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4);havoc #t~nondet6; VAL [main_~s~0.base=20498, main_~s~0.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |main_#t~malloc3.base|=20498, |main_#t~malloc3.offset|=0, |main_#t~malloc4.base|=20502, |main_#t~malloc4.offset|=0, |main_#t~malloc5.base|=20545, |main_#t~malloc5.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] CALL call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~tmp~2;havoc ~l~0;havoc ~num1~0;havoc ~cb~0.base, ~cb~0.offset;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~tmp___0~1.base, ~tmp___0~1.offset;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___1~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___2~0 := #t~nondet10;havoc #t~nondet10;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;havoc ~tmp___8~0;havoc ~tmp___9~0;havoc ~blastFlag~0;~blastFlag~0 := 0;call write~int(12292, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp~2 := #t~nondet12;havoc #t~nondet12;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4);~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset;call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4);call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=0, ssl3_connect_~cb~0.offset=0, ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem14.base|=6, |ssl3_connect_#t~mem14.offset|=(- 5), |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4);havoc #t~mem20; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem22|=12292, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 12292 == #t~mem22;havoc #t~mem22; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call write~int(1, ~s.base, 40 + ~s.offset, 4);call write~int(4096, ~s.base, 52 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem56 := read~int(#t~mem55.base, 64 + #t~mem55.offset, 4);call write~int(1 + #t~mem56, #t~mem55.base, 64 + #t~mem55.offset, 4);havoc #t~mem55.base, #t~mem55.offset;havoc #t~mem56; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call write~int(0, ~s.base, 36 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem57 := read~int(~s.base, ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem57|=1, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(768 != ~bitwiseAnd(#t~mem57, 65280));havoc #t~mem57;call write~int(4096, ~s.base, 4 + ~s.offset, 4);call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem58.base|=3, |ssl3_connect_#t~mem58.offset|=(- 2), |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 == (#t~mem58.base + #t~mem58.offset) % 4294967296);havoc #t~mem58.base, #t~mem58.offset; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647;~tmp___4~0 := #t~nondet60;havoc #t~nondet60; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 == ~tmp___4~0);assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647;~tmp___5~0 := #t~nondet61;havoc #t~nondet61; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 == ~tmp___5~0);call write~int(4368, ~s.base, 52 + ~s.offset, 4);call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem63 := read~int(#t~mem62.base, 60 + #t~mem62.offset, 4);call write~int(1 + #t~mem63, #t~mem62.base, 60 + #t~mem62.offset, 4);havoc #t~mem62.base, #t~mem62.offset;havoc #t~mem63;call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem127.base|=20502, |ssl3_connect_#t~mem127.offset|=0, |ssl3_connect_#t~mem128|=20535, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=12292, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem22|=4368, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem23|=4368, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem24|=4368, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem25|=4368, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem26|=4368, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem27|=4368, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 4368 == #t~mem27;havoc #t~mem27; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=(- 1), ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; VAL [ssl3_connect_~blastFlag~0=0, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 0 == ~blastFlag~0;~blastFlag~0 := 1; VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);call write~int(4384, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4);call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem65.base|=0, |ssl3_connect_#t~mem65.offset|=0, |ssl3_connect_#t~mem66.base|=0, |ssl3_connect_#t~mem66.offset|=1, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296;havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66.base, #t~mem66.offset; VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem127.base|=20502, |ssl3_connect_#t~mem127.offset|=0, |ssl3_connect_#t~mem128|=20535, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4368, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem22|=4384, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem23|=4384, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem24|=4384, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem25|=4384, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem26|=4384, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem27|=4384, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem28|=4384, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem29|=4384, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 4384 == #t~mem29;havoc #t~mem29; VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; VAL [ssl3_connect_~blastFlag~0=1, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=10, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 1 == ~blastFlag~0;~blastFlag~0 := 2; VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=10, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=10, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem68|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 != #t~mem68);havoc #t~mem68;call write~int(4400, ~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=10, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=10, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=10, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem127.base|=20502, |ssl3_connect_#t~mem127.offset|=0, |ssl3_connect_#t~mem128|=20535, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=10, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=10, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=10, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4384, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=10, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem22|=4400, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=10, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem23|=4400, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=10, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem24|=4400, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=10, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem25|=4400, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=10, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem26|=4400, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=10, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem27|=4400, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=10, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem28|=4400, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=10, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem29|=4400, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=10, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem30|=4400, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=10, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem31|=4400, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 4400 == #t~mem31;havoc #t~mem31; VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=10, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem69.base, #t~mem69.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem70.base, #t~mem70.offset := read~$Pointer$(#t~mem69.base, 836 + #t~mem69.offset, 4);call #t~mem71 := read~int(#t~mem70.base, 12 + #t~mem70.offset, 4); VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=10, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem69.base|=20502, |ssl3_connect_#t~mem69.offset|=0, |ssl3_connect_#t~mem70.base|=20541, |ssl3_connect_#t~mem70.offset|=0, |ssl3_connect_#t~mem71|=20524, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 != ~bitwiseAnd(#t~mem71, 256) % 4294967296);havoc #t~mem69.base, #t~mem69.offset;havoc #t~mem71;havoc #t~mem70.base, #t~mem70.offset;assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647;~ret~0 := #t~nondet72;havoc #t~nondet72; VAL [ssl3_connect_~blastFlag~0=2, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 2 == ~blastFlag~0;~blastFlag~0 := 3; VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call write~int(4416, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem127.base|=20502, |ssl3_connect_#t~mem127.offset|=0, |ssl3_connect_#t~mem128|=20535, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4400, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem22|=4416, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem23|=4416, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem24|=4416, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem25|=4416, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem26|=4416, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem27|=4416, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem28|=4416, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem29|=4416, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem30|=4416, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem31|=4416, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem32|=4416, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem33|=4416, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 4416 == #t~mem33;havoc #t~mem33; VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647;~ret~0 := #t~nondet73;havoc #t~nondet73; VAL [ssl3_connect_~blastFlag~0=3, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=11, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 3 == ~blastFlag~0;~blastFlag~0 := 4; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=11, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);call write~int(4432, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647;~tmp___6~0 := #t~nondet74;havoc #t~nondet74; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=11, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 == ~tmp___6~0); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=11, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=11, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem127.base|=20502, |ssl3_connect_#t~mem127.offset|=0, |ssl3_connect_#t~mem128|=20535, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=11, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=11, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=11, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4416, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=11, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem22|=4432, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=11, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem23|=4432, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=11, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem24|=4432, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=11, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem25|=4432, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=11, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem26|=4432, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=11, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem27|=4432, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=11, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem28|=4432, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=11, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem29|=4432, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=11, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem30|=4432, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=11, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem31|=4432, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=11, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem32|=4432, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=11, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem33|=4432, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=11, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem34|=4432, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=11, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem35|=4432, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 4432 == #t~mem35;havoc #t~mem35; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=11, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(5 == ~blastFlag~0); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);call write~int(4448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem127.base|=20502, |ssl3_connect_#t~mem127.offset|=0, |ssl3_connect_#t~mem128|=20535, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4432, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem21;havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem22|=4448, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem23|=4448, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem24|=4448, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4096 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem25|=4448, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(20480 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem26|=4448, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4099 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem27|=4448, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4368 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem28|=4448, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4369 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem29|=4448, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4384 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem30|=4448, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4385 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem31|=4448, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4400 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem32|=4448, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4401 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem33|=4448, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4416 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem34|=4448, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4417 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem35|=4448, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4432 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem36|=4448, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !(4433 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |ssl3_connect_#t~mem37|=4448, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 4448 == #t~mem37;havoc #t~mem37; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=1, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647;~ret~0 := #t~nondet76;havoc #t~nondet76; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=0, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume 4 == ~blastFlag~0; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=0, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_connect_~blastFlag~0=4, ssl3_connect_~buf~0.base=20507, ssl3_connect_~buf~0.offset=20513, ssl3_connect_~cb~0.base=6, ssl3_connect_~cb~0.offset=(- 5), ssl3_connect_~ret~0=0, ssl3_connect_~s.base=20498, ssl3_connect_~s.offset=0, ssl3_connect_~skip~0=0, ssl3_connect_~state~0=4448, ssl3_connect_~tmp___0~1.base=20530, ssl3_connect_~tmp___0~1.offset=0, ssl3_connect_~tmp___1~0=0, ssl3_connect_~tmp___2~0=0, ssl3_connect_~tmp___4~0=1, ssl3_connect_~tmp___5~0=1, ssl3_connect_~tmp___6~0=1, ssl3_connect_~tmp~2=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_connect_#in~s.base|=20498, |ssl3_connect_#in~s.offset|=0, |ssl3_connect_#t~malloc13.base|=20530, |ssl3_connect_#t~malloc13.offset|=0, |~#SSLv3_client_data~0.base|=20490, |~#SSLv3_client_data~0.offset|=0, ~init~0=1] [?] CALL call ULTIMATE.init(); VAL [#NULL.base=20503, #NULL.offset=20536, old(#NULL.base)=20503, old(#NULL.offset)=20536, old(~#SSLv3_client_data~0.base)=20488, old(~#SSLv3_client_data~0.offset)=20485, old(~init~0)=20542, ~#SSLv3_client_data~0.base=20488, ~#SSLv3_client_data~0.offset=20485, ~init~0=20542] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L1039] ~init~0 := 1; [L1040] call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100); [L1040] call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=20503, old(#NULL.offset)=20536, old(~#SSLv3_client_data~0.base)=20488, old(~#SSLv3_client_data~0.offset)=20485, old(~init~0)=20542, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~init~0=1] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=20503, old(#NULL.offset)=20536, old(~#SSLv3_client_data~0.base)=20488, old(~#SSLv3_client_data~0.offset)=20485, old(~init~0)=20542, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~init~0=1] [L1062] havoc ~s~0.base, ~s~0.offset; [L1066] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248); [L1066] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1067] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899); [L1067] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4); [L1068] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232); [L1068] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4); [L1069] call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4); [L1070] assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647; [L1070] call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4); [L1070] havoc #t~nondet6; VAL [#NULL.base=0, #NULL.offset=0, #t~malloc3.base=20498, #t~malloc3.offset=0, #t~malloc4.base=20502, #t~malloc4.offset=0, #t~malloc5.base=20545, #t~malloc5.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~init~0=1, ~s~0.base=20498, ~s~0.offset=0] [L1071] CALL call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~init~0=1] [L1076-L1647] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1077] ~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset; [L1077] havoc #t~nondet8.base, #t~nondet8.offset; [L1078] havoc ~tmp~2; [L1079] havoc ~l~0; [L1080] havoc ~num1~0; [L1081] havoc ~cb~0.base, ~cb~0.offset; [L1082] havoc ~ret~0; [L1083] havoc ~new_state~0; [L1084] havoc ~state~0; [L1085] havoc ~skip~0; [L1086] havoc ~tmp___0~1.base, ~tmp___0~1.offset; [L1087] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1087] ~tmp___1~0 := #t~nondet9; [L1087] havoc #t~nondet9; [L1088] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1088] ~tmp___2~0 := #t~nondet10; [L1088] havoc #t~nondet10; [L1089] havoc ~tmp___3~0; [L1090] havoc ~tmp___4~0; [L1091] havoc ~tmp___5~0; [L1092] havoc ~tmp___6~0; [L1093] havoc ~tmp___7~0; [L1094] havoc ~tmp___8~0; [L1095] havoc ~tmp___9~0; [L1097] havoc ~blastFlag~0; [L1100] ~blastFlag~0 := 0; [L1101] call write~int(12292, ~s.base, 52 + ~s.offset, 4); [L1102] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1102] call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4); [L1102] havoc #t~nondet11; [L1104] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1104] ~tmp~2 := #t~nondet12; [L1104] havoc #t~nondet12; [L1105] ~cb~0.base, ~cb~0.offset := 0, 0; [L1106] ~ret~0 := -1; [L1107] ~skip~0 := 0; [L1108] call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4); [L1108] ~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset; [L1109] call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4); [L1110] call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem14.base=6, #t~mem14.offset=-5, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=0, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1110-L1118] assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296; [L1110] havoc #t~mem14.base, #t~mem14.offset; [L1111] call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); [L1111] ~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset; [L1111] havoc #t~mem15.base, #t~mem15.offset; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1119] call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4); [L1119] call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4); [L1119] havoc #t~mem20; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1120-L1128] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1130-L1634] assume !false; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1132] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem22=12292, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1133-L1603] assume 12292 == #t~mem22; [L1133] havoc #t~mem22; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1236] call write~int(1, ~s.base, 40 + ~s.offset, 4); [L1237] call write~int(4096, ~s.base, 52 + ~s.offset, 4); [L1238] call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4); [L1238] call #t~mem56 := read~int(#t~mem55.base, 64 + #t~mem55.offset, 4); [L1238] call write~int(1 + #t~mem56, #t~mem55.base, 64 + #t~mem55.offset, 4); [L1238] havoc #t~mem55.base, #t~mem55.offset; [L1238] havoc #t~mem56; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1243] call write~int(0, ~s.base, 36 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1244-L1248] assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1249] call #t~mem57 := read~int(~s.base, ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem57=1, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1249-L1254] assume !(768 != ~bitwiseAnd(#t~mem57, 65280)); [L1249] havoc #t~mem57; [L1255] call write~int(4096, ~s.base, 4 + ~s.offset, 4); [L1256] call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem58.base=3, #t~mem58.offset=-2, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1256-L1267] assume !(0 == (#t~mem58.base + #t~mem58.offset) % 4294967296); [L1256] havoc #t~mem58.base, #t~mem58.offset; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1268] assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647; [L1268] ~tmp___4~0 := #t~nondet60; [L1268] havoc #t~nondet60; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp~2=0] [L1269-L1274] assume !(0 == ~tmp___4~0); [L1275] assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647; [L1275] ~tmp___5~0 := #t~nondet61; [L1275] havoc #t~nondet61; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1276-L1281] assume !(0 == ~tmp___5~0); [L1282] call write~int(4368, ~s.base, 52 + ~s.offset, 4); [L1283] call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4); [L1283] call #t~mem63 := read~int(#t~mem62.base, 60 + #t~mem62.offset, 4); [L1283] call write~int(1 + #t~mem63, #t~mem62.base, 60 + #t~mem62.offset, 4); [L1283] havoc #t~mem62.base, #t~mem62.offset; [L1283] havoc #t~mem63; [L1284] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1604] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem127.base=20502, #t~mem127.offset=0, #t~mem128=20535, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604-L1632] assume !(0 == #t~mem128); [L1604] havoc #t~mem128; [L1604] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] assume !false; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem22=4368, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133-L1603] assume !(12292 == #t~mem22); [L1133] havoc #t~mem22; [L1136] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem23=4368, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136-L1602] assume !(16384 == #t~mem23); [L1136] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem24=4368, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139-L1601] assume !(4096 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem25=4368, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142-L1600] assume !(20480 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem26=4368, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145-L1599] assume !(4099 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem27=4368, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148-L1598] assume 4368 == #t~mem27; [L1148] havoc #t~mem27; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1288] call write~int(0, ~s.base, 48 + ~s.offset, 4); [L1289] assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647; [L1289] ~ret~0 := #t~nondet64; [L1289] havoc #t~nondet64; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1290-L1294] assume 0 == ~blastFlag~0; [L1291] ~blastFlag~0 := 1; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1295-L1299] assume !