java -ea -Xmx8000000000 -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc ../../../trunk/examples/toolchains/AutomizerCInline_WitnessPrinter.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf -i ../../../trunk/examples/svcomp/ssh/s3_srvr.blast.01_false-unreach-call.i.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.1.23-61f4311 [2018-11-23 12:46:05,910 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 12:46:05,914 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 12:46:05,926 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 12:46:05,927 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 12:46:05,928 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 12:46:05,929 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 12:46:05,930 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 12:46:05,932 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 12:46:05,933 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 12:46:05,934 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 12:46:05,934 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 12:46:05,935 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 12:46:05,936 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 12:46:05,937 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 12:46:05,938 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 12:46:05,939 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 12:46:05,941 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 12:46:05,943 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 12:46:05,944 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 12:46:05,946 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 12:46:05,947 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 12:46:05,949 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 12:46:05,949 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 12:46:05,950 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 12:46:05,950 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 12:46:05,951 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 12:46:05,952 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 12:46:05,953 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 12:46:05,954 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 12:46:05,954 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 12:46:05,955 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 12:46:05,955 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 12:46:05,956 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 12:46:05,957 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 12:46:05,957 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 12:46:05,958 INFO L98 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf [2018-11-23 12:46:05,986 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 12:46:05,987 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 12:46:05,988 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 12:46:05,989 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 12:46:05,989 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 12:46:05,990 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 12:46:05,990 INFO L133 SettingsManager]: * Use SBE=true [2018-11-23 12:46:05,990 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 12:46:05,990 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-23 12:46:05,990 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 12:46:05,992 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-23 12:46:05,992 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 12:46:05,992 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 12:46:05,992 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 12:46:05,993 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 12:46:05,993 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-23 12:46:05,993 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 12:46:05,993 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 12:46:05,993 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 12:46:05,994 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 12:46:05,994 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 12:46:05,994 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 12:46:05,994 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 12:46:05,994 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 12:46:05,995 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 12:46:05,995 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 12:46:05,995 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 12:46:05,995 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-23 12:46:05,995 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 12:46:05,996 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 12:46:05,997 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 12:46:06,046 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 12:46:06,061 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 12:46:06,066 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 12:46:06,068 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 12:46:06,068 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 12:46:06,069 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ssh/s3_srvr.blast.01_false-unreach-call.i.cil.c [2018-11-23 12:46:06,123 INFO L221 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4350915b2/54c5bc56be6f435a89c7a24f8da5dee0/FLAGc2c2f37e1 [2018-11-23 12:46:06,765 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 12:46:06,765 INFO L161 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ssh/s3_srvr.blast.01_false-unreach-call.i.cil.c [2018-11-23 12:46:06,796 INFO L355 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4350915b2/54c5bc56be6f435a89c7a24f8da5dee0/FLAGc2c2f37e1 [2018-11-23 12:46:06,951 INFO L363 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4350915b2/54c5bc56be6f435a89c7a24f8da5dee0 [2018-11-23 12:46:06,960 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 12:46:06,962 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 12:46:06,962 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 12:46:06,963 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 12:46:06,966 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 12:46:06,968 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:46:06" (1/1) ... [2018-11-23 12:46:06,971 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@26bf9707 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:06, skipping insertion in model container [2018-11-23 12:46:06,971 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:46:06" (1/1) ... [2018-11-23 12:46:06,982 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 12:46:07,049 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 12:46:07,662 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 12:46:07,685 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 12:46:07,964 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 12:46:07,994 INFO L195 MainTranslator]: Completed translation [2018-11-23 12:46:07,995 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:07 WrapperNode [2018-11-23 12:46:07,995 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 12:46:07,996 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 12:46:07,996 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 12:46:07,996 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 12:46:08,006 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:07" (1/1) ... [2018-11-23 12:46:08,034 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:07" (1/1) ... [2018-11-23 12:46:08,045 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 12:46:08,045 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 12:46:08,046 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 12:46:08,046 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 12:46:08,057 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:07" (1/1) ... [2018-11-23 12:46:08,058 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:07" (1/1) ... [2018-11-23 12:46:08,068 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:07" (1/1) ... [2018-11-23 12:46:08,069 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:07" (1/1) ... [2018-11-23 12:46:08,158 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:07" (1/1) ... [2018-11-23 12:46:08,184 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:07" (1/1) ... [2018-11-23 12:46:08,191 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:07" (1/1) ... [2018-11-23 12:46:08,208 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 12:46:08,208 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 12:46:08,209 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 12:46:08,209 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 12:46:08,210 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:07" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 12:46:08,281 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 12:46:08,281 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 12:46:08,281 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 12:46:08,281 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 12:46:08,281 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-23 12:46:08,282 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 12:46:08,282 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-23 12:46:08,282 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 12:46:08,282 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-23 12:46:08,282 INFO L130 BoogieDeclarations]: Found specification of procedure ssl3_accept [2018-11-23 12:46:08,283 INFO L138 BoogieDeclarations]: Found implementation of procedure ssl3_accept [2018-11-23 12:46:08,283 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 12:46:08,283 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 12:46:08,283 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 12:46:08,283 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 12:46:08,999 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 12:46:08,999 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 12:46:11,656 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 12:46:11,656 INFO L280 CfgBuilder]: Removed 1 assue(true) statements. [2018-11-23 12:46:11,657 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:46:11 BoogieIcfgContainer [2018-11-23 12:46:11,657 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 12:46:11,658 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 12:46:11,658 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 12:46:11,661 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 12:46:11,662 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 12:46:06" (1/3) ... [2018-11-23 12:46:11,663 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@50356e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:46:11, skipping insertion in model container [2018-11-23 12:46:11,663 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:07" (2/3) ... [2018-11-23 12:46:11,663 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@50356e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:46:11, skipping insertion in model container [2018-11-23 12:46:11,664 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:46:11" (3/3) ... [2018-11-23 12:46:11,665 INFO L112 eAbstractionObserver]: Analyzing ICFG s3_srvr.blast.01_false-unreach-call.i.cil.c [2018-11-23 12:46:11,677 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 12:46:11,688 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 12:46:11,710 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 12:46:11,747 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 12:46:11,748 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 12:46:11,748 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 12:46:11,748 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 12:46:11,748 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 12:46:11,748 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 12:46:11,749 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 12:46:11,749 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 12:46:11,749 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 12:46:11,772 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states. [2018-11-23 12:46:11,783 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2018-11-23 12:46:11,784 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:11,785 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:11,788 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:11,794 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:11,794 INFO L82 PathProgramCache]: Analyzing trace with hash 291877897, now seen corresponding path program 1 times [2018-11-23 12:46:11,796 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:11,797 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:11,864 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:11,864 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:11,865 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:11,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:12,503 INFO L256 TraceCheckUtils]: 0: Hoare triple {157#true} call ULTIMATE.init(); {157#true} is VALID [2018-11-23 12:46:12,507 INFO L273 TraceCheckUtils]: 1: Hoare triple {157#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {157#true} is VALID [2018-11-23 12:46:12,508 INFO L273 TraceCheckUtils]: 2: Hoare triple {157#true} assume true; {157#true} is VALID [2018-11-23 12:46:12,508 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {157#true} {157#true} #607#return; {157#true} is VALID [2018-11-23 12:46:12,508 INFO L256 TraceCheckUtils]: 4: Hoare triple {157#true} call #t~ret139 := main(); {157#true} is VALID [2018-11-23 12:46:12,509 INFO L273 TraceCheckUtils]: 5: Hoare triple {157#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {157#true} is VALID [2018-11-23 12:46:12,509 INFO L256 TraceCheckUtils]: 6: Hoare triple {157#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {157#true} is VALID [2018-11-23 12:46:12,525 INFO L273 TraceCheckUtils]: 7: Hoare triple {157#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:12,538 INFO L273 TraceCheckUtils]: 8: Hoare triple {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:12,555 INFO L273 TraceCheckUtils]: 9: Hoare triple {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:12,564 INFO L273 TraceCheckUtils]: 10: Hoare triple {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:12,578 INFO L273 TraceCheckUtils]: 11: Hoare triple {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:12,591 INFO L273 TraceCheckUtils]: 12: Hoare triple {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:12,604 INFO L273 TraceCheckUtils]: 13: Hoare triple {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !false; {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:12,617 INFO L273 TraceCheckUtils]: 14: Hoare triple {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:12,630 INFO L273 TraceCheckUtils]: 15: Hoare triple {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:12,643 INFO L273 TraceCheckUtils]: 16: Hoare triple {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:12,656 INFO L273 TraceCheckUtils]: 17: Hoare triple {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:12,669 INFO L273 TraceCheckUtils]: 18: Hoare triple {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:12,681 INFO L273 TraceCheckUtils]: 19: Hoare triple {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:12,683 INFO L273 TraceCheckUtils]: 20: Hoare triple {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:12,684 INFO L273 TraceCheckUtils]: 21: Hoare triple {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:12,686 INFO L273 TraceCheckUtils]: 22: Hoare triple {159#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {160#(= 8464 |ssl3_accept_#t~mem27|)} is VALID [2018-11-23 12:46:12,686 INFO L273 TraceCheckUtils]: 23: Hoare triple {160#(= 8464 |ssl3_accept_#t~mem27|)} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,687 INFO L273 TraceCheckUtils]: 24: Hoare triple {158#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,687 INFO L273 TraceCheckUtils]: 25: Hoare triple {158#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,688 INFO L273 TraceCheckUtils]: 26: Hoare triple {158#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,688 INFO L273 TraceCheckUtils]: 27: Hoare triple {158#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,688 INFO L273 TraceCheckUtils]: 28: Hoare triple {158#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,689 INFO L273 TraceCheckUtils]: 29: Hoare triple {158#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,689 INFO L273 TraceCheckUtils]: 30: Hoare triple {158#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,690 INFO L273 TraceCheckUtils]: 31: Hoare triple {158#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,690 INFO L273 TraceCheckUtils]: 32: Hoare triple {158#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,690 INFO L273 TraceCheckUtils]: 33: Hoare triple {158#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,691 INFO L273 TraceCheckUtils]: 34: Hoare triple {158#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,691 INFO L273 TraceCheckUtils]: 35: Hoare triple {158#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,692 INFO L273 TraceCheckUtils]: 36: Hoare triple {158#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,692 INFO L273 TraceCheckUtils]: 37: Hoare triple {158#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,692 INFO L273 TraceCheckUtils]: 38: Hoare triple {158#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,693 INFO L273 TraceCheckUtils]: 39: Hoare triple {158#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,693 INFO L273 TraceCheckUtils]: 40: Hoare triple {158#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,694 INFO L273 TraceCheckUtils]: 41: Hoare triple {158#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,694 INFO L273 TraceCheckUtils]: 42: Hoare triple {158#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,694 INFO L273 TraceCheckUtils]: 43: Hoare triple {158#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,695 INFO L273 TraceCheckUtils]: 44: Hoare triple {158#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,695 INFO L273 TraceCheckUtils]: 45: Hoare triple {158#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,696 INFO L273 TraceCheckUtils]: 46: Hoare triple {158#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {158#false} is VALID [2018-11-23 12:46:12,696 INFO L273 TraceCheckUtils]: 47: Hoare triple {158#false} assume 8672 == #t~mem51;havoc #t~mem51; {158#false} is VALID [2018-11-23 12:46:12,696 INFO L273 TraceCheckUtils]: 48: Hoare triple {158#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {158#false} is VALID [2018-11-23 12:46:12,698 INFO L273 TraceCheckUtils]: 49: Hoare triple {158#false} assume 4 == ~blastFlag~0; {158#false} is VALID [2018-11-23 12:46:12,698 INFO L273 TraceCheckUtils]: 50: Hoare triple {158#false} assume !false; {158#false} is VALID [2018-11-23 12:46:12,726 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:46:12,729 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:12,730 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:12,736 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 51 [2018-11-23 12:46:12,740 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:12,745 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:12,934 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:12,934 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:12,943 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:12,943 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:12,946 INFO L87 Difference]: Start difference. First operand 154 states. Second operand 4 states. [2018-11-23 12:46:15,023 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:15,023 INFO L93 Difference]: Finished difference Result 327 states and 541 transitions. [2018-11-23 12:46:15,023 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:15,024 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 51 [2018-11-23 12:46:15,024 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:15,026 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:15,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 541 transitions. [2018-11-23 12:46:15,049 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:15,061 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 541 transitions. [2018-11-23 12:46:15,061 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 541 transitions. [2018-11-23 12:46:16,170 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 541 edges. 541 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:16,200 INFO L225 Difference]: With dead ends: 327 [2018-11-23 12:46:16,200 INFO L226 Difference]: Without dead ends: 166 [2018-11-23 12:46:16,206 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:16,227 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2018-11-23 12:46:16,355 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 149. [2018-11-23 12:46:16,355 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:16,356 INFO L82 GeneralOperation]: Start isEquivalent. First operand 166 states. Second operand 149 states. [2018-11-23 12:46:16,356 INFO L74 IsIncluded]: Start isIncluded. First operand 166 states. Second operand 149 states. [2018-11-23 12:46:16,356 INFO L87 Difference]: Start difference. First operand 166 states. Second operand 149 states. [2018-11-23 12:46:16,367 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:16,367 INFO L93 Difference]: Finished difference Result 166 states and 246 transitions. [2018-11-23 12:46:16,367 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 246 transitions. [2018-11-23 12:46:16,369 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:16,369 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:16,370 INFO L74 IsIncluded]: Start isIncluded. First operand 149 states. Second operand 166 states. [2018-11-23 12:46:16,370 INFO L87 Difference]: Start difference. First operand 149 states. Second operand 166 states. [2018-11-23 12:46:16,379 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:16,380 INFO L93 Difference]: Finished difference Result 166 states and 246 transitions. [2018-11-23 12:46:16,380 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 246 transitions. [2018-11-23 12:46:16,382 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:16,382 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:16,382 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:16,382 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:16,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-23 12:46:16,389 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 225 transitions. [2018-11-23 12:46:16,391 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 225 transitions. Word has length 51 [2018-11-23 12:46:16,391 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:16,392 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 225 transitions. [2018-11-23 12:46:16,392 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:16,392 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 225 transitions. [2018-11-23 12:46:16,395 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2018-11-23 12:46:16,395 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:16,395 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:16,395 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:16,396 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:16,396 INFO L82 PathProgramCache]: Analyzing trace with hash -1997725402, now seen corresponding path program 1 times [2018-11-23 12:46:16,396 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:16,396 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:16,398 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:16,398 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:16,398 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:16,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:16,657 INFO L256 TraceCheckUtils]: 0: Hoare triple {1068#true} call ULTIMATE.init(); {1068#true} is VALID [2018-11-23 12:46:16,657 INFO L273 TraceCheckUtils]: 1: Hoare triple {1068#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {1068#true} is VALID [2018-11-23 12:46:16,658 INFO L273 TraceCheckUtils]: 2: Hoare triple {1068#true} assume true; {1068#true} is VALID [2018-11-23 12:46:16,658 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1068#true} {1068#true} #607#return; {1068#true} is VALID [2018-11-23 12:46:16,659 INFO L256 TraceCheckUtils]: 4: Hoare triple {1068#true} call #t~ret139 := main(); {1068#true} is VALID [2018-11-23 12:46:16,659 INFO L273 TraceCheckUtils]: 5: Hoare triple {1068#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {1068#true} is VALID [2018-11-23 12:46:16,659 INFO L256 TraceCheckUtils]: 6: Hoare triple {1068#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {1068#true} is VALID [2018-11-23 12:46:16,661 INFO L273 TraceCheckUtils]: 7: Hoare triple {1068#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:16,662 INFO L273 TraceCheckUtils]: 8: Hoare triple {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:16,664 INFO L273 TraceCheckUtils]: 9: Hoare triple {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:16,674 INFO L273 TraceCheckUtils]: 10: Hoare triple {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:16,677 INFO L273 TraceCheckUtils]: 11: Hoare triple {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:16,696 INFO L273 TraceCheckUtils]: 12: Hoare triple {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:16,712 INFO L273 TraceCheckUtils]: 13: Hoare triple {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:16,713 INFO L273 TraceCheckUtils]: 14: Hoare triple {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:16,713 INFO L273 TraceCheckUtils]: 15: Hoare triple {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:16,714 INFO L273 TraceCheckUtils]: 16: Hoare triple {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:16,714 INFO L273 TraceCheckUtils]: 17: Hoare triple {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:16,715 INFO L273 TraceCheckUtils]: 18: Hoare triple {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:16,726 INFO L273 TraceCheckUtils]: 19: Hoare triple {1070#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1071#(= |ssl3_accept_#t~mem24| 8464)} is VALID [2018-11-23 12:46:16,735 INFO L273 TraceCheckUtils]: 20: Hoare triple {1071#(= |ssl3_accept_#t~mem24| 8464)} assume 8480 == #t~mem24;havoc #t~mem24; {1069#false} is VALID [2018-11-23 12:46:16,736 INFO L273 TraceCheckUtils]: 21: Hoare triple {1069#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {1069#false} is VALID [2018-11-23 12:46:16,736 INFO L273 TraceCheckUtils]: 22: Hoare triple {1069#false} assume !