(~ret~0 <= 0); [L1300] call write~int(4384, ~s.base, 52 + ~s.offset, 4); [L1301] call write~int(0, ~s.base, 64 + ~s.offset, 4); [L1302] call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4); [L1302] call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem65.base=0, #t~mem65.offset=0, #t~mem66.base=0, #t~mem66.offset=1, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1302-L1306] assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296; [L1302] havoc #t~mem65.base, #t~mem65.offset; [L1302] havoc #t~mem66.base, #t~mem66.offset; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1604] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem127.base=20502, #t~mem127.offset=0, #t~mem128=20535, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604-L1632] assume !(0 == #t~mem128); [L1604] havoc #t~mem128; [L1604] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] assume !false; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem22=4384, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133-L1603] assume !(12292 == #t~mem22); [L1133] havoc #t~mem22; [L1136] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem23=4384, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136-L1602] assume !(16384 == #t~mem23); [L1136] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem24=4384, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139-L1601] assume !(4096 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem25=4384, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142-L1600] assume !(20480 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem26=4384, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145-L1599] assume !(4099 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem27=4384, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148-L1598] assume !(4368 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem28=4384, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1151-L1597] assume !(4369 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem29=4384, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1154-L1596] assume 4384 == #t~mem29; [L1154] havoc #t~mem29; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1310] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1310] ~ret~0 := #t~nondet67; [L1310] havoc #t~nondet67; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1311-L1315] assume 1 == ~blastFlag~0; [L1312] ~blastFlag~0 := 2; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1316-L1320] assume !(~ret~0 <= 0); [L1321] call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem68=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1321-L1325] assume !(0 != #t~mem68); [L1321] havoc #t~mem68; [L1324] call write~int(4400, ~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1326] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1604] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem127.base=20502, #t~mem127.offset=0, #t~mem128=20535, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604-L1632] assume !(0 == #t~mem128); [L1604] havoc #t~mem128; [L1604] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] assume !false; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem22=4400, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133-L1603] assume !(12292 == #t~mem22); [L1133] havoc #t~mem22; [L1136] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem23=4400, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136-L1602] assume !(16384 == #t~mem23); [L1136] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem24=4400, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139-L1601] assume !(4096 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem25=4400, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142-L1600] assume !(20480 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem26=4400, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145-L1599] assume !(4099 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem27=4400, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148-L1598] assume !(4368 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem28=4400, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1151-L1597] assume !(4369 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem29=4400, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1154-L1596] assume !(4384 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem30=4400, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1157-L1595] assume !(4385 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem31=4400, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1160-L1594] assume 4400 == #t~mem31; [L1160] havoc #t~mem31; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1330] call #t~mem69.base, #t~mem69.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1330] call #t~mem70.base, #t~mem70.offset := read~$Pointer$(#t~mem69.base, 836 + #t~mem69.offset, 4); [L1330] call #t~mem71 := read~int(#t~mem70.base, 12 + #t~mem70.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem69.base=20502, #t~mem69.offset=0, #t~mem70.base=20541, #t~mem70.offset=0, #t~mem71=20524, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1330-L1344] assume !(0 != ~bitwiseAnd(#t~mem71, 256) % 4294967296); [L1330] havoc #t~mem69.base, #t~mem69.offset; [L1330] havoc #t~mem71; [L1330] havoc #t~mem70.base, #t~mem70.offset; [L1333] assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647; [L1333] ~ret~0 := #t~nondet72; [L1333] havoc #t~nondet72; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1334-L1338] assume 2 == ~blastFlag~0; [L1335] ~blastFlag~0 := 3; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1339-L1343] assume !(~ret~0 <= 0); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1345] call write~int(4416, ~s.base, 52 + ~s.offset, 4); [L1346] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1604] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem127.base=20502, #t~mem127.offset=0, #t~mem128=20535, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604-L1632] assume !(0 == #t~mem128); [L1604] havoc #t~mem128; [L1604] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] assume !false; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem22=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133-L1603] assume !(12292 == #t~mem22); [L1133] havoc #t~mem22; [L1136] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem23=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136-L1602] assume !(16384 == #t~mem23); [L1136] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem24=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139-L1601] assume !(4096 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem25=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142-L1600] assume !(20480 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem26=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145-L1599] assume !(4099 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem27=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148-L1598] assume !(4368 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem28=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1151-L1597] assume !(4369 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem29=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1154-L1596] assume !(4384 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem30=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1157-L1595] assume !(4385 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem31=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1160-L1594] assume !(4400 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem32=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1163-L1593] assume !(4401 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem33=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1166-L1592] assume 4416 == #t~mem33; [L1166] havoc #t~mem33; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1350] assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647; [L1350] ~ret~0 := #t~nondet73; [L1350] havoc #t~nondet73; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1351-L1355] assume 3 == ~blastFlag~0; [L1352] ~blastFlag~0 := 4; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1356-L1360] assume !(~ret~0 <= 0); [L1361] call write~int(4432, ~s.base, 52 + ~s.offset, 4); [L1362] call write~int(0, ~s.base, 64 + ~s.offset, 4); [L1363] assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647; [L1363] ~tmp___6~0 := #t~nondet74; [L1363] havoc #t~nondet74; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1364-L1369] assume !(0 == ~tmp___6~0); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1604] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem127.base=20502, #t~mem127.offset=0, #t~mem128=20535, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604-L1632] assume !(0 == #t~mem128); [L1604] havoc #t~mem128; [L1604] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1130-L1634] assume !false; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1132] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem22=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133-L1603] assume !(12292 == #t~mem22); [L1133] havoc #t~mem22; [L1136] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem23=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1136-L1602] assume !(16384 == #t~mem23); [L1136] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem24=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1139-L1601] assume !(4096 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem25=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1142-L1600] assume !(20480 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem26=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1145-L1599] assume !(4099 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem27=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1148-L1598] assume !(4368 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem28=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1151-L1597] assume !(4369 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem29=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1154-L1596] assume !(4384 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem30=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1157-L1595] assume !(4385 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem31=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1160-L1594] assume !(4400 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem32=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1163-L1593] assume !(4401 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem33=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1166-L1592] assume !(4416 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem34=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1169-L1591] assume !(4417 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem35=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1172-L1590] assume 4432 == #t~mem35; [L1172] havoc #t~mem35; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1373] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1373] ~ret~0 := #t~nondet75; [L1373] havoc #t~nondet75; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1374-L1378] assume !(5 == ~blastFlag~0); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1379-L1383] assume !(~ret~0 <= 0); [L1384] call write~int(4448, ~s.base, 52 + ~s.offset, 4); [L1385] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1604] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem127.base=20502, #t~mem127.offset=0, #t~mem128=20535, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604-L1632] assume !(0 == #t~mem128); [L1604] havoc #t~mem128; [L1604] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1130-L1634] assume !false; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1132] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem22=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133-L1603] assume !(12292 == #t~mem22); [L1133] havoc #t~mem22; [L1136] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem23=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1136-L1602] assume !(16384 == #t~mem23); [L1136] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem24=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1139-L1601] assume !(4096 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem25=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1142-L1600] assume !(20480 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem26=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1145-L1599] assume !(4099 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem27=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1148-L1598] assume !(4368 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem28=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1151-L1597] assume !(4369 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem29=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1154-L1596] assume !(4384 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem30=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1157-L1595] assume !(4385 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem31=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1160-L1594] assume !(4400 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem32=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1163-L1593] assume !(4401 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem33=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1166-L1592] assume !(4416 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem34=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1169-L1591] assume !(4417 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem35=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1172-L1590] assume !(4432 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem36=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1175-L1589] assume !(4433 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem37=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1178-L1588] assume 4448 == #t~mem37; [L1178] havoc #t~mem37; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1389] assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647; [L1389] ~ret~0 := #t~nondet76; [L1389] havoc #t~nondet76; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=0, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1390-L1394] assume 4 == ~blastFlag~0; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=0, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1645] assert false; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=0, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL.base=20503, #NULL.offset=20536, old(#NULL.base)=20503, old(#NULL.offset)=20536, old(~#SSLv3_client_data~0.base)=20488, old(~#SSLv3_client_data~0.offset)=20485, old(~init~0)=20542, ~#SSLv3_client_data~0.base=20488, ~#SSLv3_client_data~0.offset=20485, ~init~0=20542] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L1039] ~init~0 := 1; [L1040] call ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset := #Ultimate.alloc(100); [L1040] call write~init~int(0, ~#SSLv3_client_data~0.base, ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 4 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 8 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 12 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 16 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 20 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 24 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 28 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 32 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 36 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 40 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 44 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 48 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 52 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 56 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 60 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 64 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 68 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 72 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 76 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 80 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 84 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 88 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 92 + ~#SSLv3_client_data~0.offset, 4); [L1040] call write~init~$Pointer$(0, 0, ~#SSLv3_client_data~0.base, 96 + ~#SSLv3_client_data~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=20503, old(#NULL.offset)=20536, old(~#SSLv3_client_data~0.base)=20488, old(~#SSLv3_client_data~0.offset)=20485, old(~init~0)=20542, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~init~0=1] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=20503, old(#NULL.offset)=20536, old(~#SSLv3_client_data~0.base)=20488, old(~#SSLv3_client_data~0.offset)=20485, old(~init~0)=20542, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~init~0=1] [L1062] havoc ~s~0.base, ~s~0.offset; [L1066] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248); [L1066] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1067] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899); [L1067] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4); [L1068] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232); [L1068] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4); [L1069] call write~int(12292, ~s~0.base, 52 + ~s~0.offset, 4); [L1070] assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647; [L1070] call write~int(#t~nondet6, ~s~0.base, ~s~0.offset, 4); [L1070] havoc #t~nondet6; VAL [#NULL.base=0, #NULL.offset=0, #t~malloc3.base=20498, #t~malloc3.offset=0, #t~malloc4.base=20502, #t~malloc4.offset=0, #t~malloc5.base=20545, #t~malloc5.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~init~0=1, ~s~0.base=20498, ~s~0.offset=0] [L1071] CALL call #t~ret7 := ssl3_connect(~s~0.base, ~s~0.offset); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~init~0=1] [L1076-L1647] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1077] ~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset; [L1077] havoc #t~nondet8.base, #t~nondet8.offset; [L1078] havoc ~tmp~2; [L1079] havoc ~l~0; [L1080] havoc ~num1~0; [L1081] havoc ~cb~0.base, ~cb~0.offset; [L1082] havoc ~ret~0; [L1083] havoc ~new_state~0; [L1084] havoc ~state~0; [L1085] havoc ~skip~0; [L1086] havoc ~tmp___0~1.base, ~tmp___0~1.offset; [L1087] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1087] ~tmp___1~0 := #t~nondet9; [L1087] havoc #t~nondet9; [L1088] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1088] ~tmp___2~0 := #t~nondet10; [L1088] havoc #t~nondet10; [L1089] havoc ~tmp___3~0; [L1090] havoc ~tmp___4~0; [L1091] havoc ~tmp___5~0; [L1092] havoc ~tmp___6~0; [L1093] havoc ~tmp___7~0; [L1094] havoc ~tmp___8~0; [L1095] havoc ~tmp___9~0; [L1097] havoc ~blastFlag~0; [L1100] ~blastFlag~0 := 0; [L1101] call write~int(12292, ~s.base, 52 + ~s.offset, 4); [L1102] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1102] call write~int(#t~nondet11, ~s.base, 92 + ~s.offset, 4); [L1102] havoc #t~nondet11; [L1104] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1104] ~tmp~2 := #t~nondet12; [L1104] havoc #t~nondet12; [L1105] ~cb~0.base, ~cb~0.offset := 0, 0; [L1106] ~ret~0 := -1; [L1107] ~skip~0 := 0; [L1108] call #t~malloc13.base, #t~malloc13.offset := #Ultimate.alloc(4); [L1108] ~tmp___0~1.base, ~tmp___0~1.offset := #t~malloc13.base, #t~malloc13.offset; [L1109] call write~int(0, ~tmp___0~1.base, ~tmp___0~1.offset, 4); [L1110] call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem14.base=6, #t~mem14.offset=-5, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=0, ~cb~0.offset=0, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1110-L1118] assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296; [L1110] havoc #t~mem14.base, #t~mem14.offset; [L1111] call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); [L1111] ~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset; [L1111] havoc #t~mem15.base, #t~mem15.offset; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1119] call #t~mem20 := read~int(~s.base, 28 + ~s.offset, 4); [L1119] call write~int(1 + #t~mem20, ~s.base, 28 + ~s.offset, 4); [L1119] havoc #t~mem20; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1120-L1128] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1130-L1634] assume !false; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1132] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem22=12292, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1133-L1603] assume 12292 == #t~mem22; [L1133] havoc #t~mem22; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1236] call write~int(1, ~s.base, 40 + ~s.offset, 4); [L1237] call write~int(4096, ~s.base, 52 + ~s.offset, 4); [L1238] call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4); [L1238] call #t~mem56 := read~int(#t~mem55.base, 64 + #t~mem55.offset, 4); [L1238] call write~int(1 + #t~mem56, #t~mem55.base, 64 + #t~mem55.offset, 4); [L1238] havoc #t~mem55.base, #t~mem55.offset; [L1238] havoc #t~mem56; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1243] call write~int(0, ~s.base, 36 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1244-L1248] assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1249] call #t~mem57 := read~int(~s.base, ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem57=1, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1249-L1254] assume !(768 != ~bitwiseAnd(#t~mem57, 65280)); [L1249] havoc #t~mem57; [L1255] call write~int(4096, ~s.base, 4 + ~s.offset, 4); [L1256] call #t~mem58.base, #t~mem58.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem58.base=3, #t~mem58.offset=-2, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1256-L1267] assume !(0 == (#t~mem58.base + #t~mem58.offset) % 4294967296); [L1256] havoc #t~mem58.base, #t~mem58.offset; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1268] assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647; [L1268] ~tmp___4~0 := #t~nondet60; [L1268] havoc #t~nondet60; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp~2=0] [L1269-L1274] assume !(0 == ~tmp___4~0); [L1275] assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647; [L1275] ~tmp___5~0 := #t~nondet61; [L1275] havoc #t~nondet61; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1276-L1281] assume !(0 == ~tmp___5~0); [L1282] call write~int(4368, ~s.base, 52 + ~s.offset, 4); [L1283] call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4); [L1283] call #t~mem63 := read~int(#t~mem62.base, 60 + #t~mem62.offset, 4); [L1283] call write~int(1 + #t~mem63, #t~mem62.base, 60 + #t~mem62.offset, 4); [L1283] havoc #t~mem62.base, #t~mem62.offset; [L1283] havoc #t~mem63; [L1284] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1604] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem127.base=20502, #t~mem127.offset=0, #t~mem128=20535, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604-L1632] assume !(0 == #t~mem128); [L1604] havoc #t~mem128; [L1604] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] assume !false; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem22=4368, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133-L1603] assume !(12292 == #t~mem22); [L1133] havoc #t~mem22; [L1136] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem23=4368, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136-L1602] assume !(16384 == #t~mem23); [L1136] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem24=4368, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139-L1601] assume !(4096 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem25=4368, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142-L1600] assume !(20480 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem26=4368, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145-L1599] assume !(4099 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem27=4368, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148-L1598] assume 4368 == #t~mem27; [L1148] havoc #t~mem27; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=-1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1288] call write~int(0, ~s.base, 48 + ~s.offset, 4); [L1289] assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647; [L1289] ~ret~0 := #t~nondet64; [L1289] havoc #t~nondet64; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1290-L1294] assume 0 == ~blastFlag~0; [L1291] ~blastFlag~0 := 1; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1295-L1299] assume !