(~ret~0 <= 0);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem65.base, 844 + #t~mem65.offset, 4);havoc #t~mem65.base, #t~mem65.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,737 INFO L273 TraceCheckUtils]: 23: Hoare triple {1069#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,737 INFO L273 TraceCheckUtils]: 24: Hoare triple {1069#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {1069#false} is VALID [2018-11-23 12:46:16,737 INFO L273 TraceCheckUtils]: 25: Hoare triple {1069#false} ~skip~0 := 0; {1069#false} is VALID [2018-11-23 12:46:16,737 INFO L273 TraceCheckUtils]: 26: Hoare triple {1069#false} assume !false; {1069#false} is VALID [2018-11-23 12:46:16,738 INFO L273 TraceCheckUtils]: 27: Hoare triple {1069#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,738 INFO L273 TraceCheckUtils]: 28: Hoare triple {1069#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,738 INFO L273 TraceCheckUtils]: 29: Hoare triple {1069#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,738 INFO L273 TraceCheckUtils]: 30: Hoare triple {1069#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,739 INFO L273 TraceCheckUtils]: 31: Hoare triple {1069#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,739 INFO L273 TraceCheckUtils]: 32: Hoare triple {1069#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,739 INFO L273 TraceCheckUtils]: 33: Hoare triple {1069#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,739 INFO L273 TraceCheckUtils]: 34: Hoare triple {1069#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,740 INFO L273 TraceCheckUtils]: 35: Hoare triple {1069#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,740 INFO L273 TraceCheckUtils]: 36: Hoare triple {1069#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,740 INFO L273 TraceCheckUtils]: 37: Hoare triple {1069#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,741 INFO L273 TraceCheckUtils]: 38: Hoare triple {1069#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,741 INFO L273 TraceCheckUtils]: 39: Hoare triple {1069#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,741 INFO L273 TraceCheckUtils]: 40: Hoare triple {1069#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,742 INFO L273 TraceCheckUtils]: 41: Hoare triple {1069#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,742 INFO L273 TraceCheckUtils]: 42: Hoare triple {1069#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,743 INFO L273 TraceCheckUtils]: 43: Hoare triple {1069#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,743 INFO L273 TraceCheckUtils]: 44: Hoare triple {1069#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,743 INFO L273 TraceCheckUtils]: 45: Hoare triple {1069#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,744 INFO L273 TraceCheckUtils]: 46: Hoare triple {1069#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,744 INFO L273 TraceCheckUtils]: 47: Hoare triple {1069#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,744 INFO L273 TraceCheckUtils]: 48: Hoare triple {1069#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,744 INFO L273 TraceCheckUtils]: 49: Hoare triple {1069#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,745 INFO L273 TraceCheckUtils]: 50: Hoare triple {1069#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,745 INFO L273 TraceCheckUtils]: 51: Hoare triple {1069#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,745 INFO L273 TraceCheckUtils]: 52: Hoare triple {1069#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,745 INFO L273 TraceCheckUtils]: 53: Hoare triple {1069#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,746 INFO L273 TraceCheckUtils]: 54: Hoare triple {1069#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,746 INFO L273 TraceCheckUtils]: 55: Hoare triple {1069#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,746 INFO L273 TraceCheckUtils]: 56: Hoare triple {1069#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,747 INFO L273 TraceCheckUtils]: 57: Hoare triple {1069#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,747 INFO L273 TraceCheckUtils]: 58: Hoare triple {1069#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,747 INFO L273 TraceCheckUtils]: 59: Hoare triple {1069#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {1069#false} is VALID [2018-11-23 12:46:16,747 INFO L273 TraceCheckUtils]: 60: Hoare triple {1069#false} assume 8672 == #t~mem51;havoc #t~mem51; {1069#false} is VALID [2018-11-23 12:46:16,748 INFO L273 TraceCheckUtils]: 61: Hoare triple {1069#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {1069#false} is VALID [2018-11-23 12:46:16,748 INFO L273 TraceCheckUtils]: 62: Hoare triple {1069#false} assume 4 == ~blastFlag~0; {1069#false} is VALID [2018-11-23 12:46:16,748 INFO L273 TraceCheckUtils]: 63: Hoare triple {1069#false} assume !false; {1069#false} is VALID [2018-11-23 12:46:16,759 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:46:16,760 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:16,760 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:16,762 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 64 [2018-11-23 12:46:16,762 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:16,763 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:16,866 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 64 edges. 64 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:16,867 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:16,867 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:16,867 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:16,868 INFO L87 Difference]: Start difference. First operand 149 states and 225 transitions. Second operand 4 states. [2018-11-23 12:46:18,328 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:18,328 INFO L93 Difference]: Finished difference Result 290 states and 435 transitions. [2018-11-23 12:46:18,328 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:18,329 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 64 [2018-11-23 12:46:18,329 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:18,329 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:18,335 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 435 transitions. [2018-11-23 12:46:18,336 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:18,341 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 435 transitions. [2018-11-23 12:46:18,341 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 435 transitions. [2018-11-23 12:46:18,963 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 435 edges. 435 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:18,974 INFO L225 Difference]: With dead ends: 290 [2018-11-23 12:46:18,974 INFO L226 Difference]: Without dead ends: 166 [2018-11-23 12:46:18,976 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:18,977 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2018-11-23 12:46:19,046 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 149. [2018-11-23 12:46:19,046 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:19,047 INFO L82 GeneralOperation]: Start isEquivalent. First operand 166 states. Second operand 149 states. [2018-11-23 12:46:19,047 INFO L74 IsIncluded]: Start isIncluded. First operand 166 states. Second operand 149 states. [2018-11-23 12:46:19,047 INFO L87 Difference]: Start difference. First operand 166 states. Second operand 149 states. [2018-11-23 12:46:19,055 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:19,055 INFO L93 Difference]: Finished difference Result 166 states and 245 transitions. [2018-11-23 12:46:19,055 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 245 transitions. [2018-11-23 12:46:19,056 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:19,057 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:19,057 INFO L74 IsIncluded]: Start isIncluded. First operand 149 states. Second operand 166 states. [2018-11-23 12:46:19,057 INFO L87 Difference]: Start difference. First operand 149 states. Second operand 166 states. [2018-11-23 12:46:19,064 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:19,064 INFO L93 Difference]: Finished difference Result 166 states and 245 transitions. [2018-11-23 12:46:19,064 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 245 transitions. [2018-11-23 12:46:19,065 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:19,066 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:19,066 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:19,066 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:19,066 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-23 12:46:19,072 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 224 transitions. [2018-11-23 12:46:19,072 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 224 transitions. Word has length 64 [2018-11-23 12:46:19,072 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:19,073 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 224 transitions. [2018-11-23 12:46:19,073 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:19,073 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 224 transitions. [2018-11-23 12:46:19,077 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2018-11-23 12:46:19,077 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:19,077 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:19,078 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:19,078 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:19,078 INFO L82 PathProgramCache]: Analyzing trace with hash -111586923, now seen corresponding path program 1 times [2018-11-23 12:46:19,078 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:19,079 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:19,080 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:19,080 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:19,081 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:19,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:19,376 INFO L256 TraceCheckUtils]: 0: Hoare triple {1935#true} call ULTIMATE.init(); {1935#true} is VALID [2018-11-23 12:46:19,377 INFO L273 TraceCheckUtils]: 1: Hoare triple {1935#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {1935#true} is VALID [2018-11-23 12:46:19,377 INFO L273 TraceCheckUtils]: 2: Hoare triple {1935#true} assume true; {1935#true} is VALID [2018-11-23 12:46:19,377 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1935#true} {1935#true} #607#return; {1935#true} is VALID [2018-11-23 12:46:19,377 INFO L256 TraceCheckUtils]: 4: Hoare triple {1935#true} call #t~ret139 := main(); {1935#true} is VALID [2018-11-23 12:46:19,378 INFO L273 TraceCheckUtils]: 5: Hoare triple {1935#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {1935#true} is VALID [2018-11-23 12:46:19,378 INFO L256 TraceCheckUtils]: 6: Hoare triple {1935#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {1935#true} is VALID [2018-11-23 12:46:19,392 INFO L273 TraceCheckUtils]: 7: Hoare triple {1935#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:19,393 INFO L273 TraceCheckUtils]: 8: Hoare triple {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:19,394 INFO L273 TraceCheckUtils]: 9: Hoare triple {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:19,395 INFO L273 TraceCheckUtils]: 10: Hoare triple {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:19,398 INFO L273 TraceCheckUtils]: 11: Hoare triple {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:19,400 INFO L273 TraceCheckUtils]: 12: Hoare triple {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:19,404 INFO L273 TraceCheckUtils]: 13: Hoare triple {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:19,404 INFO L273 TraceCheckUtils]: 14: Hoare triple {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:19,407 INFO L273 TraceCheckUtils]: 15: Hoare triple {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:19,407 INFO L273 TraceCheckUtils]: 16: Hoare triple {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:19,410 INFO L273 TraceCheckUtils]: 17: Hoare triple {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:19,410 INFO L273 TraceCheckUtils]: 18: Hoare triple {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:19,413 INFO L273 TraceCheckUtils]: 19: Hoare triple {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:19,413 INFO L273 TraceCheckUtils]: 20: Hoare triple {1937#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {1938#(= |ssl3_accept_#t~mem25| 8464)} is VALID [2018-11-23 12:46:19,415 INFO L273 TraceCheckUtils]: 21: Hoare triple {1938#(= |ssl3_accept_#t~mem25| 8464)} assume 8481 == #t~mem25;havoc #t~mem25; {1936#false} is VALID [2018-11-23 12:46:19,415 INFO L273 TraceCheckUtils]: 22: Hoare triple {1936#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {1936#false} is VALID [2018-11-23 12:46:19,415 INFO L273 TraceCheckUtils]: 23: Hoare triple {1936#false} assume !