(~ret~0 <= 0); [L1300] call write~int(4384, ~s.base, 52 + ~s.offset, 4); [L1301] call write~int(0, ~s.base, 64 + ~s.offset, 4); [L1302] call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 20 + ~s.offset, 4); [L1302] call #t~mem66.base, #t~mem66.offset := read~$Pointer$(~s.base, 16 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem65.base=0, #t~mem65.offset=0, #t~mem66.base=0, #t~mem66.offset=1, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1302-L1306] assume (#t~mem65.base + #t~mem65.offset) % 4294967296 != (#t~mem66.base + #t~mem66.offset) % 4294967296; [L1302] havoc #t~mem65.base, #t~mem65.offset; [L1302] havoc #t~mem66.base, #t~mem66.offset; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1604] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem127.base=20502, #t~mem127.offset=0, #t~mem128=20535, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604-L1632] assume !(0 == #t~mem128); [L1604] havoc #t~mem128; [L1604] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] assume !false; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem22=4384, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133-L1603] assume !(12292 == #t~mem22); [L1133] havoc #t~mem22; [L1136] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem23=4384, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136-L1602] assume !(16384 == #t~mem23); [L1136] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem24=4384, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139-L1601] assume !(4096 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem25=4384, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142-L1600] assume !(20480 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem26=4384, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145-L1599] assume !(4099 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem27=4384, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148-L1598] assume !(4368 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem28=4384, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1151-L1597] assume !(4369 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem29=4384, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1154-L1596] assume 4384 == #t~mem29; [L1154] havoc #t~mem29; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1310] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1310] ~ret~0 := #t~nondet67; [L1310] havoc #t~nondet67; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1311-L1315] assume 1 == ~blastFlag~0; [L1312] ~blastFlag~0 := 2; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1316-L1320] assume !(~ret~0 <= 0); [L1321] call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem68=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1321-L1325] assume !(0 != #t~mem68); [L1321] havoc #t~mem68; [L1324] call write~int(4400, ~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1326] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1604] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem127.base=20502, #t~mem127.offset=0, #t~mem128=20535, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604-L1632] assume !(0 == #t~mem128); [L1604] havoc #t~mem128; [L1604] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] assume !false; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem22=4400, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133-L1603] assume !(12292 == #t~mem22); [L1133] havoc #t~mem22; [L1136] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem23=4400, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136-L1602] assume !(16384 == #t~mem23); [L1136] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem24=4400, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139-L1601] assume !(4096 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem25=4400, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142-L1600] assume !(20480 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem26=4400, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145-L1599] assume !(4099 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem27=4400, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148-L1598] assume !(4368 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem28=4400, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1151-L1597] assume !(4369 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem29=4400, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1154-L1596] assume !(4384 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem30=4400, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1157-L1595] assume !(4385 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem31=4400, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1160-L1594] assume 4400 == #t~mem31; [L1160] havoc #t~mem31; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1330] call #t~mem69.base, #t~mem69.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1330] call #t~mem70.base, #t~mem70.offset := read~$Pointer$(#t~mem69.base, 836 + #t~mem69.offset, 4); [L1330] call #t~mem71 := read~int(#t~mem70.base, 12 + #t~mem70.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem69.base=20502, #t~mem69.offset=0, #t~mem70.base=20541, #t~mem70.offset=0, #t~mem71=20524, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=10, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1330-L1344] assume !(0 != ~bitwiseAnd(#t~mem71, 256) % 4294967296); [L1330] havoc #t~mem69.base, #t~mem69.offset; [L1330] havoc #t~mem71; [L1330] havoc #t~mem70.base, #t~mem70.offset; [L1333] assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647; [L1333] ~ret~0 := #t~nondet72; [L1333] havoc #t~nondet72; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1334-L1338] assume 2 == ~blastFlag~0; [L1335] ~blastFlag~0 := 3; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1339-L1343] assume !(~ret~0 <= 0); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1345] call write~int(4416, ~s.base, 52 + ~s.offset, 4); [L1346] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1604] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem127.base=20502, #t~mem127.offset=0, #t~mem128=20535, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604-L1632] assume !(0 == #t~mem128); [L1604] havoc #t~mem128; [L1604] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] assume !false; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem22=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133-L1603] assume !(12292 == #t~mem22); [L1133] havoc #t~mem22; [L1136] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem23=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136-L1602] assume !(16384 == #t~mem23); [L1136] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem24=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139-L1601] assume !(4096 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem25=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142-L1600] assume !(20480 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem26=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145-L1599] assume !(4099 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem27=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148-L1598] assume !(4368 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem28=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1151-L1597] assume !(4369 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem29=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1154-L1596] assume !(4384 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem30=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1157-L1595] assume !(4385 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem31=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1160-L1594] assume !(4400 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem32=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1163-L1593] assume !(4401 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem33=4416, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1166-L1592] assume 4416 == #t~mem33; [L1166] havoc #t~mem33; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1350] assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647; [L1350] ~ret~0 := #t~nondet73; [L1350] havoc #t~nondet73; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=3, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1351-L1355] assume 3 == ~blastFlag~0; [L1352] ~blastFlag~0 := 4; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1356-L1360] assume !(~ret~0 <= 0); [L1361] call write~int(4432, ~s.base, 52 + ~s.offset, 4); [L1362] call write~int(0, ~s.base, 64 + ~s.offset, 4); [L1363] assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647; [L1363] ~tmp___6~0 := #t~nondet74; [L1363] havoc #t~nondet74; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1364-L1369] assume !(0 == ~tmp___6~0); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1604] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem127.base=20502, #t~mem127.offset=0, #t~mem128=20535, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604-L1632] assume !(0 == #t~mem128); [L1604] havoc #t~mem128; [L1604] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1130-L1634] assume !false; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1132] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem22=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133-L1603] assume !(12292 == #t~mem22); [L1133] havoc #t~mem22; [L1136] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem23=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1136-L1602] assume !(16384 == #t~mem23); [L1136] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem24=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1139-L1601] assume !(4096 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem25=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1142-L1600] assume !(20480 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem26=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1145-L1599] assume !(4099 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem27=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1148-L1598] assume !(4368 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem28=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1151-L1597] assume !(4369 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem29=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1154-L1596] assume !(4384 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem30=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1157-L1595] assume !(4385 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem31=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1160-L1594] assume !(4400 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem32=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1163-L1593] assume !(4401 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem33=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1166-L1592] assume !(4416 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem34=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1169-L1591] assume !(4417 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem35=4432, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1172-L1590] assume 4432 == #t~mem35; [L1172] havoc #t~mem35; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=11, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1373] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1373] ~ret~0 := #t~nondet75; [L1373] havoc #t~nondet75; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1374-L1378] assume !(5 == ~blastFlag~0); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1379-L1383] assume !(~ret~0 <= 0); [L1384] call write~int(4448, ~s.base, 52 + ~s.offset, 4); [L1385] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1604] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem127.base=20502, #t~mem127.offset=0, #t~mem128=20535, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604-L1632] assume !(0 == #t~mem128); [L1604] havoc #t~mem128; [L1604] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1130-L1634] assume !false; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1132] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem22=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133-L1603] assume !(12292 == #t~mem22); [L1133] havoc #t~mem22; [L1136] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem23=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1136-L1602] assume !(16384 == #t~mem23); [L1136] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem24=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1139-L1601] assume !(4096 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem25=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1142-L1600] assume !(20480 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem26=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1145-L1599] assume !(4099 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem27=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1148-L1598] assume !(4368 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem28=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1151-L1597] assume !(4369 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem29=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1154-L1596] assume !(4384 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem30=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1157-L1595] assume !(4385 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem31=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1160-L1594] assume !(4400 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem32=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1163-L1593] assume !(4401 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem33=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1166-L1592] assume !(4416 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem34=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1169-L1591] assume !(4417 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem35=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1172-L1590] assume !(4432 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem36=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1175-L1589] assume !(4433 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, #t~mem37=4448, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1178-L1588] assume 4448 == #t~mem37; [L1178] havoc #t~mem37; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=1, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1389] assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647; [L1389] ~ret~0 := #t~nondet76; [L1389] havoc #t~nondet76; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=0, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1390-L1394] assume 4 == ~blastFlag~0; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=0, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1645] assert false; VAL [#in~s.base=20498, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~malloc13.base=20530, #t~malloc13.offset=0, ~#SSLv3_client_data~0.base=20490, ~#SSLv3_client_data~0.offset=0, ~blastFlag~0=4, ~buf~0.base=20507, ~buf~0.offset=20513, ~cb~0.base=6, ~cb~0.offset=-5, ~init~0=1, ~ret~0=0, ~s.base=20498, ~s.offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1.base=20530, ~tmp___0~1.offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=20503, #NULL!offset=20536, old(#NULL!base)=20503, old(#NULL!offset)=20536, old(~#SSLv3_client_data~0!base)=20488, old(~#SSLv3_client_data~0!offset)=20485, old(~init~0)=20542, ~#SSLv3_client_data~0!base=20488, ~#SSLv3_client_data~0!offset=20485, ~init~0=20542] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1039] ~init~0 := 1; [L1040] FCALL call ~#SSLv3_client_data~0 := #Ultimate.alloc(100); [L1040] FCALL call write~init~int(0, { base: ~#SSLv3_client_data~0!base, offset: ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 4 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 8 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 12 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 16 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 20 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 24 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 28 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 32 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 36 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 40 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 44 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 48 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 52 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 56 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 60 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 64 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 68 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 72 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 76 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 80 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 84 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 88 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 92 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 96 + ~#SSLv3_client_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=20503, old(#NULL!offset)=20536, old(~#SSLv3_client_data~0!base)=20488, old(~#SSLv3_client_data~0!offset)=20485, old(~init~0)=20542, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [L1062] havoc ~s~0; [L1066] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1066] ~s~0 := #t~malloc3; [L1067] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1067] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1068] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1068] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1069] FCALL call write~int(12292, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); [L1070] assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647; [L1070] FCALL call write~int(#t~nondet6, { base: ~s~0!base, offset: ~s~0!offset }, 4); [L1070] havoc #t~nondet6; VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=20498, #t~malloc3!offset=0, #t~malloc4!base=20502, #t~malloc4!offset=0, #t~malloc5!base=20545, #t~malloc5!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~init~0=1, ~s~0!base=20498, ~s~0!offset=0] [L1071] CALL call #t~ret7 := ssl3_connect(~s~0); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [L1076-L1647] ~s := #in~s; [L1077] ~buf~0 := #t~nondet8; [L1077] havoc #t~nondet8; [L1078] havoc ~tmp~2; [L1079] havoc ~l~0; [L1080] havoc ~num1~0; [L1081] havoc ~cb~0; [L1082] havoc ~ret~0; [L1083] havoc ~new_state~0; [L1084] havoc ~state~0; [L1085] havoc ~skip~0; [L1086] havoc ~tmp___0~1; [L1087] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1087] ~tmp___1~0 := #t~nondet9; [L1087] havoc #t~nondet9; [L1088] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1088] ~tmp___2~0 := #t~nondet10; [L1088] havoc #t~nondet10; [L1089] havoc ~tmp___3~0; [L1090] havoc ~tmp___4~0; [L1091] havoc ~tmp___5~0; [L1092] havoc ~tmp___6~0; [L1093] havoc ~tmp___7~0; [L1094] havoc ~tmp___8~0; [L1095] havoc ~tmp___9~0; [L1097] havoc ~blastFlag~0; [L1100] ~blastFlag~0 := 0; [L1101] FCALL call write~int(12292, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1102] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1102] FCALL call write~int(#t~nondet11, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1102] havoc #t~nondet11; [L1104] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1104] ~tmp~2 := #t~nondet12; [L1104] havoc #t~nondet12; [L1105] ~cb~0 := { base: 0, offset: 0 }; [L1106] ~ret~0 := -1; [L1107] ~skip~0 := 0; [L1108] FCALL call #t~malloc13 := #Ultimate.alloc(4); [L1108] ~tmp___0~1 := #t~malloc13; [L1109] FCALL call write~int(0, ~tmp___0~1, 4); [L1110] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem14!base=6, #t~mem14!offset=-5, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=0, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1110] COND TRUE 0 != (#t~mem14!base + #t~mem14!offset) % 4294967296 [L1110] havoc #t~mem14; [L1111] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1111] ~cb~0 := #t~mem15; [L1111] havoc #t~mem15; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1119] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] FCALL call write~int(1 + #t~mem20, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] havoc #t~mem20; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1120-L1128] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=12292, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1133] COND TRUE 12292 == #t~mem22 [L1133] havoc #t~mem22; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1236] FCALL call write~int(1, { base: ~s!base, offset: 40 + ~s!offset }, 4); [L1237] FCALL call write~int(4096, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1238] FCALL call #t~mem55 := read~$Pointer$({ base: ~s!base, offset: 204 + ~s!offset }, 4); [L1238] FCALL call #t~mem56 := read~int({ base: #t~mem55!base, offset: 64 + #t~mem55!offset }, 4); [L1238] FCALL call write~int(1 + #t~mem56, { base: #t~mem55!base, offset: 64 + #t~mem55!offset }, 4); [L1238] havoc #t~mem55; [L1238] havoc #t~mem56; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1243] FCALL call write~int(0, { base: ~s!base, offset: 36 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1244] COND TRUE 0 != (~cb~0!base + ~cb~0!offset) % 4294967296 VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1249] FCALL call #t~mem57 := read~int({ base: ~s!base, offset: ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem57=1, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1249] COND FALSE !(768 != ~bitwiseAnd(#t~mem57, 65280)) [L1249] havoc #t~mem57; [L1255] FCALL call write~int(4096, { base: ~s!base, offset: 4 + ~s!offset }, 4); [L1256] FCALL call #t~mem58 := read~$Pointer$({ base: ~s!base, offset: 60 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem58!base=3, #t~mem58!offset=-2, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1256] COND FALSE !(0 == (#t~mem58!base + #t~mem58!offset) % 4294967296) [L1256] havoc #t~mem58; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1268] assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647; [L1268] ~tmp___4~0 := #t~nondet60; [L1268] havoc #t~nondet60; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp~2=0] [L1269] COND FALSE !(0 == ~tmp___4~0) [L1275] assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647; [L1275] ~tmp___5~0 := #t~nondet61; [L1275] havoc #t~nondet61; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1276] COND FALSE !(0 == ~tmp___5~0) [L1282] FCALL call write~int(4368, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1283] FCALL call #t~mem62 := read~$Pointer$({ base: ~s!base, offset: 204 + ~s!offset }, 4); [L1283] FCALL call #t~mem63 := read~int({ base: #t~mem62!base, offset: 60 + #t~mem62!offset }, 4); [L1283] FCALL call write~int(1 + #t~mem63, { base: #t~mem62!base, offset: 60 + #t~mem62!offset }, 4); [L1283] havoc #t~mem62; [L1283] havoc #t~mem63; [L1284] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148] COND TRUE 4368 == #t~mem27 [L1148] havoc #t~mem27; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1288] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1289] assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647; [L1289] ~ret~0 := #t~nondet64; [L1289] havoc #t~nondet64; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1290] COND TRUE 0 == ~blastFlag~0 [L1291] ~blastFlag~0 := 1; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1295] COND FALSE !(~ret~0 <= 0) [L1300] FCALL call write~int(4384, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1301] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1302] FCALL call #t~mem65 := read~$Pointer$({ base: ~s!base, offset: 20 + ~s!offset }, 4); [L1302] FCALL call #t~mem66 := read~$Pointer$({ base: ~s!base, offset: 16 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem65!base=0, #t~mem65!offset=0, #t~mem66!base=0, #t~mem66!offset=1, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1302] COND TRUE (#t~mem65!base + #t~mem65!offset) % 4294967296 != (#t~mem66!base + #t~mem66!offset) % 4294967296 [L1302] havoc #t~mem65; [L1302] havoc #t~mem66; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148] COND FALSE !(4368 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem28=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1151] COND FALSE !(4369 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem29=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1154] COND TRUE 4384 == #t~mem29 [L1154] havoc #t~mem29; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1310] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1310] ~ret~0 := #t~nondet67; [L1310] havoc #t~nondet67; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1311] COND TRUE 1 == ~blastFlag~0 [L1312] ~blastFlag~0 := 2; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1316] COND FALSE !