(~ret~0 <= 0);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem65.base, 844 + #t~mem65.offset, 4);havoc #t~mem65.base, #t~mem65.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,415 INFO L273 TraceCheckUtils]: 24: Hoare triple {1936#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,415 INFO L273 TraceCheckUtils]: 25: Hoare triple {1936#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {1936#false} is VALID [2018-11-23 12:46:19,416 INFO L273 TraceCheckUtils]: 26: Hoare triple {1936#false} ~skip~0 := 0; {1936#false} is VALID [2018-11-23 12:46:19,416 INFO L273 TraceCheckUtils]: 27: Hoare triple {1936#false} assume !false; {1936#false} is VALID [2018-11-23 12:46:19,416 INFO L273 TraceCheckUtils]: 28: Hoare triple {1936#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,416 INFO L273 TraceCheckUtils]: 29: Hoare triple {1936#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,416 INFO L273 TraceCheckUtils]: 30: Hoare triple {1936#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,417 INFO L273 TraceCheckUtils]: 31: Hoare triple {1936#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,417 INFO L273 TraceCheckUtils]: 32: Hoare triple {1936#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,417 INFO L273 TraceCheckUtils]: 33: Hoare triple {1936#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,417 INFO L273 TraceCheckUtils]: 34: Hoare triple {1936#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,417 INFO L273 TraceCheckUtils]: 35: Hoare triple {1936#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,417 INFO L273 TraceCheckUtils]: 36: Hoare triple {1936#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,418 INFO L273 TraceCheckUtils]: 37: Hoare triple {1936#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,418 INFO L273 TraceCheckUtils]: 38: Hoare triple {1936#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,418 INFO L273 TraceCheckUtils]: 39: Hoare triple {1936#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,418 INFO L273 TraceCheckUtils]: 40: Hoare triple {1936#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,418 INFO L273 TraceCheckUtils]: 41: Hoare triple {1936#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,418 INFO L273 TraceCheckUtils]: 42: Hoare triple {1936#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,419 INFO L273 TraceCheckUtils]: 43: Hoare triple {1936#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,419 INFO L273 TraceCheckUtils]: 44: Hoare triple {1936#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,419 INFO L273 TraceCheckUtils]: 45: Hoare triple {1936#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,419 INFO L273 TraceCheckUtils]: 46: Hoare triple {1936#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,419 INFO L273 TraceCheckUtils]: 47: Hoare triple {1936#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,420 INFO L273 TraceCheckUtils]: 48: Hoare triple {1936#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,420 INFO L273 TraceCheckUtils]: 49: Hoare triple {1936#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,420 INFO L273 TraceCheckUtils]: 50: Hoare triple {1936#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,420 INFO L273 TraceCheckUtils]: 51: Hoare triple {1936#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,420 INFO L273 TraceCheckUtils]: 52: Hoare triple {1936#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,420 INFO L273 TraceCheckUtils]: 53: Hoare triple {1936#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,421 INFO L273 TraceCheckUtils]: 54: Hoare triple {1936#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,421 INFO L273 TraceCheckUtils]: 55: Hoare triple {1936#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,421 INFO L273 TraceCheckUtils]: 56: Hoare triple {1936#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,421 INFO L273 TraceCheckUtils]: 57: Hoare triple {1936#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,421 INFO L273 TraceCheckUtils]: 58: Hoare triple {1936#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,421 INFO L273 TraceCheckUtils]: 59: Hoare triple {1936#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,422 INFO L273 TraceCheckUtils]: 60: Hoare triple {1936#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {1936#false} is VALID [2018-11-23 12:46:19,422 INFO L273 TraceCheckUtils]: 61: Hoare triple {1936#false} assume 8672 == #t~mem51;havoc #t~mem51; {1936#false} is VALID [2018-11-23 12:46:19,422 INFO L273 TraceCheckUtils]: 62: Hoare triple {1936#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {1936#false} is VALID [2018-11-23 12:46:19,422 INFO L273 TraceCheckUtils]: 63: Hoare triple {1936#false} assume 4 == ~blastFlag~0; {1936#false} is VALID [2018-11-23 12:46:19,422 INFO L273 TraceCheckUtils]: 64: Hoare triple {1936#false} assume !false; {1936#false} is VALID [2018-11-23 12:46:19,429 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:46:19,429 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:19,430 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:19,430 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 65 [2018-11-23 12:46:19,430 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:19,431 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:19,545 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 65 edges. 65 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:19,545 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:19,545 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:19,546 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:19,546 INFO L87 Difference]: Start difference. First operand 149 states and 224 transitions. Second operand 4 states. [2018-11-23 12:46:20,507 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:20,507 INFO L93 Difference]: Finished difference Result 288 states and 432 transitions. [2018-11-23 12:46:20,507 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:20,507 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 65 [2018-11-23 12:46:20,508 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:20,508 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:20,513 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 432 transitions. [2018-11-23 12:46:20,513 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:20,518 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 432 transitions. [2018-11-23 12:46:20,518 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 432 transitions. [2018-11-23 12:46:21,142 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 432 edges. 432 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:21,147 INFO L225 Difference]: With dead ends: 288 [2018-11-23 12:46:21,147 INFO L226 Difference]: Without dead ends: 164 [2018-11-23 12:46:21,148 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:21,149 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 164 states. [2018-11-23 12:46:21,214 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 164 to 149. [2018-11-23 12:46:21,214 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:21,214 INFO L82 GeneralOperation]: Start isEquivalent. First operand 164 states. Second operand 149 states. [2018-11-23 12:46:21,215 INFO L74 IsIncluded]: Start isIncluded. First operand 164 states. Second operand 149 states. [2018-11-23 12:46:21,215 INFO L87 Difference]: Start difference. First operand 164 states. Second operand 149 states. [2018-11-23 12:46:21,221 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:21,221 INFO L93 Difference]: Finished difference Result 164 states and 242 transitions. [2018-11-23 12:46:21,221 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 242 transitions. [2018-11-23 12:46:21,222 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:21,222 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:21,222 INFO L74 IsIncluded]: Start isIncluded. First operand 149 states. Second operand 164 states. [2018-11-23 12:46:21,222 INFO L87 Difference]: Start difference. First operand 149 states. Second operand 164 states. [2018-11-23 12:46:21,229 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:21,229 INFO L93 Difference]: Finished difference Result 164 states and 242 transitions. [2018-11-23 12:46:21,229 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 242 transitions. [2018-11-23 12:46:21,230 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:21,230 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:21,230 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:21,230 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:21,230 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-23 12:46:21,235 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 223 transitions. [2018-11-23 12:46:21,236 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 223 transitions. Word has length 65 [2018-11-23 12:46:21,236 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:21,236 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 223 transitions. [2018-11-23 12:46:21,236 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:21,236 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 223 transitions. [2018-11-23 12:46:21,237 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2018-11-23 12:46:21,237 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:21,238 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:21,238 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:21,238 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:21,238 INFO L82 PathProgramCache]: Analyzing trace with hash -1405721958, now seen corresponding path program 1 times [2018-11-23 12:46:21,239 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:21,239 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:21,240 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:21,241 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:21,241 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:21,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:21,440 INFO L256 TraceCheckUtils]: 0: Hoare triple {2795#true} call ULTIMATE.init(); {2795#true} is VALID [2018-11-23 12:46:21,440 INFO L273 TraceCheckUtils]: 1: Hoare triple {2795#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {2795#true} is VALID [2018-11-23 12:46:21,441 INFO L273 TraceCheckUtils]: 2: Hoare triple {2795#true} assume true; {2795#true} is VALID [2018-11-23 12:46:21,441 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {2795#true} {2795#true} #607#return; {2795#true} is VALID [2018-11-23 12:46:21,441 INFO L256 TraceCheckUtils]: 4: Hoare triple {2795#true} call #t~ret139 := main(); {2795#true} is VALID [2018-11-23 12:46:21,442 INFO L273 TraceCheckUtils]: 5: Hoare triple {2795#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {2795#true} is VALID [2018-11-23 12:46:21,442 INFO L256 TraceCheckUtils]: 6: Hoare triple {2795#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {2795#true} is VALID [2018-11-23 12:46:21,444 INFO L273 TraceCheckUtils]: 7: Hoare triple {2795#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:21,454 INFO L273 TraceCheckUtils]: 8: Hoare triple {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:21,456 INFO L273 TraceCheckUtils]: 9: Hoare triple {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:21,461 INFO L273 TraceCheckUtils]: 10: Hoare triple {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:21,461 INFO L273 TraceCheckUtils]: 11: Hoare triple {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:21,464 INFO L273 TraceCheckUtils]: 12: Hoare triple {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:21,464 INFO L273 TraceCheckUtils]: 13: Hoare triple {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:21,464 INFO L273 TraceCheckUtils]: 14: Hoare triple {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:21,465 INFO L273 TraceCheckUtils]: 15: Hoare triple {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:21,465 INFO L273 TraceCheckUtils]: 16: Hoare triple {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:21,466 INFO L273 TraceCheckUtils]: 17: Hoare triple {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:21,466 INFO L273 TraceCheckUtils]: 18: Hoare triple {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:21,466 INFO L273 TraceCheckUtils]: 19: Hoare triple {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:21,467 INFO L273 TraceCheckUtils]: 20: Hoare triple {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:21,467 INFO L273 TraceCheckUtils]: 21: Hoare triple {2797#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {2798#(= |ssl3_accept_#t~mem26| 8464)} is VALID [2018-11-23 12:46:21,468 INFO L273 TraceCheckUtils]: 22: Hoare triple {2798#(= |ssl3_accept_#t~mem26| 8464)} assume 8482 == #t~mem26;havoc #t~mem26; {2796#false} is VALID [2018-11-23 12:46:21,468 INFO L273 TraceCheckUtils]: 23: Hoare triple {2796#false} call write~int(3, ~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,469 INFO L273 TraceCheckUtils]: 24: Hoare triple {2796#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,469 INFO L273 TraceCheckUtils]: 25: Hoare triple {2796#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {2796#false} is VALID [2018-11-23 12:46:21,469 INFO L273 TraceCheckUtils]: 26: Hoare triple {2796#false} ~skip~0 := 0; {2796#false} is VALID [2018-11-23 12:46:21,470 INFO L273 TraceCheckUtils]: 27: Hoare triple {2796#false} assume !false; {2796#false} is VALID [2018-11-23 12:46:21,470 INFO L273 TraceCheckUtils]: 28: Hoare triple {2796#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,470 INFO L273 TraceCheckUtils]: 29: Hoare triple {2796#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,471 INFO L273 TraceCheckUtils]: 30: Hoare triple {2796#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,471 INFO L273 TraceCheckUtils]: 31: Hoare triple {2796#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,471 INFO L273 TraceCheckUtils]: 32: Hoare triple {2796#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,471 INFO L273 TraceCheckUtils]: 33: Hoare triple {2796#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,472 INFO L273 TraceCheckUtils]: 34: Hoare triple {2796#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,472 INFO L273 TraceCheckUtils]: 35: Hoare triple {2796#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,472 INFO L273 TraceCheckUtils]: 36: Hoare triple {2796#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,472 INFO L273 TraceCheckUtils]: 37: Hoare triple {2796#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,473 INFO L273 TraceCheckUtils]: 38: Hoare triple {2796#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,473 INFO L273 TraceCheckUtils]: 39: Hoare triple {2796#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,473 INFO L273 TraceCheckUtils]: 40: Hoare triple {2796#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,473 INFO L273 TraceCheckUtils]: 41: Hoare triple {2796#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,474 INFO L273 TraceCheckUtils]: 42: Hoare triple {2796#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,474 INFO L273 TraceCheckUtils]: 43: Hoare triple {2796#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,474 INFO L273 TraceCheckUtils]: 44: Hoare triple {2796#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,474 INFO L273 TraceCheckUtils]: 45: Hoare triple {2796#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,474 INFO L273 TraceCheckUtils]: 46: Hoare triple {2796#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,475 INFO L273 TraceCheckUtils]: 47: Hoare triple {2796#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,475 INFO L273 TraceCheckUtils]: 48: Hoare triple {2796#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,475 INFO L273 TraceCheckUtils]: 49: Hoare triple {2796#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,475 INFO L273 TraceCheckUtils]: 50: Hoare triple {2796#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,476 INFO L273 TraceCheckUtils]: 51: Hoare triple {2796#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,476 INFO L273 TraceCheckUtils]: 52: Hoare triple {2796#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,476 INFO L273 TraceCheckUtils]: 53: Hoare triple {2796#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,476 INFO L273 TraceCheckUtils]: 54: Hoare triple {2796#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,477 INFO L273 TraceCheckUtils]: 55: Hoare triple {2796#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,477 INFO L273 TraceCheckUtils]: 56: Hoare triple {2796#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,477 INFO L273 TraceCheckUtils]: 57: Hoare triple {2796#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,477 INFO L273 TraceCheckUtils]: 58: Hoare triple {2796#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,478 INFO L273 TraceCheckUtils]: 59: Hoare triple {2796#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,478 INFO L273 TraceCheckUtils]: 60: Hoare triple {2796#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {2796#false} is VALID [2018-11-23 12:46:21,478 INFO L273 TraceCheckUtils]: 61: Hoare triple {2796#false} assume 8672 == #t~mem51;havoc #t~mem51; {2796#false} is VALID [2018-11-23 12:46:21,478 INFO L273 TraceCheckUtils]: 62: Hoare triple {2796#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {2796#false} is VALID [2018-11-23 12:46:21,479 INFO L273 TraceCheckUtils]: 63: Hoare triple {2796#false} assume 4 == ~blastFlag~0; {2796#false} is VALID [2018-11-23 12:46:21,479 INFO L273 TraceCheckUtils]: 64: Hoare triple {2796#false} assume !false; {2796#false} is VALID [2018-11-23 12:46:21,485 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:46:21,485 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:21,485 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:21,486 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 65 [2018-11-23 12:46:21,486 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:21,486 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:21,560 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 65 edges. 65 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:21,561 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:21,561 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:21,561 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:21,562 INFO L87 Difference]: Start difference. First operand 149 states and 223 transitions. Second operand 4 states. [2018-11-23 12:46:22,718 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:22,719 INFO L93 Difference]: Finished difference Result 287 states and 430 transitions. [2018-11-23 12:46:22,719 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:22,719 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 65 [2018-11-23 12:46:22,719 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:22,720 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:22,725 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 430 transitions. [2018-11-23 12:46:22,725 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:22,730 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 430 transitions. [2018-11-23 12:46:22,730 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 430 transitions. [2018-11-23 12:46:23,409 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 430 edges. 430 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:23,413 INFO L225 Difference]: With dead ends: 287 [2018-11-23 12:46:23,413 INFO L226 Difference]: Without dead ends: 163 [2018-11-23 12:46:23,414 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:23,415 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 163 states. [2018-11-23 12:46:23,693 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 163 to 149. [2018-11-23 12:46:23,693 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:23,693 INFO L82 GeneralOperation]: Start isEquivalent. First operand 163 states. Second operand 149 states. [2018-11-23 12:46:23,693 INFO L74 IsIncluded]: Start isIncluded. First operand 163 states. Second operand 149 states. [2018-11-23 12:46:23,693 INFO L87 Difference]: Start difference. First operand 163 states. Second operand 149 states. [2018-11-23 12:46:23,700 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:23,701 INFO L93 Difference]: Finished difference Result 163 states and 240 transitions. [2018-11-23 12:46:23,701 INFO L276 IsEmpty]: Start isEmpty. Operand 163 states and 240 transitions. [2018-11-23 12:46:23,701 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:23,702 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:23,702 INFO L74 IsIncluded]: Start isIncluded. First operand 149 states. Second operand 163 states. [2018-11-23 12:46:23,702 INFO L87 Difference]: Start difference. First operand 149 states. Second operand 163 states. [2018-11-23 12:46:23,707 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:23,708 INFO L93 Difference]: Finished difference Result 163 states and 240 transitions. [2018-11-23 12:46:23,708 INFO L276 IsEmpty]: Start isEmpty. Operand 163 states and 240 transitions. [2018-11-23 12:46:23,708 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:23,708 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:23,709 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:23,709 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:23,709 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-23 12:46:23,714 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 222 transitions. [2018-11-23 12:46:23,714 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 222 transitions. Word has length 65 [2018-11-23 12:46:23,714 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:23,715 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 222 transitions. [2018-11-23 12:46:23,715 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:23,715 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 222 transitions. [2018-11-23 12:46:23,716 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2018-11-23 12:46:23,716 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:23,716 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:23,716 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:23,717 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:23,717 INFO L82 PathProgramCache]: Analyzing trace with hash 68242562, now seen corresponding path program 1 times [2018-11-23 12:46:23,717 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:23,717 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:23,718 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:23,719 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:23,719 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:23,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:24,336 INFO L256 TraceCheckUtils]: 0: Hoare triple {3651#true} call ULTIMATE.init(); {3651#true} is VALID [2018-11-23 12:46:24,337 INFO L273 TraceCheckUtils]: 1: Hoare triple {3651#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {3651#true} is VALID [2018-11-23 12:46:24,337 INFO L273 TraceCheckUtils]: 2: Hoare triple {3651#true} assume true; {3651#true} is VALID [2018-11-23 12:46:24,337 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {3651#true} {3651#true} #607#return; {3651#true} is VALID [2018-11-23 12:46:24,338 INFO L256 TraceCheckUtils]: 4: Hoare triple {3651#true} call #t~ret139 := main(); {3651#true} is VALID [2018-11-23 12:46:24,338 INFO L273 TraceCheckUtils]: 5: Hoare triple {3651#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {3651#true} is VALID [2018-11-23 12:46:24,338 INFO L256 TraceCheckUtils]: 6: Hoare triple {3651#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {3651#true} is VALID [2018-11-23 12:46:24,341 INFO L273 TraceCheckUtils]: 7: Hoare triple {3651#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {3653#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:24,346 INFO L273 TraceCheckUtils]: 8: Hoare triple {3653#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {3653#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:24,349 INFO L273 TraceCheckUtils]: 9: Hoare triple {3653#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {3653#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:24,353 INFO L273 TraceCheckUtils]: 10: Hoare triple {3653#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {3653#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:24,356 INFO L273 TraceCheckUtils]: 11: Hoare triple {3653#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {3653#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:24,356 INFO L273 TraceCheckUtils]: 12: Hoare triple {3653#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {3653#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:24,359 INFO L273 TraceCheckUtils]: 13: Hoare triple {3653#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {3653#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:24,359 INFO L273 TraceCheckUtils]: 14: Hoare triple {3653#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {3653#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:24,360 INFO L273 TraceCheckUtils]: 15: Hoare triple {3653#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {3654#(= |ssl3_accept_#t~mem20| 8464)} is VALID [2018-11-23 12:46:24,363 INFO L273 TraceCheckUtils]: 16: Hoare triple {3654#(= |ssl3_accept_#t~mem20| 8464)} assume 16384 == #t~mem20;havoc #t~mem20; {3652#false} is VALID [2018-11-23 12:46:24,363 INFO L273 TraceCheckUtils]: 17: Hoare triple {3652#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,363 INFO L273 TraceCheckUtils]: 18: Hoare triple {3652#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {3652#false} is VALID [2018-11-23 12:46:24,363 INFO L273 TraceCheckUtils]: 19: Hoare triple {3652#false} call #t~mem54 := read~int(~s.base, ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,364 INFO L273 TraceCheckUtils]: 20: Hoare triple {3652#false} assume !