(~ret~0 <= 0) [L1321] FCALL call #t~mem68 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem68=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1321-L1325] COND FALSE !(0 != #t~mem68) [L1321] havoc #t~mem68; [L1324] FCALL call write~int(4400, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1326] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148] COND FALSE !(4368 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem28=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1151] COND FALSE !(4369 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem29=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1154] COND FALSE !(4384 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem30=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1157] COND FALSE !(4385 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem31=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1160] COND TRUE 4400 == #t~mem31 [L1160] havoc #t~mem31; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1330] FCALL call #t~mem69 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1330] FCALL call #t~mem70 := read~$Pointer$({ base: #t~mem69!base, offset: 836 + #t~mem69!offset }, 4); [L1330] FCALL call #t~mem71 := read~int({ base: #t~mem70!base, offset: 12 + #t~mem70!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem69!base=20502, #t~mem69!offset=0, #t~mem70!base=20541, #t~mem70!offset=0, #t~mem71=20524, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1330-L1344] COND FALSE !(0 != ~bitwiseAnd(#t~mem71, 256) % 4294967296) [L1330] havoc #t~mem69; [L1330] havoc #t~mem71; [L1330] havoc #t~mem70; [L1333] assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647; [L1333] ~ret~0 := #t~nondet72; [L1333] havoc #t~nondet72; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1334] COND TRUE 2 == ~blastFlag~0 [L1335] ~blastFlag~0 := 3; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1339] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1345] FCALL call write~int(4416, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1346] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148] COND FALSE !(4368 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem28=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1151] COND FALSE !(4369 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem29=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1154] COND FALSE !(4384 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem30=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1157] COND FALSE !(4385 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem31=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1160] COND FALSE !(4400 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem32=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1163] COND FALSE !(4401 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem33=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1166] COND TRUE 4416 == #t~mem33 [L1166] havoc #t~mem33; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1350] assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647; [L1350] ~ret~0 := #t~nondet73; [L1350] havoc #t~nondet73; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1351] COND TRUE 3 == ~blastFlag~0 [L1352] ~blastFlag~0 := 4; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1356] COND FALSE !(~ret~0 <= 0) [L1361] FCALL call write~int(4432, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1362] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1363] assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647; [L1363] ~tmp___6~0 := #t~nondet74; [L1363] havoc #t~nondet74; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1364] COND FALSE !(0 == ~tmp___6~0) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1148] COND FALSE !(4368 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem28=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1151] COND FALSE !(4369 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem29=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1154] COND FALSE !(4384 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem30=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1157] COND FALSE !(4385 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem31=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1160] COND FALSE !(4400 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem32=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1163] COND FALSE !(4401 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem33=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1166] COND FALSE !(4416 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem34=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1169] COND FALSE !(4417 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem35=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1172] COND TRUE 4432 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1373] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1373] ~ret~0 := #t~nondet75; [L1373] havoc #t~nondet75; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1374] COND FALSE !(5 == ~blastFlag~0) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1379] COND FALSE !(~ret~0 <= 0) [L1384] FCALL call write~int(4448, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1385] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1148] COND FALSE !(4368 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem28=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1151] COND FALSE !(4369 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem29=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1154] COND FALSE !(4384 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem30=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1157] COND FALSE !(4385 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem31=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1160] COND FALSE !(4400 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem32=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1163] COND FALSE !(4401 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem33=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1166] COND FALSE !(4416 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem34=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1169] COND FALSE !(4417 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem35=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1172] COND FALSE !(4432 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem36=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1175] COND FALSE !(4433 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem37=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1178] COND TRUE 4448 == #t~mem37 [L1178] havoc #t~mem37; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1389] assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647; [L1389] ~ret~0 := #t~nondet76; [L1389] havoc #t~nondet76; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=0, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1390] COND TRUE 4 == ~blastFlag~0 VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=0, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1645] assert false; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=0, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=20503, #NULL!offset=20536, old(#NULL!base)=20503, old(#NULL!offset)=20536, old(~#SSLv3_client_data~0!base)=20488, old(~#SSLv3_client_data~0!offset)=20485, old(~init~0)=20542, ~#SSLv3_client_data~0!base=20488, ~#SSLv3_client_data~0!offset=20485, ~init~0=20542] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1039] ~init~0 := 1; [L1040] FCALL call ~#SSLv3_client_data~0 := #Ultimate.alloc(100); [L1040] FCALL call write~init~int(0, { base: ~#SSLv3_client_data~0!base, offset: ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 4 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 8 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 12 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 16 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 20 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 24 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 28 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 32 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 36 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 40 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 44 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 48 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 52 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 56 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 60 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 64 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 68 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 72 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 76 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 80 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 84 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 88 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 92 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 96 + ~#SSLv3_client_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=20503, old(#NULL!offset)=20536, old(~#SSLv3_client_data~0!base)=20488, old(~#SSLv3_client_data~0!offset)=20485, old(~init~0)=20542, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [L1062] havoc ~s~0; [L1066] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1066] ~s~0 := #t~malloc3; [L1067] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1067] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1068] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1068] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1069] FCALL call write~int(12292, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); [L1070] assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647; [L1070] FCALL call write~int(#t~nondet6, { base: ~s~0!base, offset: ~s~0!offset }, 4); [L1070] havoc #t~nondet6; VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=20498, #t~malloc3!offset=0, #t~malloc4!base=20502, #t~malloc4!offset=0, #t~malloc5!base=20545, #t~malloc5!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~init~0=1, ~s~0!base=20498, ~s~0!offset=0] [L1071] CALL call #t~ret7 := ssl3_connect(~s~0); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [L1076-L1647] ~s := #in~s; [L1077] ~buf~0 := #t~nondet8; [L1077] havoc #t~nondet8; [L1078] havoc ~tmp~2; [L1079] havoc ~l~0; [L1080] havoc ~num1~0; [L1081] havoc ~cb~0; [L1082] havoc ~ret~0; [L1083] havoc ~new_state~0; [L1084] havoc ~state~0; [L1085] havoc ~skip~0; [L1086] havoc ~tmp___0~1; [L1087] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1087] ~tmp___1~0 := #t~nondet9; [L1087] havoc #t~nondet9; [L1088] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1088] ~tmp___2~0 := #t~nondet10; [L1088] havoc #t~nondet10; [L1089] havoc ~tmp___3~0; [L1090] havoc ~tmp___4~0; [L1091] havoc ~tmp___5~0; [L1092] havoc ~tmp___6~0; [L1093] havoc ~tmp___7~0; [L1094] havoc ~tmp___8~0; [L1095] havoc ~tmp___9~0; [L1097] havoc ~blastFlag~0; [L1100] ~blastFlag~0 := 0; [L1101] FCALL call write~int(12292, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1102] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1102] FCALL call write~int(#t~nondet11, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1102] havoc #t~nondet11; [L1104] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1104] ~tmp~2 := #t~nondet12; [L1104] havoc #t~nondet12; [L1105] ~cb~0 := { base: 0, offset: 0 }; [L1106] ~ret~0 := -1; [L1107] ~skip~0 := 0; [L1108] FCALL call #t~malloc13 := #Ultimate.alloc(4); [L1108] ~tmp___0~1 := #t~malloc13; [L1109] FCALL call write~int(0, ~tmp___0~1, 4); [L1110] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem14!base=6, #t~mem14!offset=-5, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=0, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1110] COND TRUE 0 != (#t~mem14!base + #t~mem14!offset) % 4294967296 [L1110] havoc #t~mem14; [L1111] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1111] ~cb~0 := #t~mem15; [L1111] havoc #t~mem15; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1119] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] FCALL call write~int(1 + #t~mem20, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] havoc #t~mem20; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1120-L1128] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=12292, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1133] COND TRUE 12292 == #t~mem22 [L1133] havoc #t~mem22; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1236] FCALL call write~int(1, { base: ~s!base, offset: 40 + ~s!offset }, 4); [L1237] FCALL call write~int(4096, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1238] FCALL call #t~mem55 := read~$Pointer$({ base: ~s!base, offset: 204 + ~s!offset }, 4); [L1238] FCALL call #t~mem56 := read~int({ base: #t~mem55!base, offset: 64 + #t~mem55!offset }, 4); [L1238] FCALL call write~int(1 + #t~mem56, { base: #t~mem55!base, offset: 64 + #t~mem55!offset }, 4); [L1238] havoc #t~mem55; [L1238] havoc #t~mem56; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1243] FCALL call write~int(0, { base: ~s!base, offset: 36 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1244] COND TRUE 0 != (~cb~0!base + ~cb~0!offset) % 4294967296 VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1249] FCALL call #t~mem57 := read~int({ base: ~s!base, offset: ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem57=1, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1249] COND FALSE !(768 != ~bitwiseAnd(#t~mem57, 65280)) [L1249] havoc #t~mem57; [L1255] FCALL call write~int(4096, { base: ~s!base, offset: 4 + ~s!offset }, 4); [L1256] FCALL call #t~mem58 := read~$Pointer$({ base: ~s!base, offset: 60 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem58!base=3, #t~mem58!offset=-2, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1256] COND FALSE !(0 == (#t~mem58!base + #t~mem58!offset) % 4294967296) [L1256] havoc #t~mem58; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1268] assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647; [L1268] ~tmp___4~0 := #t~nondet60; [L1268] havoc #t~nondet60; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp~2=0] [L1269] COND FALSE !(0 == ~tmp___4~0) [L1275] assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647; [L1275] ~tmp___5~0 := #t~nondet61; [L1275] havoc #t~nondet61; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1276] COND FALSE !(0 == ~tmp___5~0) [L1282] FCALL call write~int(4368, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1283] FCALL call #t~mem62 := read~$Pointer$({ base: ~s!base, offset: 204 + ~s!offset }, 4); [L1283] FCALL call #t~mem63 := read~int({ base: #t~mem62!base, offset: 60 + #t~mem62!offset }, 4); [L1283] FCALL call write~int(1 + #t~mem63, { base: #t~mem62!base, offset: 60 + #t~mem62!offset }, 4); [L1283] havoc #t~mem62; [L1283] havoc #t~mem63; [L1284] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148] COND TRUE 4368 == #t~mem27 [L1148] havoc #t~mem27; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1288] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1289] assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647; [L1289] ~ret~0 := #t~nondet64; [L1289] havoc #t~nondet64; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1290] COND TRUE 0 == ~blastFlag~0 [L1291] ~blastFlag~0 := 1; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1295] COND FALSE !(~ret~0 <= 0) [L1300] FCALL call write~int(4384, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1301] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1302] FCALL call #t~mem65 := read~$Pointer$({ base: ~s!base, offset: 20 + ~s!offset }, 4); [L1302] FCALL call #t~mem66 := read~$Pointer$({ base: ~s!base, offset: 16 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem65!base=0, #t~mem65!offset=0, #t~mem66!base=0, #t~mem66!offset=1, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1302] COND TRUE (#t~mem65!base + #t~mem65!offset) % 4294967296 != (#t~mem66!base + #t~mem66!offset) % 4294967296 [L1302] havoc #t~mem65; [L1302] havoc #t~mem66; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148] COND FALSE !(4368 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem28=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1151] COND FALSE !(4369 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem29=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1154] COND TRUE 4384 == #t~mem29 [L1154] havoc #t~mem29; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1310] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1310] ~ret~0 := #t~nondet67; [L1310] havoc #t~nondet67; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1311] COND TRUE 1 == ~blastFlag~0 [L1312] ~blastFlag~0 := 2; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1316] COND FALSE !(~ret~0 <= 0) [L1321] FCALL call #t~mem68 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem68=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1321-L1325] COND FALSE !(0 != #t~mem68) [L1321] havoc #t~mem68; [L1324] FCALL call write~int(4400, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1326] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148] COND FALSE !(4368 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem28=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1151] COND FALSE !(4369 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem29=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1154] COND FALSE !(4384 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem30=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1157] COND FALSE !(4385 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem31=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1160] COND TRUE 4400 == #t~mem31 [L1160] havoc #t~mem31; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1330] FCALL call #t~mem69 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1330] FCALL call #t~mem70 := read~$Pointer$({ base: #t~mem69!base, offset: 836 + #t~mem69!offset }, 4); [L1330] FCALL call #t~mem71 := read~int({ base: #t~mem70!base, offset: 12 + #t~mem70!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem69!base=20502, #t~mem69!offset=0, #t~mem70!base=20541, #t~mem70!offset=0, #t~mem71=20524, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1330-L1344] COND FALSE !(0 != ~bitwiseAnd(#t~mem71, 256) % 4294967296) [L1330] havoc #t~mem69; [L1330] havoc #t~mem71; [L1330] havoc #t~mem70; [L1333] assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647; [L1333] ~ret~0 := #t~nondet72; [L1333] havoc #t~nondet72; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1334] COND TRUE 2 == ~blastFlag~0 [L1335] ~blastFlag~0 := 3; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1339] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1345] FCALL call write~int(4416, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1346] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148] COND FALSE !(4368 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem28=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1151] COND FALSE !(4369 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem29=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1154] COND FALSE !(4384 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem30=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1157] COND FALSE !(4385 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem31=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1160] COND FALSE !(4400 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem32=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1163] COND FALSE !(4401 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem33=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1166] COND TRUE 4416 == #t~mem33 [L1166] havoc #t~mem33; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1350] assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647; [L1350] ~ret~0 := #t~nondet73; [L1350] havoc #t~nondet73; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1351] COND TRUE 3 == ~blastFlag~0 [L1352] ~blastFlag~0 := 4; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1356] COND FALSE !(~ret~0 <= 0) [L1361] FCALL call write~int(4432, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1362] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1363] assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647; [L1363] ~tmp___6~0 := #t~nondet74; [L1363] havoc #t~nondet74; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1364] COND FALSE !(0 == ~tmp___6~0) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1148] COND FALSE !(4368 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem28=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1151] COND FALSE !(4369 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem29=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1154] COND FALSE !(4384 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem30=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1157] COND FALSE !(4385 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem31=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1160] COND FALSE !(4400 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem32=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1163] COND FALSE !(4401 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem33=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1166] COND FALSE !(4416 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem34=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1169] COND FALSE !(4417 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem35=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1172] COND TRUE 4432 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1373] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1373] ~ret~0 := #t~nondet75; [L1373] havoc #t~nondet75; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1374] COND FALSE !(5 == ~blastFlag~0) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1379] COND FALSE !(~ret~0 <= 0) [L1384] FCALL call write~int(4448, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1385] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1148] COND FALSE !(4368 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem28=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1151] COND FALSE !(4369 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem29=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1154] COND FALSE !(4384 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem30=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1157] COND FALSE !(4385 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem31=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1160] COND FALSE !(4400 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem32=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1163] COND FALSE !(4401 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem33=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1166] COND FALSE !(4416 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem34=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1169] COND FALSE !(4417 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem35=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1172] COND FALSE !(4432 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem36=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1175] COND FALSE !