(3 != #t~mem54 / 256);havoc #t~mem54;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,364 INFO L273 TraceCheckUtils]: 21: Hoare triple {3652#false} assume !(0 == (#t~mem55.base + #t~mem55.offset) % 4294967296);havoc #t~mem55.base, #t~mem55.offset; {3652#false} is VALID [2018-11-23 12:46:24,364 INFO L273 TraceCheckUtils]: 22: Hoare triple {3652#false} assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~tmp___4~0 := #t~nondet57;havoc #t~nondet57; {3652#false} is VALID [2018-11-23 12:46:24,364 INFO L273 TraceCheckUtils]: 23: Hoare triple {3652#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem58 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,364 INFO L273 TraceCheckUtils]: 24: Hoare triple {3652#false} assume !(12292 != #t~mem58);havoc #t~mem58;call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem63 := read~int(#t~mem62.base, 76 + #t~mem62.offset, 4);call write~int(1 + #t~mem63, #t~mem62.base, 76 + #t~mem62.offset, 4);havoc #t~mem63;havoc #t~mem62.base, #t~mem62.offset;call write~int(8480, ~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,364 INFO L273 TraceCheckUtils]: 25: Hoare triple {3652#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,365 INFO L273 TraceCheckUtils]: 26: Hoare triple {3652#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {3652#false} is VALID [2018-11-23 12:46:24,365 INFO L273 TraceCheckUtils]: 27: Hoare triple {3652#false} ~skip~0 := 0; {3652#false} is VALID [2018-11-23 12:46:24,365 INFO L273 TraceCheckUtils]: 28: Hoare triple {3652#false} assume !false; {3652#false} is VALID [2018-11-23 12:46:24,365 INFO L273 TraceCheckUtils]: 29: Hoare triple {3652#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,365 INFO L273 TraceCheckUtils]: 30: Hoare triple {3652#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,366 INFO L273 TraceCheckUtils]: 31: Hoare triple {3652#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,366 INFO L273 TraceCheckUtils]: 32: Hoare triple {3652#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,366 INFO L273 TraceCheckUtils]: 33: Hoare triple {3652#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,366 INFO L273 TraceCheckUtils]: 34: Hoare triple {3652#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,367 INFO L273 TraceCheckUtils]: 35: Hoare triple {3652#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,367 INFO L273 TraceCheckUtils]: 36: Hoare triple {3652#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,367 INFO L273 TraceCheckUtils]: 37: Hoare triple {3652#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,367 INFO L273 TraceCheckUtils]: 38: Hoare triple {3652#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,367 INFO L273 TraceCheckUtils]: 39: Hoare triple {3652#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,368 INFO L273 TraceCheckUtils]: 40: Hoare triple {3652#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,368 INFO L273 TraceCheckUtils]: 41: Hoare triple {3652#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,368 INFO L273 TraceCheckUtils]: 42: Hoare triple {3652#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,368 INFO L273 TraceCheckUtils]: 43: Hoare triple {3652#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,368 INFO L273 TraceCheckUtils]: 44: Hoare triple {3652#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,369 INFO L273 TraceCheckUtils]: 45: Hoare triple {3652#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,369 INFO L273 TraceCheckUtils]: 46: Hoare triple {3652#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,369 INFO L273 TraceCheckUtils]: 47: Hoare triple {3652#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,369 INFO L273 TraceCheckUtils]: 48: Hoare triple {3652#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,370 INFO L273 TraceCheckUtils]: 49: Hoare triple {3652#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,370 INFO L273 TraceCheckUtils]: 50: Hoare triple {3652#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,370 INFO L273 TraceCheckUtils]: 51: Hoare triple {3652#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,370 INFO L273 TraceCheckUtils]: 52: Hoare triple {3652#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,370 INFO L273 TraceCheckUtils]: 53: Hoare triple {3652#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,371 INFO L273 TraceCheckUtils]: 54: Hoare triple {3652#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,371 INFO L273 TraceCheckUtils]: 55: Hoare triple {3652#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,371 INFO L273 TraceCheckUtils]: 56: Hoare triple {3652#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,371 INFO L273 TraceCheckUtils]: 57: Hoare triple {3652#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,372 INFO L273 TraceCheckUtils]: 58: Hoare triple {3652#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,372 INFO L273 TraceCheckUtils]: 59: Hoare triple {3652#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,372 INFO L273 TraceCheckUtils]: 60: Hoare triple {3652#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,372 INFO L273 TraceCheckUtils]: 61: Hoare triple {3652#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {3652#false} is VALID [2018-11-23 12:46:24,372 INFO L273 TraceCheckUtils]: 62: Hoare triple {3652#false} assume 8672 == #t~mem51;havoc #t~mem51; {3652#false} is VALID [2018-11-23 12:46:24,373 INFO L273 TraceCheckUtils]: 63: Hoare triple {3652#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {3652#false} is VALID [2018-11-23 12:46:24,373 INFO L273 TraceCheckUtils]: 64: Hoare triple {3652#false} assume 4 == ~blastFlag~0; {3652#false} is VALID [2018-11-23 12:46:24,373 INFO L273 TraceCheckUtils]: 65: Hoare triple {3652#false} assume !false; {3652#false} is VALID [2018-11-23 12:46:24,380 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:46:24,380 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:24,380 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:24,381 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 66 [2018-11-23 12:46:24,381 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:24,382 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:24,494 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 66 edges. 66 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:24,494 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:24,495 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:24,495 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:24,495 INFO L87 Difference]: Start difference. First operand 149 states and 222 transitions. Second operand 4 states. [2018-11-23 12:46:25,735 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:25,735 INFO L93 Difference]: Finished difference Result 287 states and 429 transitions. [2018-11-23 12:46:25,735 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:25,735 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 66 [2018-11-23 12:46:25,735 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:25,736 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:25,744 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 429 transitions. [2018-11-23 12:46:25,745 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:25,749 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 429 transitions. [2018-11-23 12:46:25,750 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 429 transitions. [2018-11-23 12:46:26,261 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 429 edges. 429 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:26,265 INFO L225 Difference]: With dead ends: 287 [2018-11-23 12:46:26,266 INFO L226 Difference]: Without dead ends: 163 [2018-11-23 12:46:26,266 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:26,267 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 163 states. [2018-11-23 12:46:26,290 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 163 to 149. [2018-11-23 12:46:26,290 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:26,291 INFO L82 GeneralOperation]: Start isEquivalent. First operand 163 states. Second operand 149 states. [2018-11-23 12:46:26,291 INFO L74 IsIncluded]: Start isIncluded. First operand 163 states. Second operand 149 states. [2018-11-23 12:46:26,291 INFO L87 Difference]: Start difference. First operand 163 states. Second operand 149 states. [2018-11-23 12:46:26,297 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:26,297 INFO L93 Difference]: Finished difference Result 163 states and 239 transitions. [2018-11-23 12:46:26,298 INFO L276 IsEmpty]: Start isEmpty. Operand 163 states and 239 transitions. [2018-11-23 12:46:26,298 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:26,298 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:26,298 INFO L74 IsIncluded]: Start isIncluded. First operand 149 states. Second operand 163 states. [2018-11-23 12:46:26,299 INFO L87 Difference]: Start difference. First operand 149 states. Second operand 163 states. [2018-11-23 12:46:26,302 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:26,303 INFO L93 Difference]: Finished difference Result 163 states and 239 transitions. [2018-11-23 12:46:26,303 INFO L276 IsEmpty]: Start isEmpty. Operand 163 states and 239 transitions. [2018-11-23 12:46:26,303 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:26,304 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:26,304 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:26,304 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:26,304 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-23 12:46:26,307 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 221 transitions. [2018-11-23 12:46:26,308 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 221 transitions. Word has length 66 [2018-11-23 12:46:26,308 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:26,308 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 221 transitions. [2018-11-23 12:46:26,308 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:26,308 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 221 transitions. [2018-11-23 12:46:26,309 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2018-11-23 12:46:26,309 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:26,309 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:26,309 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:26,310 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:26,310 INFO L82 PathProgramCache]: Analyzing trace with hash -140287594, now seen corresponding path program 1 times [2018-11-23 12:46:26,310 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:26,310 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:26,312 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:26,312 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:26,312 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:26,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:26,664 INFO L256 TraceCheckUtils]: 0: Hoare triple {4507#true} call ULTIMATE.init(); {4507#true} is VALID [2018-11-23 12:46:26,665 INFO L273 TraceCheckUtils]: 1: Hoare triple {4507#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {4507#true} is VALID [2018-11-23 12:46:26,665 INFO L273 TraceCheckUtils]: 2: Hoare triple {4507#true} assume true; {4507#true} is VALID [2018-11-23 12:46:26,666 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {4507#true} {4507#true} #607#return; {4507#true} is VALID [2018-11-23 12:46:26,666 INFO L256 