(4433 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem37=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1178] COND TRUE 4448 == #t~mem37 [L1178] havoc #t~mem37; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1389] assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647; [L1389] ~ret~0 := #t~nondet76; [L1389] havoc #t~nondet76; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=0, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1390] COND TRUE 4 == ~blastFlag~0 VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=0, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1645] assert false; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=0, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=20503, #NULL!offset=20536, old(#NULL!base)=20503, old(#NULL!offset)=20536, old(~#SSLv3_client_data~0!base)=20488, old(~#SSLv3_client_data~0!offset)=20485, old(~init~0)=20542, ~#SSLv3_client_data~0!base=20488, ~#SSLv3_client_data~0!offset=20485, ~init~0=20542] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1039] ~init~0 := 1; [L1040] FCALL call ~#SSLv3_client_data~0 := #Ultimate.alloc(100); [L1040] FCALL call write~init~int(0, { base: ~#SSLv3_client_data~0!base, offset: ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 4 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 8 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 12 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 16 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 20 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 24 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 28 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 32 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 36 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 40 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 44 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 48 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 52 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 56 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 60 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 64 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 68 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 72 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 76 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 80 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 84 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 88 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 92 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 96 + ~#SSLv3_client_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=20503, old(#NULL!offset)=20536, old(~#SSLv3_client_data~0!base)=20488, old(~#SSLv3_client_data~0!offset)=20485, old(~init~0)=20542, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [L1062] havoc ~s~0; [L1066] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1066] ~s~0 := #t~malloc3; [L1067] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1067] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1068] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1068] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1069] FCALL call write~int(12292, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); [L1070] assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647; [L1070] FCALL call write~int(#t~nondet6, { base: ~s~0!base, offset: ~s~0!offset }, 4); [L1070] havoc #t~nondet6; VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=20498, #t~malloc3!offset=0, #t~malloc4!base=20502, #t~malloc4!offset=0, #t~malloc5!base=20545, #t~malloc5!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~init~0=1, ~s~0!base=20498, ~s~0!offset=0] [L1071] CALL call #t~ret7 := ssl3_connect(~s~0); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [L1076-L1647] ~s := #in~s; [L1077] ~buf~0 := #t~nondet8; [L1077] havoc #t~nondet8; [L1078] havoc ~tmp~2; [L1079] havoc ~l~0; [L1080] havoc ~num1~0; [L1081] havoc ~cb~0; [L1082] havoc ~ret~0; [L1083] havoc ~new_state~0; [L1084] havoc ~state~0; [L1085] havoc ~skip~0; [L1086] havoc ~tmp___0~1; [L1087] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1087] ~tmp___1~0 := #t~nondet9; [L1087] havoc #t~nondet9; [L1088] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1088] ~tmp___2~0 := #t~nondet10; [L1088] havoc #t~nondet10; [L1089] havoc ~tmp___3~0; [L1090] havoc ~tmp___4~0; [L1091] havoc ~tmp___5~0; [L1092] havoc ~tmp___6~0; [L1093] havoc ~tmp___7~0; [L1094] havoc ~tmp___8~0; [L1095] havoc ~tmp___9~0; [L1097] havoc ~blastFlag~0; [L1100] ~blastFlag~0 := 0; [L1101] FCALL call write~int(12292, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1102] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1102] FCALL call write~int(#t~nondet11, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1102] havoc #t~nondet11; [L1104] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1104] ~tmp~2 := #t~nondet12; [L1104] havoc #t~nondet12; [L1105] ~cb~0 := { base: 0, offset: 0 }; [L1106] ~ret~0 := -1; [L1107] ~skip~0 := 0; [L1108] FCALL call #t~malloc13 := #Ultimate.alloc(4); [L1108] ~tmp___0~1 := #t~malloc13; [L1109] FCALL call write~int(0, ~tmp___0~1, 4); [L1110] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem14!base=6, #t~mem14!offset=-5, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=0, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1110] COND TRUE 0 != (#t~mem14!base + #t~mem14!offset) % 4294967296 [L1110] havoc #t~mem14; [L1111] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1111] ~cb~0 := #t~mem15; [L1111] havoc #t~mem15; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1119] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] FCALL call write~int(1 + #t~mem20, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] havoc #t~mem20; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1120-L1128] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=12292, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1133] COND TRUE 12292 == #t~mem22 [L1133] havoc #t~mem22; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1236] FCALL call write~int(1, { base: ~s!base, offset: 40 + ~s!offset }, 4); [L1237] FCALL call write~int(4096, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1238] FCALL call #t~mem55 := read~$Pointer$({ base: ~s!base, offset: 204 + ~s!offset }, 4); [L1238] FCALL call #t~mem56 := read~int({ base: #t~mem55!base, offset: 64 + #t~mem55!offset }, 4); [L1238] FCALL call write~int(1 + #t~mem56, { base: #t~mem55!base, offset: 64 + #t~mem55!offset }, 4); [L1238] havoc #t~mem55; [L1238] havoc #t~mem56; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1243] FCALL call write~int(0, { base: ~s!base, offset: 36 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1244] COND TRUE 0 != (~cb~0!base + ~cb~0!offset) % 4294967296 VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1249] FCALL call #t~mem57 := read~int({ base: ~s!base, offset: ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem57=1, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1249] COND FALSE !(768 != ~bitwiseAnd(#t~mem57, 65280)) [L1249] havoc #t~mem57; [L1255] FCALL call write~int(4096, { base: ~s!base, offset: 4 + ~s!offset }, 4); [L1256] FCALL call #t~mem58 := read~$Pointer$({ base: ~s!base, offset: 60 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem58!base=3, #t~mem58!offset=-2, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1256] COND FALSE !(0 == (#t~mem58!base + #t~mem58!offset) % 4294967296) [L1256] havoc #t~mem58; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1268] assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647; [L1268] ~tmp___4~0 := #t~nondet60; [L1268] havoc #t~nondet60; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp~2=0] [L1269] COND FALSE !(0 == ~tmp___4~0) [L1275] assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647; [L1275] ~tmp___5~0 := #t~nondet61; [L1275] havoc #t~nondet61; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1276] COND FALSE !(0 == ~tmp___5~0) [L1282] FCALL call write~int(4368, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1283] FCALL call #t~mem62 := read~$Pointer$({ base: ~s!base, offset: 204 + ~s!offset }, 4); [L1283] FCALL call #t~mem63 := read~int({ base: #t~mem62!base, offset: 60 + #t~mem62!offset }, 4); [L1283] FCALL call write~int(1 + #t~mem63, { base: #t~mem62!base, offset: 60 + #t~mem62!offset }, 4); [L1283] havoc #t~mem62; [L1283] havoc #t~mem63; [L1284] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148] COND TRUE 4368 == #t~mem27 [L1148] havoc #t~mem27; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1288] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1289] assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647; [L1289] ~ret~0 := #t~nondet64; [L1289] havoc #t~nondet64; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1290] COND TRUE 0 == ~blastFlag~0 [L1291] ~blastFlag~0 := 1; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1295] COND FALSE !(~ret~0 <= 0) [L1300] FCALL call write~int(4384, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1301] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1302] FCALL call #t~mem65 := read~$Pointer$({ base: ~s!base, offset: 20 + ~s!offset }, 4); [L1302] FCALL call #t~mem66 := read~$Pointer$({ base: ~s!base, offset: 16 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem65!base=0, #t~mem65!offset=0, #t~mem66!base=0, #t~mem66!offset=1, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1302] COND TRUE (#t~mem65!base + #t~mem65!offset) % 4294967296 != (#t~mem66!base + #t~mem66!offset) % 4294967296 [L1302] havoc #t~mem65; [L1302] havoc #t~mem66; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148] COND FALSE !(4368 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem28=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1151] COND FALSE !(4369 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem29=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1154] COND TRUE 4384 == #t~mem29 [L1154] havoc #t~mem29; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1310] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1310] ~ret~0 := #t~nondet67; [L1310] havoc #t~nondet67; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1311] COND TRUE 1 == ~blastFlag~0 [L1312] ~blastFlag~0 := 2; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1316] COND FALSE !(~ret~0 <= 0) [L1321] FCALL call #t~mem68 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem68=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1321-L1325] COND FALSE !(0 != #t~mem68) [L1321] havoc #t~mem68; [L1324] FCALL call write~int(4400, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1326] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148] COND FALSE !(4368 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem28=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1151] COND FALSE !(4369 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem29=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1154] COND FALSE !(4384 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem30=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1157] COND FALSE !(4385 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem31=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1160] COND TRUE 4400 == #t~mem31 [L1160] havoc #t~mem31; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1330] FCALL call #t~mem69 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1330] FCALL call #t~mem70 := read~$Pointer$({ base: #t~mem69!base, offset: 836 + #t~mem69!offset }, 4); [L1330] FCALL call #t~mem71 := read~int({ base: #t~mem70!base, offset: 12 + #t~mem70!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem69!base=20502, #t~mem69!offset=0, #t~mem70!base=20541, #t~mem70!offset=0, #t~mem71=20524, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1330-L1344] COND FALSE !(0 != ~bitwiseAnd(#t~mem71, 256) % 4294967296) [L1330] havoc #t~mem69; [L1330] havoc #t~mem71; [L1330] havoc #t~mem70; [L1333] assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647; [L1333] ~ret~0 := #t~nondet72; [L1333] havoc #t~nondet72; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1334] COND TRUE 2 == ~blastFlag~0 [L1335] ~blastFlag~0 := 3; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1339] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1345] FCALL call write~int(4416, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1346] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148] COND FALSE !(4368 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem28=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1151] COND FALSE !(4369 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem29=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1154] COND FALSE !(4384 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem30=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1157] COND FALSE !(4385 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem31=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1160] COND FALSE !(4400 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem32=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1163] COND FALSE !(4401 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem33=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1166] COND TRUE 4416 == #t~mem33 [L1166] havoc #t~mem33; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1350] assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647; [L1350] ~ret~0 := #t~nondet73; [L1350] havoc #t~nondet73; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1351] COND TRUE 3 == ~blastFlag~0 [L1352] ~blastFlag~0 := 4; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1356] COND FALSE !(~ret~0 <= 0) [L1361] FCALL call write~int(4432, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1362] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1363] assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647; [L1363] ~tmp___6~0 := #t~nondet74; [L1363] havoc #t~nondet74; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1364] COND FALSE !(0 == ~tmp___6~0) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1148] COND FALSE !(4368 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem28=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1151] COND FALSE !(4369 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem29=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1154] COND FALSE !(4384 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem30=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1157] COND FALSE !(4385 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem31=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1160] COND FALSE !(4400 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem32=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1163] COND FALSE !(4401 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem33=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1166] COND FALSE !(4416 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem34=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1169] COND FALSE !(4417 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem35=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1172] COND TRUE 4432 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1373] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1373] ~ret~0 := #t~nondet75; [L1373] havoc #t~nondet75; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1374] COND FALSE !(5 == ~blastFlag~0) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1379] COND FALSE !(~ret~0 <= 0) [L1384] FCALL call write~int(4448, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1385] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1148] COND FALSE !(4368 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem28=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1151] COND FALSE !(4369 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem29=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1154] COND FALSE !(4384 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem30=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1157] COND FALSE !(4385 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem31=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1160] COND FALSE !(4400 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem32=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1163] COND FALSE !(4401 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem33=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1166] COND FALSE !(4416 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem34=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1169] COND FALSE !(4417 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem35=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1172] COND FALSE !(4432 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem36=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1175] COND FALSE !(4433 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem37=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1178] COND TRUE 4448 == #t~mem37 [L1178] havoc #t~mem37; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1389] assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647; [L1389] ~ret~0 := #t~nondet76; [L1389] havoc #t~nondet76; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=0, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1390] COND TRUE 4 == ~blastFlag~0 VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=0, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1645] assert false; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=0, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] ----- [2018-11-23 13:04:19,351 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 20485 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# [2018-11-23 13:04:19,353 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 20488 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=20503, #NULL!offset=20536, old(#NULL!base)=20503, old(#NULL!offset)=20536, old(~#SSLv3_client_data~0!base)=20488, old(~#SSLv3_client_data~0!offset)=20485, old(~init~0)=20542, ~#SSLv3_client_data~0!base=20488, ~#SSLv3_client_data~0!offset=20485, ~init~0=20542] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1039] ~init~0 := 1; [L1040] FCALL call ~#SSLv3_client_data~0 := #Ultimate.alloc(100); [L1040] FCALL call write~init~int(0, { base: ~#SSLv3_client_data~0!base, offset: ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 4 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 8 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 12 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 16 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 20 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 24 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 28 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 32 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 36 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 40 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 44 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 48 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 52 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 56 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 60 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 64 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 68 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 72 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 76 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 80 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 84 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 88 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 92 + ~#SSLv3_client_data~0!offset }, 4); [L1040] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_client_data~0!base, offset: 96 + ~#SSLv3_client_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=20503, old(#NULL!offset)=20536, old(~#SSLv3_client_data~0!base)=20488, old(~#SSLv3_client_data~0!offset)=20485, old(~init~0)=20542, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [L1062] havoc ~s~0; [L1066] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1066] ~s~0 := #t~malloc3; [L1067] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1067] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1068] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1068] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1069] FCALL call write~int(12292, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); [L1070] assume -2147483648 <= #t~nondet6 && #t~nondet6 <= 2147483647; [L1070] FCALL call write~int(#t~nondet6, { base: ~s~0!base, offset: ~s~0!offset }, 4); [L1070] havoc #t~nondet6; VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=20498, #t~malloc3!offset=0, #t~malloc4!base=20502, #t~malloc4!offset=0, #t~malloc5!base=20545, #t~malloc5!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~init~0=1, ~s~0!base=20498, ~s~0!offset=0] [L1071] CALL call #t~ret7 := ssl3_connect(~s~0); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~init~0=1] [L1076-L1647] ~s := #in~s; [L1077] ~buf~0 := #t~nondet8; [L1077] havoc #t~nondet8; [L1078] havoc ~tmp~2; [L1079] havoc ~l~0; [L1080] havoc ~num1~0; [L1081] havoc ~cb~0; [L1082] havoc ~ret~0; [L1083] havoc ~new_state~0; [L1084] havoc ~state~0; [L1085] havoc ~skip~0; [L1086] havoc ~tmp___0~1; [L1087] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1087] ~tmp___1~0 := #t~nondet9; [L1087] havoc #t~nondet9; [L1088] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1088] ~tmp___2~0 := #t~nondet10; [L1088] havoc #t~nondet10; [L1089] havoc ~tmp___3~0; [L1090] havoc ~tmp___4~0; [L1091] havoc ~tmp___5~0; [L1092] havoc ~tmp___6~0; [L1093] havoc ~tmp___7~0; [L1094] havoc ~tmp___8~0; [L1095] havoc ~tmp___9~0; [L1097] havoc ~blastFlag~0; [L1100] ~blastFlag~0 := 0; [L1101] FCALL call write~int(12292, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1102] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1102] FCALL call write~int(#t~nondet11, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1102] havoc #t~nondet11; [L1104] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1104] ~tmp~2 := #t~nondet12; [L1104] havoc #t~nondet12; [L1105] ~cb~0 := { base: 0, offset: 0 }; [L1106] ~ret~0 := -1; [L1107] ~skip~0 := 0; [L1108] FCALL call #t~malloc13 := #Ultimate.alloc(4); [L1108] ~tmp___0~1 := #t~malloc13; [L1109] FCALL call write~int(0, ~tmp___0~1, 4); [L1110] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem14!base=6, #t~mem14!offset=-5, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=0, ~cb~0!offset=0, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1110] COND TRUE 0 != (#t~mem14!base + #t~mem14!offset) % 4294967296 [L1110] havoc #t~mem14; [L1111] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1111] ~cb~0 := #t~mem15; [L1111] havoc #t~mem15; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1119] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] FCALL call write~int(1 + #t~mem20, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] havoc #t~mem20; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1120-L1128] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=12292, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1133] COND TRUE 12292 == #t~mem22 [L1133] havoc #t~mem22; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1236] FCALL call write~int(1, { base: ~s!base, offset: 40 + ~s!offset }, 4); [L1237] FCALL call write~int(4096, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1238] FCALL call #t~mem55 := read~$Pointer$({ base: ~s!base, offset: 204 + ~s!offset }, 4); [L1238] FCALL call #t~mem56 := read~int({ base: #t~mem55!base, offset: 64 + #t~mem55!offset }, 4); [L1238] FCALL call write~int(1 + #t~mem56, { base: #t~mem55!base, offset: 64 + #t~mem55!offset }, 4); [L1238] havoc #t~mem55; [L1238] havoc #t~mem56; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1243] FCALL call write~int(0, { base: ~s!base, offset: 36 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1244] COND TRUE 0 != (~cb~0!base + ~cb~0!offset) % 4294967296 VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1249] FCALL call #t~mem57 := read~int({ base: ~s!base, offset: ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem57=1, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1249] COND FALSE !(768 != ~bitwiseAnd(#t~mem57, 65280)) [L1249] havoc #t~mem57; [L1255] FCALL call write~int(4096, { base: ~s!base, offset: 4 + ~s!offset }, 4); [L1256] FCALL call #t~mem58 := read~$Pointer$({ base: ~s!base, offset: 60 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem58!base=3, #t~mem58!offset=-2, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1256] COND FALSE !(0 == (#t~mem58!base + #t~mem58!offset) % 4294967296) [L1256] havoc #t~mem58; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp~2=0] [L1268] assume -2147483648 <= #t~nondet60 && #t~nondet60 <= 2147483647; [L1268] ~tmp___4~0 := #t~nondet60; [L1268] havoc #t~nondet60; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp~2=0] [L1269] COND FALSE !(0 == ~tmp___4~0) [L1275] assume -2147483648 <= #t~nondet61 && #t~nondet61 <= 2147483647; [L1275] ~tmp___5~0 := #t~nondet61; [L1275] havoc #t~nondet61; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1276] COND FALSE !(0 == ~tmp___5~0) [L1282] FCALL call write~int(4368, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1283] FCALL call #t~mem62 := read~$Pointer$({ base: ~s!base, offset: 204 + ~s!offset }, 4); [L1283] FCALL call #t~mem63 := read~int({ base: #t~mem62!base, offset: 60 + #t~mem62!offset }, 4); [L1283] FCALL call write~int(1 + #t~mem63, { base: #t~mem62!base, offset: 60 + #t~mem62!offset }, 4); [L1283] havoc #t~mem62; [L1283] havoc #t~mem63; [L1284] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=12292, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4368, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148] COND TRUE 4368 == #t~mem27 [L1148] havoc #t~mem27; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=-1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1288] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1289] assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647; [L1289] ~ret~0 := #t~nondet64; [L1289] havoc #t~nondet64; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1290] COND TRUE 0 == ~blastFlag~0 [L1291] ~blastFlag~0 := 1; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1295] COND FALSE !