TraceCheckUtils]: 4: Hoare triple {4507#true} call #t~ret139 := main(); {4507#true} is VALID [2018-11-23 12:46:26,666 INFO L273 TraceCheckUtils]: 5: Hoare triple {4507#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {4507#true} is VALID [2018-11-23 12:46:26,667 INFO L256 TraceCheckUtils]: 6: Hoare triple {4507#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {4507#true} is VALID [2018-11-23 12:46:26,669 INFO L273 TraceCheckUtils]: 7: Hoare triple {4507#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {4509#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:26,670 INFO L273 TraceCheckUtils]: 8: Hoare triple {4509#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {4509#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:26,671 INFO L273 TraceCheckUtils]: 9: Hoare triple {4509#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {4509#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:26,672 INFO L273 TraceCheckUtils]: 10: Hoare triple {4509#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {4509#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:26,672 INFO L273 TraceCheckUtils]: 11: Hoare triple {4509#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {4509#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:26,673 INFO L273 TraceCheckUtils]: 12: Hoare triple {4509#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {4509#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:26,673 INFO L273 TraceCheckUtils]: 13: Hoare triple {4509#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {4509#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:26,674 INFO L273 TraceCheckUtils]: 14: Hoare triple {4509#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {4510#(= |ssl3_accept_#t~mem19| 8464)} is VALID [2018-11-23 12:46:26,675 INFO L273 TraceCheckUtils]: 15: Hoare triple {4510#(= |ssl3_accept_#t~mem19| 8464)} assume 12292 == #t~mem19;havoc #t~mem19; {4508#false} is VALID [2018-11-23 12:46:26,675 INFO L273 TraceCheckUtils]: 16: Hoare triple {4508#false} call write~int(1, ~s.base, 40 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,676 INFO L273 TraceCheckUtils]: 17: Hoare triple {4508#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,676 INFO L273 TraceCheckUtils]: 18: Hoare triple {4508#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {4508#false} is VALID [2018-11-23 12:46:26,676 INFO L273 TraceCheckUtils]: 19: Hoare triple {4508#false} call #t~mem54 := read~int(~s.base, ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,677 INFO L273 TraceCheckUtils]: 20: Hoare triple {4508#false} assume !(3 != #t~mem54 / 256);havoc #t~mem54;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,677 INFO L273 TraceCheckUtils]: 21: Hoare triple {4508#false} assume !(0 == (#t~mem55.base + #t~mem55.offset) % 4294967296);havoc #t~mem55.base, #t~mem55.offset; {4508#false} is VALID [2018-11-23 12:46:26,677 INFO L273 TraceCheckUtils]: 22: Hoare triple {4508#false} assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~tmp___4~0 := #t~nondet57;havoc #t~nondet57; {4508#false} is VALID [2018-11-23 12:46:26,677 INFO L273 TraceCheckUtils]: 23: Hoare triple {4508#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem58 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,678 INFO L273 TraceCheckUtils]: 24: Hoare triple {4508#false} assume !(12292 != #t~mem58);havoc #t~mem58;call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem63 := read~int(#t~mem62.base, 76 + #t~mem62.offset, 4);call write~int(1 + #t~mem63, #t~mem62.base, 76 + #t~mem62.offset, 4);havoc #t~mem63;havoc #t~mem62.base, #t~mem62.offset;call write~int(8480, ~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,678 INFO L273 TraceCheckUtils]: 25: Hoare triple {4508#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,678 INFO L273 TraceCheckUtils]: 26: Hoare triple {4508#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {4508#false} is VALID [2018-11-23 12:46:26,678 INFO L273 TraceCheckUtils]: 27: Hoare triple {4508#false} ~skip~0 := 0; {4508#false} is VALID [2018-11-23 12:46:26,678 INFO L273 TraceCheckUtils]: 28: Hoare triple {4508#false} assume !false; {4508#false} is VALID [2018-11-23 12:46:26,678 INFO L273 TraceCheckUtils]: 29: Hoare triple {4508#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,678 INFO L273 TraceCheckUtils]: 30: Hoare triple {4508#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,679 INFO L273 TraceCheckUtils]: 31: Hoare triple {4508#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,679 INFO L273 TraceCheckUtils]: 32: Hoare triple {4508#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,679 INFO L273 TraceCheckUtils]: 33: Hoare triple {4508#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,679 INFO L273 TraceCheckUtils]: 34: Hoare triple {4508#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,679 INFO L273 TraceCheckUtils]: 35: Hoare triple {4508#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,679 INFO L273 TraceCheckUtils]: 36: Hoare triple {4508#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,679 INFO L273 TraceCheckUtils]: 37: Hoare triple {4508#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,680 INFO L273 TraceCheckUtils]: 38: Hoare triple {4508#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,680 INFO L273 TraceCheckUtils]: 39: Hoare triple {4508#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,680 INFO L273 TraceCheckUtils]: 40: Hoare triple {4508#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,680 INFO L273 TraceCheckUtils]: 41: Hoare triple {4508#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,680 INFO L273 TraceCheckUtils]: 42: Hoare triple {4508#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,680 INFO L273 TraceCheckUtils]: 43: Hoare triple {4508#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,680 INFO L273 TraceCheckUtils]: 44: Hoare triple {4508#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,681 INFO L273 TraceCheckUtils]: 45: Hoare triple {4508#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,681 INFO L273 TraceCheckUtils]: 46: Hoare triple {4508#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,681 INFO L273 TraceCheckUtils]: 47: Hoare triple {4508#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,681 INFO L273 TraceCheckUtils]: 48: Hoare triple {4508#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,681 INFO L273 TraceCheckUtils]: 49: Hoare triple {4508#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,681 INFO L273 TraceCheckUtils]: 50: Hoare triple {4508#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,682 INFO L273 TraceCheckUtils]: 51: Hoare triple {4508#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,682 INFO L273 TraceCheckUtils]: 52: Hoare triple {4508#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,682 INFO L273 TraceCheckUtils]: 53: Hoare triple {4508#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,682 INFO L273 TraceCheckUtils]: 54: Hoare triple {4508#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,682 INFO L273 TraceCheckUtils]: 55: Hoare triple {4508#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,683 INFO L273 TraceCheckUtils]: 56: Hoare triple {4508#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,683 INFO L273 TraceCheckUtils]: 57: Hoare triple {4508#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,683 INFO L273 TraceCheckUtils]: 58: Hoare triple {4508#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,683 INFO L273 TraceCheckUtils]: 59: Hoare triple {4508#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,683 INFO L273 TraceCheckUtils]: 60: Hoare triple {4508#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,684 INFO L273 TraceCheckUtils]: 61: Hoare triple {4508#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {4508#false} is VALID [2018-11-23 12:46:26,684 INFO L273 TraceCheckUtils]: 62: Hoare triple {4508#false} assume 8672 == #t~mem51;havoc #t~mem51; {4508#false} is VALID [2018-11-23 12:46:26,684 INFO L273 TraceCheckUtils]: 63: Hoare triple {4508#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {4508#false} is VALID [2018-11-23 12:46:26,684 INFO L273 TraceCheckUtils]: 64: Hoare triple {4508#false} assume 4 == ~blastFlag~0; {4508#false} is VALID [2018-11-23 12:46:26,684 INFO L273 TraceCheckUtils]: 65: Hoare triple {4508#false} assume !false; {4508#false} is VALID [2018-11-23 12:46:26,688 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:46:26,689 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:26,689 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:26,689 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 66 [2018-11-23 12:46:26,690 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:26,690 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:26,764 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 66 edges. 66 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:26,764 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:26,764 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:26,764 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:26,765 INFO L87 Difference]: Start difference. First operand 149 states and 221 transitions. Second operand 4 states. [2018-11-23 12:46:27,938 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:27,939 INFO L93 Difference]: Finished difference Result 286 states and 427 transitions. [2018-11-23 12:46:27,939 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:27,939 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 66 [2018-11-23 12:46:27,939 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:27,939 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:27,943 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 427 transitions. [2018-11-23 12:46:27,943 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:27,946 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 427 transitions. [2018-11-23 12:46:27,946 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 427 transitions. [2018-11-23 12:46:28,795 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 427 edges. 427 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:28,799 INFO L225 Difference]: With dead ends: 286 [2018-11-23 12:46:28,799 INFO L226 Difference]: Without dead ends: 162 [2018-11-23 12:46:28,800 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:28,800 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2018-11-23 12:46:28,832 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 149. [2018-11-23 12:46:28,832 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:28,832 INFO L82 GeneralOperation]: Start isEquivalent. First operand 162 states. Second operand 149 states. [2018-11-23 12:46:28,833 INFO L74 IsIncluded]: Start isIncluded. First operand 162 states. Second operand 149 states. [2018-11-23 12:46:28,833 INFO L87 Difference]: Start difference. First operand 162 states. Second operand 149 states. [2018-11-23 12:46:28,837 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:28,837 INFO L93 Difference]: Finished difference Result 162 states and 237 transitions. [2018-11-23 12:46:28,837 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 237 transitions. [2018-11-23 12:46:28,838 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:28,838 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:28,838 INFO L74 IsIncluded]: Start isIncluded. First operand 149 states. Second operand 162 states. [2018-11-23 12:46:28,838 INFO L87 Difference]: Start difference. First operand 149 states. Second operand 162 states. [2018-11-23 12:46:28,842 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:28,842 INFO L93 Difference]: Finished difference Result 162 states and 237 transitions. [2018-11-23 12:46:28,842 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 237 transitions. [2018-11-23 12:46:28,843 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:28,843 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:28,843 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:28,843 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:28,843 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-23 12:46:28,846 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 220 transitions. [2018-11-23 12:46:28,847 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 220 transitions. Word has length 66 [2018-11-23 12:46:28,847 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:28,847 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 220 transitions. [2018-11-23 12:46:28,847 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:28,847 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 220 transitions. [2018-11-23 12:46:28,848 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2018-11-23 12:46:28,848 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:28,848 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:28,849 