(~ret~0 <= 0) [L1300] FCALL call write~int(4384, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1301] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1302] FCALL call #t~mem65 := read~$Pointer$({ base: ~s!base, offset: 20 + ~s!offset }, 4); [L1302] FCALL call #t~mem66 := read~$Pointer$({ base: ~s!base, offset: 16 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem65!base=0, #t~mem65!offset=0, #t~mem66!base=0, #t~mem66!offset=1, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1302] COND TRUE (#t~mem65!base + #t~mem65!offset) % 4294967296 != (#t~mem66!base + #t~mem66!offset) % 4294967296 [L1302] havoc #t~mem65; [L1302] havoc #t~mem66; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4368, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148] COND FALSE !(4368 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem28=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1151] COND FALSE !(4369 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem29=4384, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1154] COND TRUE 4384 == #t~mem29 [L1154] havoc #t~mem29; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1310] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1310] ~ret~0 := #t~nondet67; [L1310] havoc #t~nondet67; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1311] COND TRUE 1 == ~blastFlag~0 [L1312] ~blastFlag~0 := 2; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1316] COND FALSE !(~ret~0 <= 0) [L1321] FCALL call #t~mem68 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem68=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1321-L1325] COND FALSE !(0 != #t~mem68) [L1321] havoc #t~mem68; [L1324] FCALL call write~int(4400, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1326] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4384, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148] COND FALSE !(4368 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem28=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1151] COND FALSE !(4369 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem29=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1154] COND FALSE !(4384 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem30=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1157] COND FALSE !(4385 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem31=4400, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1160] COND TRUE 4400 == #t~mem31 [L1160] havoc #t~mem31; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1330] FCALL call #t~mem69 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1330] FCALL call #t~mem70 := read~$Pointer$({ base: #t~mem69!base, offset: 836 + #t~mem69!offset }, 4); [L1330] FCALL call #t~mem71 := read~int({ base: #t~mem70!base, offset: 12 + #t~mem70!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem69!base=20502, #t~mem69!offset=0, #t~mem70!base=20541, #t~mem70!offset=0, #t~mem71=20524, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=10, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1330-L1344] COND FALSE !(0 != ~bitwiseAnd(#t~mem71, 256) % 4294967296) [L1330] havoc #t~mem69; [L1330] havoc #t~mem71; [L1330] havoc #t~mem70; [L1333] assume -2147483648 <= #t~nondet72 && #t~nondet72 <= 2147483647; [L1333] ~ret~0 := #t~nondet72; [L1333] havoc #t~nondet72; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1334] COND TRUE 2 == ~blastFlag~0 [L1335] ~blastFlag~0 := 3; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1339] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1345] FCALL call write~int(4416, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1346] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4400, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1148] COND FALSE !(4368 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem28=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1151] COND FALSE !(4369 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem29=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1154] COND FALSE !(4384 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem30=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1157] COND FALSE !(4385 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem31=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1160] COND FALSE !(4400 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem32=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1163] COND FALSE !(4401 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem33=4416, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1166] COND TRUE 4416 == #t~mem33 [L1166] havoc #t~mem33; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1350] assume -2147483648 <= #t~nondet73 && #t~nondet73 <= 2147483647; [L1350] ~ret~0 := #t~nondet73; [L1350] havoc #t~nondet73; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=3, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1351] COND TRUE 3 == ~blastFlag~0 [L1352] ~blastFlag~0 := 4; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp~2=0] [L1356] COND FALSE !(~ret~0 <= 0) [L1361] FCALL call write~int(4432, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1362] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1363] assume -2147483648 <= #t~nondet74 && #t~nondet74 <= 2147483647; [L1363] ~tmp___6~0 := #t~nondet74; [L1363] havoc #t~nondet74; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1364] COND FALSE !(0 == ~tmp___6~0) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4416, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1148] COND FALSE !(4368 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem28=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1151] COND FALSE !(4369 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem29=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1154] COND FALSE !(4384 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem30=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1157] COND FALSE !(4385 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem31=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1160] COND FALSE !(4400 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem32=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1163] COND FALSE !(4401 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem33=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1166] COND FALSE !(4416 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem34=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1169] COND FALSE !(4417 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem35=4432, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1172] COND TRUE 4432 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=11, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1373] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1373] ~ret~0 := #t~nondet75; [L1373] havoc #t~nondet75; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1374] COND FALSE !(5 == ~blastFlag~0) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1379] COND FALSE !(~ret~0 <= 0) [L1384] FCALL call write~int(4448, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1385] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1604] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem127!base=20502, #t~mem127!offset=0, #t~mem128=20535, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1604] COND FALSE !(0 == #t~mem128) [L1604] havoc #t~mem128; [L1604] havoc #t~mem127; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1633] ~skip~0 := 0; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1130-L1634] COND FALSE !(false) VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4432, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1132] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1132] ~state~0 := #t~mem21; [L1132] havoc #t~mem21; [L1133] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem22=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1133] COND FALSE !(12292 == #t~mem22) [L1133] havoc #t~mem22; [L1136] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem23=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1136] COND FALSE !(16384 == #t~mem23) [L1136] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem24=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1139] COND FALSE !(4096 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem25=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1142] COND FALSE !(20480 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem26=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1145] COND FALSE !(4099 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem27=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1148] COND FALSE !(4368 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem28=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1151] COND FALSE !(4369 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem29=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1154] COND FALSE !(4384 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem30=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1157] COND FALSE !(4385 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem31=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1160] COND FALSE !(4400 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem32=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1163] COND FALSE !(4401 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem33=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1166] COND FALSE !(4416 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem34=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1169] COND FALSE !(4417 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem35=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1172] COND FALSE !(4432 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem36=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1175] COND FALSE !(4433 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, #t~mem37=4448, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1178] COND TRUE 4448 == #t~mem37 [L1178] havoc #t~mem37; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=1, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1389] assume -2147483648 <= #t~nondet76 && #t~nondet76 <= 2147483647; [L1389] ~ret~0 := #t~nondet76; [L1389] havoc #t~nondet76; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=0, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1390] COND TRUE 4 == ~blastFlag~0 VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=0, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1645] assert false; VAL [#in~s!base=20498, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~malloc13!base=20530, #t~malloc13!offset=0, ~#SSLv3_client_data~0!base=20490, ~#SSLv3_client_data~0!offset=0, ~blastFlag~0=4, ~buf~0!base=20507, ~buf~0!offset=20513, ~cb~0!base=6, ~cb~0!offset=-5, ~init~0=1, ~ret~0=0, ~s!base=20498, ~s!offset=0, ~skip~0=0, ~state~0=4448, ~tmp___0~1!base=20530, ~tmp___0~1!offset=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___4~0=1, ~tmp___5~0=1, ~tmp___6~0=1, ~tmp~2=0] [L1039] static int init = 1; [L1040] static SSL_METHOD SSLv3_client_data ; VAL [\old(init)=20542, \old(SSLv3_client_data)=null, \old(SSLv3_client_data)=null, init=1, SSLv3_client_data={20490:0}] [L1062] SSL *s ; [L1066] s = malloc (sizeof (SSL)) [L1067] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1068] s->ctx = malloc(sizeof(SSL_CTX)) [L1069] s->state = 12292 [L1070] s->version = __VERIFIER_nondet_int() [L1071] CALL ssl3_connect(s) VAL [init=1, s={20498:0}, SSLv3_client_data={20490:0}] [L1077] BUF_MEM *buf = __VERIFIER_nondet_pointer(); [L1078] unsigned long tmp ; [L1079] unsigned long l ; [L1080] long num1 ; [L1081] void (*cb)() ; [L1082] int ret ; [L1083] int new_state ; [L1084] int state ; [L1085] int skip ; [L1086] int *tmp___0 ; [L1087] int tmp___1 = __VERIFIER_nondet_int(); [L1088] int tmp___2 = __VERIFIER_nondet_int(); [L1089] int tmp___3 ; [L1090] int tmp___4 ; [L1091] int tmp___5 ; [L1092] int tmp___6 ; [L1093] int tmp___7 ; [L1094] int tmp___8 ; [L1095] long tmp___9 ; [L1097] int blastFlag ; [L1100] blastFlag = 0 [L1101] s->state = 12292 [L1102] s->hit = __VERIFIER_nondet_int() [L1104] tmp = __VERIFIER_nondet_int() [L1105] cb = (void (*)())((void *)0) [L1106] ret = -1 [L1107] skip = 0 [L1108] tmp___0 = (int*)malloc(sizeof(int)) [L1109] *tmp___0 = 0 [L1110] EXPR s->info_callback VAL [={0:0}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, s->info_callback={6:-5}, skip=0, SSLv3_client_data={20490:0}, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0] [L1110] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1111] EXPR s->info_callback [L1111] cb = s->info_callback [L1119] EXPR s->in_handshake [L1119] s->in_handshake += 1 [L1120] COND FALSE !(tmp___1 & 12288) VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0] [L1130] COND TRUE 1 VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0] [L1132] EXPR s->state [L1132] state = s->state [L1133] EXPR s->state VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, s->state=12292, skip=0, SSLv3_client_data={20490:0}, state=12292, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0] [L1133] COND TRUE s->state == 12292 [L1236] s->new_session = 1 [L1237] s->state = 4096 [L1238] EXPR s->ctx [L1238] EXPR (s->ctx)->stats.sess_connect_renegotiate [L1238] (s->ctx)->stats.sess_connect_renegotiate += 1 [L1243] s->server = 0 VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=12292, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0] [L1244] COND TRUE (unsigned long )cb != (unsigned long )((void *)0) VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=12292, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0] [L1249] EXPR s->version VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, s->version=1, skip=0, SSLv3_client_data={20490:0}, state=12292, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0] [L1249] COND FALSE !((s->version & 65280) != 768) [L1255] s->type = 4096 [L1256] EXPR s->init_buf VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, s->init_buf={3:-2}, skip=0, SSLv3_client_data={20490:0}, state=12292, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0] [L1256] COND FALSE !((unsigned long )s->init_buf == (unsigned long )((void *)0)) [L1268] tmp___4 = __VERIFIER_nondet_int() [L1269] COND FALSE !(! tmp___4) [L1275] tmp___5 = __VERIFIER_nondet_int() [L1276] COND FALSE !(! tmp___5) [L1282] s->state = 4368 [L1283] EXPR s->ctx [L1283] EXPR (s->ctx)->stats.sess_connect [L1283] (s->ctx)->stats.sess_connect += 1 [L1284] s->init_num = 0 VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=12292, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1604] EXPR s->s3 [L1604] EXPR (s->s3)->tmp.reuse_message VAL [={6:-5}, (s->s3)->tmp.reuse_message=20535, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, s->s3={20502:0}, skip=0, SSLv3_client_data={20490:0}, state=12292, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1604] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1633] skip = 0 VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=12292, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1130] COND TRUE 1 VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=12292, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1132] EXPR s->state [L1132] state = s->state [L1133] EXPR s->state VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, s->state=4368, skip=0, SSLv3_client_data={20490:0}, state=4368, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1133] COND FALSE !(s->state == 12292) [L1136] EXPR s->state VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, s->state=4368, skip=0, SSLv3_client_data={20490:0}, state=4368, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1136] COND FALSE !(s->state == 16384) [L1139] EXPR s->state VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, s->state=4368, skip=0, SSLv3_client_data={20490:0}, state=4368, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1139] COND FALSE !(s->state == 4096) [L1142] EXPR s->state VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, s->state=4368, skip=0, SSLv3_client_data={20490:0}, state=4368, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1142] COND FALSE !(s->state == 20480) [L1145] EXPR s->state VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, s->state=4368, skip=0, SSLv3_client_data={20490:0}, state=4368, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1145] COND FALSE !(s->state == 4099) [L1148] EXPR s->state VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, s->state=4368, skip=0, SSLv3_client_data={20490:0}, state=4368, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1148] COND TRUE s->state == 4368 [L1288] s->shutdown = 0 [L1289] ret = __VERIFIER_nondet_int() [L1290] COND TRUE blastFlag == 0 [L1291] blastFlag = 1 VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4368, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1295] COND FALSE !(ret <= 0) [L1300] s->state = 4384 [L1301] s->init_num = 0 [L1302] EXPR s->bbio [L1302] EXPR s->wbio VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->bbio={0:0}, s->wbio={0:1}, skip=0, SSLv3_client_data={20490:0}, state=4368, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1302] COND TRUE (unsigned long )s->bbio != (unsigned long )s->wbio [L1604] EXPR s->s3 [L1604] EXPR (s->s3)->tmp.reuse_message VAL [={6:-5}, (s->s3)->tmp.reuse_message=20535, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->s3={20502:0}, skip=0, SSLv3_client_data={20490:0}, state=4368, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1604] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1633] skip = 0 VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4368, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1130] COND TRUE 1 VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4368, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1132] EXPR s->state [L1132] state = s->state [L1133] EXPR s->state VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4384, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1133] COND FALSE !(s->state == 12292) [L1136] EXPR s->state VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4384, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1136] COND FALSE !(s->state == 16384) [L1139] EXPR s->state VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4384, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1139] COND FALSE !(s->state == 4096) [L1142] EXPR s->state VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4384, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1142] COND FALSE !(s->state == 20480) [L1145] EXPR s->state VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4384, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1145] COND FALSE !(s->state == 4099) [L1148] EXPR s->state VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4384, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1148] COND FALSE !(s->state == 4368) [L1151] EXPR s->state VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4384, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1151] COND FALSE !(s->state == 4369) [L1154] EXPR s->state VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4384, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1154] COND TRUE s->state == 4384 [L1310] ret = __VERIFIER_nondet_int() [L1311] COND TRUE blastFlag == 1 [L1312] blastFlag = 2 VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1316] COND FALSE !(ret <= 0) [L1321] s->hit VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->hit=0, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1321] COND FALSE !(s->hit) [L1324] s->state = 4400 VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1326] s->init_num = 0 VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1604] EXPR s->s3 [L1604] EXPR (s->s3)->tmp.reuse_message VAL [={6:-5}, (s->s3)->tmp.reuse_message=20535, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->s3={20502:0}, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1604] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1633] skip = 0 VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1130] COND TRUE 1 VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1132] EXPR s->state [L1132] state = s->state [L1133] EXPR s->state VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->state=4400, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1133] COND FALSE !(s->state == 12292) [L1136] EXPR s->state VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->state=4400, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1136] COND FALSE !(s->state == 16384) [L1139] EXPR s->state VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->state=4400, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1139] COND FALSE !(s->state == 4096) [L1142] EXPR s->state VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->state=4400, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1142] COND FALSE !(s->state == 20480) [L1145] EXPR s->state VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->state=4400, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1145] COND FALSE !(s->state == 4099) [L1148] EXPR s->state VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->state=4400, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1148] COND FALSE !(s->state == 4368) [L1151] EXPR s->state VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->state=4400, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1151] COND FALSE !(s->state == 4369) [L1154] EXPR s->state VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->state=4400, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1154] COND FALSE !(s->state == 4384) [L1157] EXPR s->state VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->state=4400, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1157] COND FALSE !(s->state == 4385) [L1160] EXPR s->state VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->state=4400, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1160] COND TRUE s->state == 4400 [L1330] EXPR s->s3 [L1330] EXPR (s->s3)->tmp.new_cipher [L1330] EXPR ((s->s3)->tmp.new_cipher)->algorithms VAL [={6:-5}, ((s->s3)->tmp.new_cipher)->algorithms=20524, (s->s3)->tmp.new_cipher={20541:0}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->s3={20502:0}, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1330] COND FALSE !(((s->s3)->tmp.new_cipher)->algorithms & 256UL) [L1333] ret = __VERIFIER_nondet_int() [L1334] COND TRUE blastFlag == 2 [L1335] blastFlag = 3 VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1339] COND FALSE !(ret <= 0) VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1345] s->state = 4416 [L1346] s->init_num = 0 VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1604] EXPR s->s3 [L1604] EXPR (s->s3)->tmp.reuse_message VAL [={6:-5}, (s->s3)->tmp.reuse_message=20535, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->s3={20502:0}, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1604] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1633] skip = 0 VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1130] COND TRUE 1 VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1132] EXPR s->state [L1132] state = s->state [L1133] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1133] COND FALSE !(s->state == 12292) [L1136] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1136] COND FALSE !(s->state == 16384) [L1139] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1139] COND FALSE !(s->state == 4096) [L1142] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1142] COND FALSE !(s->state == 20480) [L1145] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1145] COND FALSE !(s->state == 4099) [L1148] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1148] COND FALSE !(s->state == 4368) [L1151] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1151] COND FALSE !(s->state == 4369) [L1154] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1154] COND FALSE !(s->state == 4384) [L1157] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1157] COND FALSE !(s->state == 4385) [L1160] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1160] COND FALSE !(s->state == 4400) [L1163] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1163] COND FALSE !(s->state == 4401) [L1166] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1166] COND TRUE s->state == 4416 [L1350] ret = __VERIFIER_nondet_int() [L1351] COND TRUE blastFlag == 3 [L1352] blastFlag = 4 VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1356] COND FALSE !(ret <= 0) [L1361] s->state = 4432 [L1362] s->init_num = 0 [L1363] tmp___6 = __VERIFIER_nondet_int() [L1364] COND FALSE !(! tmp___6) VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1604] EXPR s->s3 [L1604] EXPR (s->s3)->tmp.reuse_message VAL [={6:-5}, (s->s3)->tmp.reuse_message=20535, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->s3={20502:0}, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1604] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1633] skip = 0 VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1130] COND TRUE 1 VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1132] EXPR s->state [L1132] state = s->state [L1133] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1133] COND FALSE !(s->state == 12292) [L1136] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1136] COND FALSE !(s->state == 16384) [L1139] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1139] COND FALSE !(s->state == 4096) [L1142] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1142] COND FALSE !(s->state == 20480) [L1145] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1145] COND FALSE !(s->state == 4099) [L1148] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1148] COND FALSE !(s->state == 4368) [L1151] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1151] COND FALSE !(s->state == 4369) [L1154] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1154] COND FALSE !(s->state == 4384) [L1157] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1157] COND FALSE !(s->state == 4385) [L1160] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1160] COND FALSE !(s->state == 4400) [L1163] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1163] COND FALSE !(s->state == 4401) [L1166] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1166] COND FALSE !(s->state == 4416) [L1169] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1169] COND FALSE !(s->state == 4417) [L1172] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1172] COND TRUE s->state == 4432 [L1373] ret = __VERIFIER_nondet_int() [L1374] COND FALSE !(blastFlag == 5) VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1379] COND FALSE !(ret <= 0) [L1384] s->state = 4448 [L1385] s->init_num = 0 VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1604] EXPR s->s3 [L1604] EXPR (s->s3)->tmp.reuse_message VAL [={6:-5}, (s->s3)->tmp.reuse_message=20535, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->s3={20502:0}, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1604] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1633] skip = 0 VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1130] COND TRUE 1 VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1132] EXPR s->state [L1132] state = s->state [L1133] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1133] COND FALSE !(s->state == 12292) [L1136] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1136] COND FALSE !(s->state == 16384) [L1139] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1139] COND FALSE !(s->state == 4096) [L1142] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1142] COND FALSE !(s->state == 20480) [L1145] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1145] COND FALSE !(s->state == 4099) [L1148] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1148] COND FALSE !(s->state == 4368) [L1151] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1151] COND FALSE !(s->state == 4369) [L1154] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1154] COND FALSE !(s->state == 4384) [L1157] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1157] COND FALSE !(s->state == 4385) [L1160] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1160] COND FALSE !(s->state == 4400) [L1163] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1163] COND FALSE !(s->state == 4401) [L1166] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1166] COND FALSE !(s->state == 4416) [L1169] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1169] COND FALSE !(s->state == 4417) [L1172] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1172] COND FALSE !(s->state == 4432) [L1175] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1175] COND FALSE !(s->state == 4433) [L1178] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1178] COND TRUE s->state == 4448 [L1389] ret = __VERIFIER_nondet_int() [L1390] COND TRUE blastFlag == 4 VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=0, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1645] __VERIFIER_error() VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=0, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] ----- [2018-11-23 13:04:19,477 WARN L170 areAnnotationChecker]: ULTIMATE.initENTRY has no Hoare annotation [2018-11-23 13:04:19,477 WARN L170 areAnnotationChecker]: ssl3_connectENTRY has no Hoare annotation [2018-11-23 13:04:19,477 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2018-11-23 13:04:19,477 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2018-11-23 13:04:19,478 WARN L170 areAnnotationChecker]: mainENTRY has no Hoare annotation [2018-11-23 13:04:19,478 WARN L170 areAnnotationChecker]: ULTIMATE.initFINAL has no Hoare annotation [2018-11-23 13:04:19,478 WARN L170 areAnnotationChecker]: L1110 has no Hoare annotation [2018-11-23 13:04:19,478 WARN L170 areAnnotationChecker]: L1110 has no Hoare annotation [2018-11-23 13:04:19,478 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2018-11-23 13:04:19,478 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2018-11-23 13:04:19,478 WARN L170 areAnnotationChecker]: L1071 has no Hoare annotation [2018-11-23 13:04:19,478 WARN L170 areAnnotationChecker]: L1071 has no Hoare annotation [2018-11-23 13:04:19,478 WARN L170 areAnnotationChecker]: ULTIMATE.initEXIT has no Hoare annotation [2018-11-23 13:04:19,479 WARN L170 areAnnotationChecker]: L1113-2 has no Hoare annotation [2018-11-23 13:04:19,479 WARN L170 areAnnotationChecker]: L1113 has no Hoare annotation [2018-11-23 13:04:19,479 WARN L170 areAnnotationChecker]: L1113 has no Hoare annotation [2018-11-23 13:04:19,479 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2018-11-23 13:04:19,479 WARN L170 areAnnotationChecker]: L1071-1 has no Hoare annotation [2018-11-23 13:04:19,479 WARN L170 areAnnotationChecker]: L1120 has no Hoare annotation [2018-11-23 13:04:19,479 WARN L170 areAnnotationChecker]: L1120 has no Hoare annotation [2018-11-23 13:04:19,479 WARN L170 areAnnotationChecker]: mainFINAL has no Hoare annotation [2018-11-23 13:04:19,479 WARN L170 areAnnotationChecker]: L1121 has no Hoare annotation [2018-11-23 13:04:19,479 WARN L170 areAnnotationChecker]: L1121 has no Hoare annotation [2018-11-23 13:04:19,480 WARN L170 areAnnotationChecker]: L1130-1 has no Hoare annotation [2018-11-23 13:04:19,480 WARN L170 areAnnotationChecker]: L1130-1 has no Hoare annotation [2018-11-23 13:04:19,480 WARN L170 areAnnotationChecker]: L1130-1 has no Hoare annotation [2018-11-23 13:04:19,480 WARN L170 areAnnotationChecker]: mainEXIT has no Hoare annotation [2018-11-23 13:04:19,480 WARN L170 areAnnotationChecker]: L1635 has no Hoare annotation [2018-11-23 13:04:19,480 WARN L170 areAnnotationChecker]: L1131 has no Hoare annotation [2018-11-23 13:04:19,480 WARN L170 areAnnotationChecker]: L1639 has no Hoare annotation [2018-11-23 13:04:19,480 WARN L170 areAnnotationChecker]: L1639 has no Hoare annotation [2018-11-23 13:04:19,480 WARN L170 areAnnotationChecker]: L1133 has no Hoare annotation [2018-11-23 13:04:19,480 WARN L170 areAnnotationChecker]: L1133 has no Hoare annotation [2018-11-23 13:04:19,480 WARN L170 areAnnotationChecker]: L1639-2 has no Hoare annotation [2018-11-23 13:04:19,481 WARN L170 areAnnotationChecker]: L1134 has no Hoare annotation [2018-11-23 13:04:19,481 WARN L170 areAnnotationChecker]: L1136 has no Hoare annotation [2018-11-23 13:04:19,481 WARN L170 areAnnotationChecker]: L1136 has no Hoare annotation [2018-11-23 13:04:19,481 WARN L170 areAnnotationChecker]: ssl3_connectFINAL has no Hoare annotation [2018-11-23 13:04:19,481 WARN L170 areAnnotationChecker]: L1239 has no Hoare annotation [2018-11-23 13:04:19,481 WARN L170 areAnnotationChecker]: L1139 has no Hoare annotation [2018-11-23 13:04:19,481 WARN L170 areAnnotationChecker]: L1139 has no Hoare annotation [2018-11-23 13:04:19,481 WARN L170 areAnnotationChecker]: ssl3_connectEXIT has no Hoare annotation [2018-11-23 13:04:19,481 WARN L170 areAnnotationChecker]: L1244 has no Hoare annotation [2018-11-23 13:04:19,481 WARN L170 areAnnotationChecker]: L1244 has no Hoare annotation [2018-11-23 13:04:19,482 WARN L170 areAnnotationChecker]: L1142 has no Hoare annotation [2018-11-23 13:04:19,482 WARN L170 areAnnotationChecker]: L1142 has no Hoare annotation [2018-11-23 13:04:19,482 WARN L170 areAnnotationChecker]: L1244-2 has no Hoare annotation [2018-11-23 13:04:19,482 WARN L170 areAnnotationChecker]: L1145 has no Hoare annotation [2018-11-23 13:04:19,482 WARN L170 areAnnotationChecker]: L1145 has no Hoare annotation [2018-11-23 13:04:19,482 WARN L170 areAnnotationChecker]: L1249 has no Hoare annotation [2018-11-23 13:04:19,482 WARN L170 areAnnotationChecker]: L1249 has no Hoare annotation [2018-11-23 13:04:19,482 WARN L170 areAnnotationChecker]: L1148 has no Hoare annotation [2018-11-23 13:04:19,482 WARN L170 areAnnotationChecker]: L1148 has no Hoare annotation [2018-11-23 13:04:19,482 WARN L170 areAnnotationChecker]: L1256 has no Hoare annotation [2018-11-23 13:04:19,482 WARN L170 areAnnotationChecker]: L1256 has no Hoare annotation [2018-11-23 13:04:19,483 WARN L170 areAnnotationChecker]: L1152 has no Hoare annotation [2018-11-23 13:04:19,483 WARN L170 areAnnotationChecker]: L1151 has no Hoare annotation [2018-11-23 13:04:19,483 WARN L170 areAnnotationChecker]: L1151 has no Hoare annotation [2018-11-23 13:04:19,483 WARN L170 areAnnotationChecker]: L1258 has no Hoare annotation [2018-11-23 13:04:19,483 WARN L170 areAnnotationChecker]: L1258 has no Hoare annotation [2018-11-23 13:04:19,483 WARN L170 areAnnotationChecker]: L1256-2 has no Hoare annotation [2018-11-23 13:04:19,483 WARN L170 areAnnotationChecker]: L1290 has no Hoare annotation [2018-11-23 13:04:19,483 WARN L170 areAnnotationChecker]: L1290 has no Hoare annotation [2018-11-23 13:04:19,483 WARN L170 areAnnotationChecker]: L1154 has no Hoare annotation [2018-11-23 13:04:19,483 WARN L170 areAnnotationChecker]: L1154 has no Hoare annotation [2018-11-23 13:04:19,483 WARN L170 areAnnotationChecker]: L1269 has no Hoare annotation [2018-11-23 13:04:19,484 WARN L170 areAnnotationChecker]: L1269 has no Hoare annotation [2018-11-23 13:04:19,484 WARN L170 areAnnotationChecker]: L1290-2 has no Hoare annotation [2018-11-23 13:04:19,484 WARN L170 areAnnotationChecker]: L1290-2 has no Hoare annotation [2018-11-23 13:04:19,484 WARN L170 areAnnotationChecker]: L1158 has no Hoare annotation [2018-11-23 13:04:19,484 WARN L170 areAnnotationChecker]: L1157 has no Hoare annotation [2018-11-23 13:04:19,484 WARN L170 areAnnotationChecker]: L1157 has no Hoare annotation [2018-11-23 13:04:19,484 WARN L170 areAnnotationChecker]: L1276 has no Hoare annotation [2018-11-23 13:04:19,484 WARN L170 areAnnotationChecker]: L1276 has no Hoare annotation [2018-11-23 13:04:19,484 WARN L170 areAnnotationChecker]: L1302 has no Hoare annotation [2018-11-23 13:04:19,484 WARN L170 areAnnotationChecker]: L1302 has no Hoare annotation [2018-11-23 13:04:19,485 WARN L170 areAnnotationChecker]: L1311 has no Hoare annotation [2018-11-23 13:04:19,485 WARN L170 areAnnotationChecker]: L1311 has no Hoare annotation [2018-11-23 13:04:19,485 WARN L170 areAnnotationChecker]: L1160 has no Hoare annotation [2018-11-23 13:04:19,485 WARN L170 areAnnotationChecker]: L1160 has no Hoare annotation [2018-11-23 13:04:19,485 WARN L170 areAnnotationChecker]: L1568 has no Hoare annotation [2018-11-23 13:04:19,485 WARN L170 areAnnotationChecker]: L1311-2 has no Hoare annotation [2018-11-23 13:04:19,485 WARN L170 areAnnotationChecker]: L1311-2 has no Hoare annotation [2018-11-23 13:04:19,485 WARN L170 areAnnotationChecker]: L1164 has no Hoare annotation [2018-11-23 13:04:19,485 WARN L170 areAnnotationChecker]: L1163 has no Hoare annotation [2018-11-23 13:04:19,485 WARN L170 areAnnotationChecker]: L1163 has no Hoare annotation [2018-11-23 13:04:19,486 WARN L170 areAnnotationChecker]: L1604 has no Hoare annotation [2018-11-23 13:04:19,486 WARN L170 areAnnotationChecker]: L1604 has no Hoare annotation [2018-11-23 13:04:19,486 WARN L170 areAnnotationChecker]: L1321 has no Hoare annotation [2018-11-23 13:04:19,486 WARN L170 areAnnotationChecker]: L1321 has no Hoare annotation [2018-11-23 13:04:19,486 WARN L170 areAnnotationChecker]: L1330 has no Hoare annotation [2018-11-23 13:04:19,486 WARN L170 areAnnotationChecker]: L1330 has no Hoare annotation [2018-11-23 13:04:19,486 WARN L170 areAnnotationChecker]: L1166 has no Hoare annotation [2018-11-23 13:04:19,486 WARN L170 areAnnotationChecker]: L1166 has no Hoare annotation [2018-11-23 13:04:19,486 WARN L170 areAnnotationChecker]: L1605 has no Hoare annotation [2018-11-23 13:04:19,486 WARN L170 areAnnotationChecker]: L1605 has no Hoare annotation [2018-11-23 13:04:19,487 WARN L170 areAnnotationChecker]: L1604-1 has no Hoare annotation [2018-11-23 13:04:19,487 WARN L170 areAnnotationChecker]: L1321-2 has no Hoare annotation [2018-11-23 13:04:19,487 WARN L170 areAnnotationChecker]: L1330-2 has no Hoare annotation [2018-11-23 13:04:19,487 WARN L170 areAnnotationChecker]: L1334 has no Hoare annotation [2018-11-23 13:04:19,487 WARN L170 areAnnotationChecker]: L1334 has no Hoare annotation [2018-11-23 13:04:19,487 WARN L170 areAnnotationChecker]: L1170 has no Hoare annotation [2018-11-23 13:04:19,487 WARN L170 areAnnotationChecker]: L1169 has no Hoare annotation [2018-11-23 13:04:19,487 WARN L170 areAnnotationChecker]: L1169 has no Hoare annotation [2018-11-23 13:04:19,487 WARN L170 areAnnotationChecker]: L1606 has no Hoare annotation [2018-11-23 13:04:19,487 WARN L170 areAnnotationChecker]: L1606 has no Hoare annotation [2018-11-23 13:04:19,488 WARN L170 areAnnotationChecker]: L1334-2 has no Hoare annotation [2018-11-23 13:04:19,488 WARN L170 areAnnotationChecker]: L1334-2 has no Hoare annotation [2018-11-23 13:04:19,488 WARN L170 areAnnotationChecker]: L1351 has no Hoare annotation [2018-11-23 13:04:19,488 WARN L170 areAnnotationChecker]: L1351 has no Hoare annotation [2018-11-23 13:04:19,488 WARN L170 areAnnotationChecker]: L1172 has no Hoare annotation [2018-11-23 13:04:19,488 WARN L170 areAnnotationChecker]: L1172 has no Hoare annotation [2018-11-23 13:04:19,488 WARN L170 areAnnotationChecker]: L1608 has no Hoare annotation [2018-11-23 13:04:19,488 WARN L170 areAnnotationChecker]: L1608 has no Hoare annotation [2018-11-23 13:04:19,488 WARN L170 areAnnotationChecker]: L1606-2 has no Hoare annotation [2018-11-23 13:04:19,488 WARN L170 areAnnotationChecker]: L1606-2 has no Hoare annotation [2018-11-23 13:04:19,488 WARN L170 areAnnotationChecker]: L1351-2 has no Hoare annotation [2018-11-23 13:04:19,489 WARN L170 areAnnotationChecker]: L1351-2 has no Hoare annotation [2018-11-23 13:04:19,489 WARN L170 areAnnotationChecker]: L1176 has no Hoare annotation [2018-11-23 13:04:19,489 WARN L170 areAnnotationChecker]: L1175 has no Hoare annotation [2018-11-23 13:04:19,489 WARN L170 areAnnotationChecker]: L1175 has no Hoare annotation [2018-11-23 13:04:19,489 WARN L170 areAnnotationChecker]: L1617 has no Hoare annotation [2018-11-23 13:04:19,489 WARN L170 areAnnotationChecker]: L1617 has no Hoare annotation [2018-11-23 13:04:19,489 WARN L170 areAnnotationChecker]: L1364 has no Hoare annotation [2018-11-23 13:04:19,489 WARN L170 areAnnotationChecker]: L1364 has no Hoare annotation [2018-11-23 13:04:19,489 WARN L170 areAnnotationChecker]: L1374 has no Hoare annotation [2018-11-23 13:04:19,490 WARN L170 areAnnotationChecker]: L1374 has no Hoare annotation [2018-11-23 13:04:19,490 WARN L170 areAnnotationChecker]: L1178 has no Hoare annotation [2018-11-23 13:04:19,490 WARN L170 areAnnotationChecker]: L1178 has no Hoare annotation [2018-11-23 13:04:19,490 WARN L170 areAnnotationChecker]: L1391 has no Hoare annotation [2018-11-23 13:04:19,490 WARN L170 areAnnotationChecker]: L1391 has no Hoare annotation [2018-11-23 13:04:19,490 WARN L170 areAnnotationChecker]: L1379 has no Hoare annotation [2018-11-23 13:04:19,490 WARN L170 areAnnotationChecker]: L1379 has no Hoare annotation [2018-11-23 13:04:19,490 WARN L170 areAnnotationChecker]: L1182 has no Hoare annotation [2018-11-23 13:04:19,490 WARN L170 areAnnotationChecker]: L1181 has no Hoare annotation [2018-11-23 13:04:19,490 WARN L170 areAnnotationChecker]: L1181 has no Hoare annotation [2018-11-23 13:04:19,490 WARN L170 areAnnotationChecker]: L1390 has no Hoare annotation [2018-11-23 13:04:19,491 WARN L170 areAnnotationChecker]: L1390 has no Hoare annotation [2018-11-23 13:04:19,491 WARN L170 areAnnotationChecker]: L1184 has no Hoare annotation [2018-11-23 13:04:19,491 WARN L170 areAnnotationChecker]: L1184 has no Hoare annotation [2018-11-23 13:04:19,491 WARN L170 areAnnotationChecker]: L1395 has no Hoare annotation [2018-11-23 13:04:19,491 WARN L170 areAnnotationChecker]: L1395 has no Hoare annotation [2018-11-23 13:04:19,491 WARN L170 areAnnotationChecker]: L1194 has no Hoare annotation [2018-11-23 13:04:19,491 WARN L170 areAnnotationChecker]: L1187 has no Hoare annotation [2018-11-23 13:04:19,491 WARN L170 areAnnotationChecker]: L1187 has no Hoare annotation [2018-11-23 13:04:19,491 WARN L170 areAnnotationChecker]: L1400 has no Hoare annotation [2018-11-23 13:04:19,491 WARN L170 areAnnotationChecker]: L1400 has no Hoare annotation [2018-11-23 13:04:19,492 WARN L170 areAnnotationChecker]: L1412 has no Hoare annotation [2018-11-23 13:04:19,492 WARN L170 areAnnotationChecker]: L1412 has no Hoare annotation [2018-11-23 13:04:19,492 WARN L170 areAnnotationChecker]: L1190 has no Hoare annotation [2018-11-23 13:04:19,492 WARN L170 areAnnotationChecker]: L1190 has no Hoare annotation [2018-11-23 13:04:19,492 WARN L170 areAnnotationChecker]: L1400-2 has no Hoare annotation [2018-11-23 13:04:19,492 WARN L170 areAnnotationChecker]: L1193 has no Hoare annotation [2018-11-23 13:04:19,492 WARN L170 areAnnotationChecker]: L1193 has no Hoare annotation [2018-11-23 13:04:19,492 WARN L170 areAnnotationChecker]: L1196 has no Hoare annotation [2018-11-23 13:04:19,492 WARN L170 areAnnotationChecker]: L1196 has no Hoare annotation [2018-11-23 13:04:19,492 WARN L170 areAnnotationChecker]: L1200 has no Hoare annotation [2018-11-23 13:04:19,493 WARN L170 areAnnotationChecker]: L1199 has no Hoare annotation [2018-11-23 13:04:19,493 WARN L170 areAnnotationChecker]: L1199 has no Hoare annotation [2018-11-23 13:04:19,493 WARN L170 areAnnotationChecker]: L1423 has no Hoare annotation [2018-11-23 13:04:19,493 WARN L170 areAnnotationChecker]: L1423 has no Hoare annotation [2018-11-23 13:04:19,493 WARN L170 areAnnotationChecker]: L1202 has no Hoare annotation [2018-11-23 13:04:19,493 WARN L170 areAnnotationChecker]: L1202 has no Hoare annotation [2018-11-23 13:04:19,493 WARN L170 areAnnotationChecker]: L1429 has no Hoare annotation [2018-11-23 13:04:19,493 WARN L170 areAnnotationChecker]: L1429 has no Hoare annotation [2018-11-23 13:04:19,493 WARN L170 areAnnotationChecker]: L1206 has no Hoare annotation [2018-11-23 13:04:19,493 WARN L170 areAnnotationChecker]: L1205 has no Hoare annotation [2018-11-23 13:04:19,493 WARN L170 areAnnotationChecker]: L1205 has no Hoare annotation [2018-11-23 13:04:19,494 WARN L170 areAnnotationChecker]: L1429-2 has no Hoare annotation [2018-11-23 13:04:19,494 WARN L170 areAnnotationChecker]: L1440 has no Hoare annotation [2018-11-23 13:04:19,494 WARN L170 areAnnotationChecker]: L1440 has no Hoare annotation [2018-11-23 13:04:19,494 WARN L170 areAnnotationChecker]: L1208 has no Hoare annotation [2018-11-23 13:04:19,494 WARN L170 areAnnotationChecker]: L1208 has no Hoare annotation [2018-11-23 13:04:19,494 WARN L170 areAnnotationChecker]: L1212 has no Hoare annotation [2018-11-23 13:04:19,494 WARN L170 areAnnotationChecker]: L1211 has no Hoare annotation [2018-11-23 13:04:19,494 WARN L170 areAnnotationChecker]: L1211 has no Hoare annotation [2018-11-23 13:04:19,494 WARN L170 areAnnotationChecker]: L1452 has no Hoare annotation [2018-11-23 13:04:19,494 WARN L170 areAnnotationChecker]: L1452 has no Hoare annotation [2018-11-23 13:04:19,494 WARN L170 areAnnotationChecker]: L1214 has no Hoare annotation [2018-11-23 13:04:19,495 WARN L170 areAnnotationChecker]: L1214 has no Hoare annotation [2018-11-23 13:04:19,495 WARN L170 areAnnotationChecker]: L1460 has no Hoare annotation [2018-11-23 13:04:19,495 WARN L170 areAnnotationChecker]: L1460 has no Hoare annotation [2018-11-23 13:04:19,495 WARN L170 areAnnotationChecker]: L1218 has no Hoare annotation [2018-11-23 13:04:19,495 WARN L170 areAnnotationChecker]: L1217 has no Hoare annotation [2018-11-23 13:04:19,495 WARN L170 areAnnotationChecker]: L1217 has no Hoare annotation [2018-11-23 13:04:19,495 WARN L170 areAnnotationChecker]: L1460-2 has no Hoare annotation [2018-11-23 13:04:19,495 WARN L170 areAnnotationChecker]: L1483 has no Hoare annotation [2018-11-23 13:04:19,495 WARN L170 areAnnotationChecker]: L1483 has no Hoare annotation [2018-11-23 13:04:19,495 WARN L170 areAnnotationChecker]: L1220 has no Hoare annotation [2018-11-23 13:04:19,496 WARN L170 areAnnotationChecker]: L1220 has no Hoare annotation [2018-11-23 13:04:19,496 WARN L170 areAnnotationChecker]: L1466 has no Hoare annotation [2018-11-23 13:04:19,496 WARN L170 areAnnotationChecker]: L1466 has no Hoare annotation [2018-11-23 13:04:19,496 WARN L170 areAnnotationChecker]: L1490 has no Hoare annotation [2018-11-23 13:04:19,496 WARN L170 areAnnotationChecker]: L1490 has no Hoare annotation [2018-11-23 13:04:19,496 WARN L170 areAnnotationChecker]: L1224 has no Hoare annotation [2018-11-23 13:04:19,496 WARN L170 areAnnotationChecker]: L1223 has no Hoare annotation [2018-11-23 13:04:19,496 WARN L170 areAnnotationChecker]: L1223 has no Hoare annotation [2018-11-23 13:04:19,496 WARN L170 areAnnotationChecker]: L1473 has no Hoare annotation [2018-11-23 13:04:19,496 WARN L170 areAnnotationChecker]: L1473 has no Hoare annotation [2018-11-23 13:04:19,496 WARN L170 areAnnotationChecker]: L1492 has no Hoare annotation [2018-11-23 13:04:19,497 WARN L170 areAnnotationChecker]: L1492 has no Hoare annotation [2018-11-23 13:04:19,497 WARN L170 areAnnotationChecker]: L1490-1 has no Hoare annotation [2018-11-23 13:04:19,497 WARN L170 areAnnotationChecker]: L1507 has no Hoare annotation [2018-11-23 13:04:19,497 WARN L170 areAnnotationChecker]: L1507 has no Hoare annotation [2018-11-23 13:04:19,497 WARN L170 areAnnotationChecker]: L1226 has no Hoare annotation [2018-11-23 13:04:19,497 WARN L170 areAnnotationChecker]: L1226 has no Hoare annotation [2018-11-23 13:04:19,497 WARN L170 areAnnotationChecker]: L1512 has no Hoare annotation [2018-11-23 13:04:19,497 WARN L170 areAnnotationChecker]: L1512 has no Hoare annotation [2018-11-23 13:04:19,497 WARN L170 areAnnotationChecker]: L1227 has no Hoare annotation [2018-11-23 13:04:19,497 WARN L170 areAnnotationChecker]: L1229 has no Hoare annotation [2018-11-23 13:04:19,498 WARN L170 areAnnotationChecker]: L1229 has no Hoare annotation [2018-11-23 13:04:19,498 WARN L170 areAnnotationChecker]: L1512-2 has no Hoare annotation [2018-11-23 13:04:19,498 WARN L170 areAnnotationChecker]: L1521 has no Hoare annotation [2018-11-23 13:04:19,498 WARN L170 areAnnotationChecker]: L1521 has no Hoare annotation [2018-11-23 13:04:19,498 WARN L170 areAnnotationChecker]: L1230 has no Hoare annotation [2018-11-23 13:04:19,498 WARN L170 areAnnotationChecker]: L1233 has no Hoare annotation [2018-11-23 13:04:19,498 WARN L170 areAnnotationChecker]: L1525 has no Hoare annotation [2018-11-23 13:04:19,498 WARN L170 areAnnotationChecker]: L1525 has no Hoare annotation [2018-11-23 13:04:19,498 WARN L170 areAnnotationChecker]: L1521-2 has no Hoare annotation [2018-11-23 13:04:19,498 WARN L170 areAnnotationChecker]: L1538 has no Hoare annotation [2018-11-23 13:04:19,499 WARN L170 areAnnotationChecker]: L1538 has no Hoare annotation [2018-11-23 13:04:19,499 WARN L170 areAnnotationChecker]: L1538-2 has no Hoare annotation [2018-11-23 13:04:19,499 WARN L170 areAnnotationChecker]: L1543 has no Hoare annotation [2018-11-23 13:04:19,499 WARN L170 areAnnotationChecker]: L1543 has no Hoare annotation [2018-11-23 13:04:19,499 WARN L170 areAnnotationChecker]: L1543-2 has no Hoare annotation [2018-11-23 13:04:19,499 WARN L170 areAnnotationChecker]: L1550 has no Hoare annotation [2018-11-23 13:04:19,499 WARN L170 areAnnotationChecker]: L1550 has no Hoare annotation [2018-11-23 13:04:19,499 WARN L170 areAnnotationChecker]: L1550-2 has no Hoare annotation [2018-11-23 13:04:19,499 WARN L170 areAnnotationChecker]: L1558 has no Hoare annotation [2018-11-23 13:04:19,499 WARN L170 areAnnotationChecker]: L1558 has no Hoare annotation [2018-11-23 13:04:19,500 INFO L163 areAnnotationChecker]: CFG has 0 edges. 0 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2018-11-23 13:04:19,505 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 01:04:19 BoogieIcfgContainer [2018-11-23 13:04:19,505 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 13:04:19,506 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 13:04:19,506 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 13:04:19,506 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 13:04:19,507 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:02:38" (3/4) ... [2018-11-23 13:04:19,514 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-23 13:04:19,514 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 13:04:19,522 INFO L168 Benchmark]: Toolchain (without parser) took 105816.33 ms. Allocated memory was 1.5 GB in the beginning and 3.0 GB in the end (delta: 1.4 GB). Free memory was 1.4 GB in the beginning and 2.3 GB in the end (delta: -880.1 MB). Peak memory consumption was 538.1 MB. Max. memory is 7.1 GB. [2018-11-23 13:04:19,523 INFO L168 Benchmark]: CDTParser took 0.22 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-11-23 13:04:19,523 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1162.49 ms. Allocated memory was 1.5 GB in the beginning and 2.3 GB in the end (delta: 768.1 MB). Free memory was 1.4 GB in the beginning and 2.2 GB in the end (delta: -813.9 MB). Peak memory consumption was 40.9 MB. Max. memory is 7.1 GB. [2018-11-23 13:04:19,525 INFO L168 Benchmark]: Boogie Procedure Inliner took 50.57 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 13.8 MB). Peak memory consumption was 13.8 MB. Max. memory is 7.1 GB. [2018-11-23 13:04:19,526 INFO L168 Benchmark]: Boogie Preprocessor took 194.14 ms. Allocated memory is still 2.3 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-11-23 13:04:19,526 INFO L168 Benchmark]: RCFGBuilder took 2941.61 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.1 GB in the end (delta: 149.2 MB). Peak memory consumption was 149.2 MB. Max. memory is 7.1 GB. [2018-11-23 13:04:19,528 INFO L168 Benchmark]: TraceAbstraction took 101447.35 ms. Allocated memory was 2.3 GB in the beginning and 3.0 GB in the end (delta: 650.1 MB). Free memory was 2.1 GB in the beginning and 2.3 GB in the end (delta: -229.1 MB). Peak memory consumption was 421.0 MB. Max. memory is 7.1 GB. [2018-11-23 13:04:19,528 INFO L168 Benchmark]: Witness Printer took 8.62 ms. Allocated memory is still 3.0 GB. Free memory is still 2.3 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-11-23 13:04:19,536 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - GenericResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.22 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 7.1 GB. * CACSL2BoogieTranslator took 1162.49 ms. Allocated memory was 1.5 GB in the beginning and 2.3 GB in the end (delta: 768.1 MB). Free memory was 1.4 GB in the beginning and 2.2 GB in the end (delta: -813.9 MB). Peak memory consumption was 40.9 MB. Max. memory is 7.1 GB. * Boogie Procedure Inliner took 50.57 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 13.8 MB). Peak memory consumption was 13.8 MB. Max. memory is 7.1 GB. * Boogie Preprocessor took 194.14 ms. Allocated memory is still 2.3 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 7.1 GB. * RCFGBuilder took 2941.61 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.1 GB in the end (delta: 149.2 MB). Peak memory consumption was 149.2 MB. Max. memory is 7.1 GB. * TraceAbstraction took 101447.35 ms. Allocated memory was 2.3 GB in the beginning and 3.0 GB in the end (delta: 650.1 MB). Free memory was 2.1 GB in the beginning and 2.3 GB in the end (delta: -229.1 MB). Peak memory consumption was 421.0 MB. Max. memory is 7.1 GB. * Witness Printer took 8.62 ms. Allocated memory is still 3.0 GB. Free memory is still 2.3 GB. There was no memory consumed. Max. memory is 7.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 20485 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 20488 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - UnprovableResult [Line: 1645]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of bitwiseAnd at line 1330. Possible FailurePath: [L1039] static int init = 1; [L1040] static SSL_METHOD SSLv3_client_data ; VAL [\old(init)=20542, \old(SSLv3_client_data)=null, \old(SSLv3_client_data)=null, init=1, SSLv3_client_data={20490:0}] [L1062] SSL *s ; [L1066] s = malloc (sizeof (SSL)) [L1067] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1068] s->ctx = malloc(sizeof(SSL_CTX)) [L1069] s->state = 12292 [L1070] s->version = __VERIFIER_nondet_int() [L1071] CALL ssl3_connect(s) VAL [init=1, s={20498:0}, SSLv3_client_data={20490:0}] [L1077] BUF_MEM *buf = __VERIFIER_nondet_pointer(); [L1078] unsigned long tmp ; [L1079] unsigned long l ; [L1080] long num1 ; [L1081] void (*cb)() ; [L1082] int ret ; [L1083] int new_state ; [L1084] int state ; [L1085] int skip ; [L1086] int *tmp___0 ; [L1087] int tmp___1 = __VERIFIER_nondet_int(); [L1088] int tmp___2 = __VERIFIER_nondet_int(); [L1089] int tmp___3 ; [L1090] int tmp___4 ; [L1091] int tmp___5 ; [L1092] int tmp___6 ; [L1093] int tmp___7 ; [L1094] int tmp___8 ; [L1095] long tmp___9 ; [L1097] int blastFlag ; [L1100] blastFlag = 0 [L1101] s->state = 12292 [L1102] s->hit = __VERIFIER_nondet_int() [L1104] tmp = __VERIFIER_nondet_int() [L1105] cb = (void (*)())((void *)0) [L1106] ret = -1 [L1107] skip = 0 [L1108] tmp___0 = (int*)malloc(sizeof(int)) [L1109] *tmp___0 = 0 [L1110] EXPR s->info_callback VAL [={0:0}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, s->info_callback={6:-5}, skip=0, SSLv3_client_data={20490:0}, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0] [L1110] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1111] EXPR s->info_callback [L1111] cb = s->info_callback [L1119] EXPR s->in_handshake [L1119] s->in_handshake += 1 [L1120] COND FALSE !(tmp___1 & 12288) VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0] [L1130] COND TRUE 1 VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0] [L1132] EXPR s->state [L1132] state = s->state [L1133] EXPR s->state VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, s->state=12292, skip=0, SSLv3_client_data={20490:0}, state=12292, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0] [L1133] COND TRUE s->state == 12292 [L1236] s->new_session = 1 [L1237] s->state = 4096 [L1238] EXPR s->ctx [L1238] EXPR (s->ctx)->stats.sess_connect_renegotiate [L1238] (s->ctx)->stats.sess_connect_renegotiate += 1 [L1243] s->server = 0 VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=12292, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0] [L1244] COND TRUE (unsigned long )cb != (unsigned long )((void *)0) VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=12292, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0] [L1249] EXPR s->version VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, s->version=1, skip=0, SSLv3_client_data={20490:0}, state=12292, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0] [L1249] COND FALSE !((s->version & 65280) != 768) [L1255] s->type = 4096 [L1256] EXPR s->init_buf VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, s->init_buf={3:-2}, skip=0, SSLv3_client_data={20490:0}, state=12292, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0] [L1256] COND FALSE !((unsigned long )s->init_buf == (unsigned long )((void *)0)) [L1268] tmp___4 = __VERIFIER_nondet_int() [L1269] COND FALSE !(! tmp___4) [L1275] tmp___5 = __VERIFIER_nondet_int() [L1276] COND FALSE !(! tmp___5) [L1282] s->state = 4368 [L1283] EXPR s->ctx [L1283] EXPR (s->ctx)->stats.sess_connect [L1283] (s->ctx)->stats.sess_connect += 1 [L1284] s->init_num = 0 VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=12292, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1604] EXPR s->s3 [L1604] EXPR (s->s3)->tmp.reuse_message VAL [={6:-5}, (s->s3)->tmp.reuse_message=20535, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, s->s3={20502:0}, skip=0, SSLv3_client_data={20490:0}, state=12292, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1604] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1633] skip = 0 VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=12292, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1130] COND TRUE 1 VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=12292, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1132] EXPR s->state [L1132] state = s->state [L1133] EXPR s->state VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, s->state=4368, skip=0, SSLv3_client_data={20490:0}, state=4368, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1133] COND FALSE !(s->state == 12292) [L1136] EXPR s->state VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, s->state=4368, skip=0, SSLv3_client_data={20490:0}, state=4368, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1136] COND FALSE !(s->state == 16384) [L1139] EXPR s->state VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, s->state=4368, skip=0, SSLv3_client_data={20490:0}, state=4368, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1139] COND FALSE !(s->state == 4096) [L1142] EXPR s->state VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, s->state=4368, skip=0, SSLv3_client_data={20490:0}, state=4368, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1142] COND FALSE !(s->state == 20480) [L1145] EXPR s->state VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, s->state=4368, skip=0, SSLv3_client_data={20490:0}, state=4368, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1145] COND FALSE !(s->state == 4099) [L1148] EXPR s->state VAL [={6:-5}, blastFlag=0, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=-1, s={20498:0}, s={20498:0}, s->state=4368, skip=0, SSLv3_client_data={20490:0}, state=4368, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1148] COND TRUE s->state == 4368 [L1288] s->shutdown = 0 [L1289] ret = __VERIFIER_nondet_int() [L1290] COND TRUE blastFlag == 0 [L1291] blastFlag = 1 VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4368, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1295] COND FALSE !(ret <= 0) [L1300] s->state = 4384 [L1301] s->init_num = 0 [L1302] EXPR s->bbio [L1302] EXPR s->wbio VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->bbio={0:0}, s->wbio={0:1}, skip=0, SSLv3_client_data={20490:0}, state=4368, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1302] COND TRUE (unsigned long )s->bbio != (unsigned long )s->wbio [L1604] EXPR s->s3 [L1604] EXPR (s->s3)->tmp.reuse_message VAL [={6:-5}, (s->s3)->tmp.reuse_message=20535, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->s3={20502:0}, skip=0, SSLv3_client_data={20490:0}, state=4368, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1604] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1633] skip = 0 VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4368, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1130] COND TRUE 1 VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4368, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1132] EXPR s->state [L1132] state = s->state [L1133] EXPR s->state VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4384, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1133] COND FALSE !(s->state == 12292) [L1136] EXPR s->state VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4384, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1136] COND FALSE !(s->state == 16384) [L1139] EXPR s->state VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4384, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1139] COND FALSE !(s->state == 4096) [L1142] EXPR s->state VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4384, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1142] COND FALSE !(s->state == 20480) [L1145] EXPR s->state VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4384, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1145] COND FALSE !(s->state == 4099) [L1148] EXPR s->state VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4384, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1148] COND FALSE !(s->state == 4368) [L1151] EXPR s->state VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4384, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1151] COND FALSE !(s->state == 4369) [L1154] EXPR s->state VAL [={6:-5}, blastFlag=1, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4384, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1154] COND TRUE s->state == 4384 [L1310] ret = __VERIFIER_nondet_int() [L1311] COND TRUE blastFlag == 1 [L1312] blastFlag = 2 VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1316] COND FALSE !(ret <= 0) [L1321] s->hit VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->hit=0, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1321] COND FALSE !(s->hit) [L1324] s->state = 4400 VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1326] s->init_num = 0 VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1604] EXPR s->s3 [L1604] EXPR (s->s3)->tmp.reuse_message VAL [={6:-5}, (s->s3)->tmp.reuse_message=20535, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->s3={20502:0}, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1604] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1633] skip = 0 VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1130] COND TRUE 1 VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4384, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1132] EXPR s->state [L1132] state = s->state [L1133] EXPR s->state VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->state=4400, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1133] COND FALSE !(s->state == 12292) [L1136] EXPR s->state VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->state=4400, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1136] COND FALSE !(s->state == 16384) [L1139] EXPR s->state VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->state=4400, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1139] COND FALSE !(s->state == 4096) [L1142] EXPR s->state VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->state=4400, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1142] COND FALSE !(s->state == 20480) [L1145] EXPR s->state VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->state=4400, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1145] COND FALSE !(s->state == 4099) [L1148] EXPR s->state VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->state=4400, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1148] COND FALSE !(s->state == 4368) [L1151] EXPR s->state VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->state=4400, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1151] COND FALSE !(s->state == 4369) [L1154] EXPR s->state VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->state=4400, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1154] COND FALSE !(s->state == 4384) [L1157] EXPR s->state VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->state=4400, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1157] COND FALSE !(s->state == 4385) [L1160] EXPR s->state VAL [={6:-5}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->state=4400, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1160] COND TRUE s->state == 4400 [L1330] EXPR s->s3 [L1330] EXPR (s->s3)->tmp.new_cipher [L1330] EXPR ((s->s3)->tmp.new_cipher)->algorithms VAL [={6:-5}, ((s->s3)->tmp.new_cipher)->algorithms=20524, (s->s3)->tmp.new_cipher={20541:0}, blastFlag=2, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=10, s={20498:0}, s={20498:0}, s->s3={20502:0}, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1330] COND FALSE !(((s->s3)->tmp.new_cipher)->algorithms & 256UL) [L1333] ret = __VERIFIER_nondet_int() [L1334] COND TRUE blastFlag == 2 [L1335] blastFlag = 3 VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1339] COND FALSE !(ret <= 0) VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1345] s->state = 4416 [L1346] s->init_num = 0 VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1604] EXPR s->s3 [L1604] EXPR (s->s3)->tmp.reuse_message VAL [={6:-5}, (s->s3)->tmp.reuse_message=20535, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->s3={20502:0}, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1604] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1633] skip = 0 VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1130] COND TRUE 1 VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4400, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1132] EXPR s->state [L1132] state = s->state [L1133] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1133] COND FALSE !(s->state == 12292) [L1136] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1136] COND FALSE !(s->state == 16384) [L1139] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1139] COND FALSE !(s->state == 4096) [L1142] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1142] COND FALSE !(s->state == 20480) [L1145] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1145] COND FALSE !(s->state == 4099) [L1148] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1148] COND FALSE !(s->state == 4368) [L1151] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1151] COND FALSE !(s->state == 4369) [L1154] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1154] COND FALSE !(s->state == 4384) [L1157] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1157] COND FALSE !(s->state == 4385) [L1160] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1160] COND FALSE !(s->state == 4400) [L1163] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1163] COND FALSE !(s->state == 4401) [L1166] EXPR s->state VAL [={6:-5}, blastFlag=3, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4416, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1166] COND TRUE s->state == 4416 [L1350] ret = __VERIFIER_nondet_int() [L1351] COND TRUE blastFlag == 3 [L1352] blastFlag = 4 VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1] [L1356] COND FALSE !(ret <= 0) [L1361] s->state = 4432 [L1362] s->init_num = 0 [L1363] tmp___6 = __VERIFIER_nondet_int() [L1364] COND FALSE !(! tmp___6) VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1604] EXPR s->s3 [L1604] EXPR (s->s3)->tmp.reuse_message VAL [={6:-5}, (s->s3)->tmp.reuse_message=20535, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->s3={20502:0}, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1604] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1633] skip = 0 VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1130] COND TRUE 1 VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4416, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1132] EXPR s->state [L1132] state = s->state [L1133] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1133] COND FALSE !(s->state == 12292) [L1136] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1136] COND FALSE !(s->state == 16384) [L1139] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1139] COND FALSE !(s->state == 4096) [L1142] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1142] COND FALSE !(s->state == 20480) [L1145] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1145] COND FALSE !(s->state == 4099) [L1148] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1148] COND FALSE !(s->state == 4368) [L1151] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1151] COND FALSE !(s->state == 4369) [L1154] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1154] COND FALSE !(s->state == 4384) [L1157] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1157] COND FALSE !(s->state == 4385) [L1160] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1160] COND FALSE !(s->state == 4400) [L1163] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1163] COND FALSE !(s->state == 4401) [L1166] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1166] COND FALSE !(s->state == 4416) [L1169] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1169] COND FALSE !(s->state == 4417) [L1172] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=11, s={20498:0}, s={20498:0}, s->state=4432, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1172] COND TRUE s->state == 4432 [L1373] ret = __VERIFIER_nondet_int() [L1374] COND FALSE !(blastFlag == 5) VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1379] COND FALSE !(ret <= 0) [L1384] s->state = 4448 [L1385] s->init_num = 0 VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1604] EXPR s->s3 [L1604] EXPR (s->s3)->tmp.reuse_message VAL [={6:-5}, (s->s3)->tmp.reuse_message=20535, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->s3={20502:0}, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1604] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1633] skip = 0 VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1130] COND TRUE 1 VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4432, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1132] EXPR s->state [L1132] state = s->state [L1133] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1133] COND FALSE !(s->state == 12292) [L1136] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1136] COND FALSE !(s->state == 16384) [L1139] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1139] COND FALSE !(s->state == 4096) [L1142] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1142] COND FALSE !(s->state == 20480) [L1145] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1145] COND FALSE !(s->state == 4099) [L1148] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1148] COND FALSE !(s->state == 4368) [L1151] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1151] COND FALSE !(s->state == 4369) [L1154] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1154] COND FALSE !(s->state == 4384) [L1157] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1157] COND FALSE !(s->state == 4385) [L1160] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1160] COND FALSE !(s->state == 4400) [L1163] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1163] COND FALSE !(s->state == 4401) [L1166] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1166] COND FALSE !(s->state == 4416) [L1169] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1169] COND FALSE !(s->state == 4417) [L1172] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1172] COND FALSE !(s->state == 4432) [L1175] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1175] COND FALSE !(s->state == 4433) [L1178] EXPR s->state VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=1, s={20498:0}, s={20498:0}, s->state=4448, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1178] COND TRUE s->state == 4448 [L1389] ret = __VERIFIER_nondet_int() [L1390] COND TRUE blastFlag == 4 VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=0, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] [L1645] __VERIFIER_error() VAL [={6:-5}, blastFlag=4, buf={20507:20513}, init=1, malloc(sizeof(int))={20530:0}, ret=0, s={20498:0}, s={20498:0}, skip=0, SSLv3_client_data={20490:0}, state=4448, tmp=0, tmp___0={20530:0}, tmp___1=0, tmp___2=0, tmp___4=1, tmp___5=1, tmp___6=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 4 procedures, 142 locations, 1 error locations. UNSAFE Result, 101.3s OverallTime, 35 OverallIterations, 7 TraceHistogramMax, 72.1s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 7566 SDtfs, 2657 SDslu, 9982 SDs, 0 SdLazy, 5228 SolverSat, 203 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 9.2s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 208 GetRequests, 68 SyntacticMatches, 45 SemanticMatches, 95 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 6.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1029occurred in iteration=34, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 10.6s AutomataMinimizationTime, 34 MinimizatonAttempts, 2607 StatesRemovedByMinimization, 29 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.1s SsaConstructionTime, 0.8s SatisfiabilityAnalysisTime, 13.2s InterpolantComputationTime, 3084 NumberOfCodeBlocks, 3084 NumberOfCodeBlocksAsserted, 35 NumberOfCheckSat, 2907 ConstructedInterpolants, 0 QuantifiedInterpolants, 612042 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 34 InterpolantComputations, 34 PerfectInterpolantSequences, 2666/2666 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request...