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:28,849 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:28,849 INFO L82 PathProgramCache]: Analyzing trace with hash 13987441, now seen corresponding path program 1 times [2018-11-23 12:46:28,849 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:28,849 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:28,850 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:28,851 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:28,851 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:28,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:29,126 WARN L180 SmtUtils]: Spent 100.00 ms on a formula simplification. DAG size of input: 18 DAG size of output: 15 [2018-11-23 12:46:29,394 INFO L256 TraceCheckUtils]: 0: Hoare triple {5359#true} call ULTIMATE.init(); {5359#true} is VALID [2018-11-23 12:46:29,395 INFO L273 TraceCheckUtils]: 1: Hoare triple {5359#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {5359#true} is VALID [2018-11-23 12:46:29,395 INFO L273 TraceCheckUtils]: 2: Hoare triple {5359#true} assume true; {5359#true} is VALID [2018-11-23 12:46:29,395 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {5359#true} {5359#true} #607#return; {5359#true} is VALID [2018-11-23 12:46:29,396 INFO L256 TraceCheckUtils]: 4: Hoare triple {5359#true} call #t~ret139 := main(); {5359#true} is VALID [2018-11-23 12:46:29,396 INFO L273 TraceCheckUtils]: 5: Hoare triple {5359#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {5359#true} is VALID [2018-11-23 12:46:29,396 INFO L256 TraceCheckUtils]: 6: Hoare triple {5359#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {5359#true} is VALID [2018-11-23 12:46:29,399 INFO L273 TraceCheckUtils]: 7: Hoare triple {5359#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {5361#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:29,403 INFO L273 TraceCheckUtils]: 8: Hoare triple {5361#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {5361#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:29,405 INFO L273 TraceCheckUtils]: 9: Hoare triple {5361#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {5361#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:29,405 INFO L273 TraceCheckUtils]: 10: Hoare triple {5361#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {5361#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:29,410 INFO L273 TraceCheckUtils]: 11: Hoare triple {5361#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {5361#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:29,415 INFO L273 TraceCheckUtils]: 12: Hoare triple {5361#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {5361#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:29,419 INFO L273 TraceCheckUtils]: 13: Hoare triple {5361#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {5361#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:29,419 INFO L273 TraceCheckUtils]: 14: Hoare triple {5361#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {5361#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:29,421 INFO L273 TraceCheckUtils]: 15: Hoare triple {5361#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {5361#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:29,421 INFO L273 TraceCheckUtils]: 16: Hoare triple {5361#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {5362#(= |ssl3_accept_#t~mem21| 8464)} is VALID [2018-11-23 12:46:29,423 INFO L273 TraceCheckUtils]: 17: Hoare triple {5362#(= |ssl3_accept_#t~mem21| 8464)} assume 8192 == #t~mem21;havoc #t~mem21; {5360#false} is VALID [2018-11-23 12:46:29,423 INFO L273 TraceCheckUtils]: 18: Hoare triple {5360#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,423 INFO L273 TraceCheckUtils]: 19: Hoare triple {5360#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {5360#false} is VALID [2018-11-23 12:46:29,423 INFO L273 TraceCheckUtils]: 20: Hoare triple {5360#false} call #t~mem54 := read~int(~s.base, ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,423 INFO L273 TraceCheckUtils]: 21: Hoare triple {5360#false} assume !(3 != #t~mem54 / 256);havoc #t~mem54;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,423 INFO L273 TraceCheckUtils]: 22: Hoare triple {5360#false} assume !(0 == (#t~mem55.base + #t~mem55.offset) % 4294967296);havoc #t~mem55.base, #t~mem55.offset; {5360#false} is VALID [2018-11-23 12:46:29,424 INFO L273 TraceCheckUtils]: 23: Hoare triple {5360#false} assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~tmp___4~0 := #t~nondet57;havoc #t~nondet57; {5360#false} is VALID [2018-11-23 12:46:29,424 INFO L273 TraceCheckUtils]: 24: Hoare triple {5360#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem58 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,424 INFO L273 TraceCheckUtils]: 25: Hoare triple {5360#false} assume !(12292 != #t~mem58);havoc #t~mem58;call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem63 := read~int(#t~mem62.base, 76 + #t~mem62.offset, 4);call write~int(1 + #t~mem63, #t~mem62.base, 76 + #t~mem62.offset, 4);havoc #t~mem63;havoc #t~mem62.base, #t~mem62.offset;call write~int(8480, ~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,424 INFO L273 TraceCheckUtils]: 26: Hoare triple {5360#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,424 INFO L273 TraceCheckUtils]: 27: Hoare triple {5360#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {5360#false} is VALID [2018-11-23 12:46:29,424 INFO L273 TraceCheckUtils]: 28: Hoare triple {5360#false} ~skip~0 := 0; {5360#false} is VALID [2018-11-23 12:46:29,424 INFO L273 TraceCheckUtils]: 29: Hoare triple {5360#false} assume !false; {5360#false} is VALID [2018-11-23 12:46:29,424 INFO L273 TraceCheckUtils]: 30: Hoare triple {5360#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,425 INFO L273 TraceCheckUtils]: 31: Hoare triple {5360#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,425 INFO L273 TraceCheckUtils]: 32: Hoare triple {5360#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,425 INFO L273 TraceCheckUtils]: 33: Hoare triple {5360#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,425 INFO L273 TraceCheckUtils]: 34: Hoare triple {5360#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,425 INFO L273 TraceCheckUtils]: 35: Hoare triple {5360#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,425 INFO L273 TraceCheckUtils]: 36: Hoare triple {5360#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,425 INFO L273 TraceCheckUtils]: 37: Hoare triple {5360#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,426 INFO L273 TraceCheckUtils]: 38: Hoare triple {5360#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,426 INFO L273 TraceCheckUtils]: 39: Hoare triple {5360#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,426 INFO L273 TraceCheckUtils]: 40: Hoare triple {5360#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,426 INFO L273 TraceCheckUtils]: 41: Hoare triple {5360#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,426 INFO L273 TraceCheckUtils]: 42: Hoare triple {5360#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,426 INFO L273 TraceCheckUtils]: 43: Hoare triple {5360#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,427 INFO L273 TraceCheckUtils]: 44: Hoare triple {5360#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,427 INFO L273 TraceCheckUtils]: 45: Hoare triple {5360#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,427 INFO L273 TraceCheckUtils]: 46: Hoare triple {5360#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,427 INFO L273 TraceCheckUtils]: 47: Hoare triple {5360#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,427 INFO L273 TraceCheckUtils]: 48: Hoare triple {5360#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,427 INFO L273 TraceCheckUtils]: 49: Hoare triple {5360#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,428 INFO L273 TraceCheckUtils]: 50: Hoare triple {5360#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,428 INFO L273 TraceCheckUtils]: 51: Hoare triple {5360#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,428 INFO L273 TraceCheckUtils]: 52: Hoare triple {5360#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,428 INFO L273 TraceCheckUtils]: 53: Hoare triple {5360#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,428 INFO L273 TraceCheckUtils]: 54: Hoare triple {5360#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,429 INFO L273 TraceCheckUtils]: 55: Hoare triple {5360#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,429 INFO L273 TraceCheckUtils]: 56: Hoare triple {5360#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,429 INFO L273 TraceCheckUtils]: 57: Hoare triple {5360#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,429 INFO L273 TraceCheckUtils]: 58: Hoare triple {5360#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,429 INFO L273 TraceCheckUtils]: 59: Hoare triple {5360#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,430 INFO L273 TraceCheckUtils]: 60: Hoare triple {5360#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,430 INFO L273 TraceCheckUtils]: 61: Hoare triple {5360#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,430 INFO L273 TraceCheckUtils]: 62: Hoare triple {5360#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {5360#false} is VALID [2018-11-23 12:46:29,430 INFO L273 TraceCheckUtils]: 63: Hoare triple {5360#false} assume 8672 == #t~mem51;havoc #t~mem51; {5360#false} is VALID [2018-11-23 12:46:29,430 INFO L273 TraceCheckUtils]: 64: Hoare triple {5360#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {5360#false} is VALID [2018-11-23 12:46:29,430 INFO L273 TraceCheckUtils]: 65: Hoare triple {5360#false} assume 4 == ~blastFlag~0; {5360#false} is VALID [2018-11-23 12:46:29,431 INFO L273 TraceCheckUtils]: 66: Hoare triple {5360#false} assume !false; {5360#false} is VALID [2018-11-23 12:46:29,436 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:46:29,437 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:29,437 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:29,437 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 67 [2018-11-23 12:46:29,437 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:29,438 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:29,548 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 67 edges. 67 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:29,549 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:29,549 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:29,549 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:29,549 INFO L87 Difference]: Start difference. First operand 149 states and 220 transitions. Second operand 4 states. [2018-11-23 12:46:30,895 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:30,895 INFO L93 Difference]: Finished difference Result 286 states and 426 transitions. [2018-11-23 12:46:30,895 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:30,895 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 67 [2018-11-23 12:46:30,896 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:30,896 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:30,899 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 426 transitions. [2018-11-23 12:46:30,900 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:30,903 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 426 transitions. [2018-11-23 12:46:30,903 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 426 transitions. [2018-11-23 12:46:31,919 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 426 edges. 426 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:31,923 INFO L225 Difference]: With dead ends: 286 [2018-11-23 12:46:31,923 INFO L226 Difference]: Without dead ends: 162 [2018-11-23 12:46:31,924 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:31,925 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2018-11-23 12:46:31,957 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 149. [2018-11-23 12:46:31,957 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:31,957 INFO L82 GeneralOperation]: Start isEquivalent. First operand 162 states. Second operand 149 states. [2018-11-23 12:46:31,957 INFO L74 IsIncluded]: Start isIncluded. First operand 162 states. Second operand 149 states. [2018-11-23 12:46:31,957 INFO L87 Difference]: Start difference. First operand 162 states. Second operand 149 states. [2018-11-23 12:46:31,961 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:31,961 INFO L93 Difference]: Finished difference Result 162 states and 236 transitions. [2018-11-23 12:46:31,961 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 236 transitions. [2018-11-23 12:46:31,962 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:31,962 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:31,962 INFO L74 IsIncluded]: Start isIncluded. First operand 149 states. Second operand 162 states. [2018-11-23 12:46:31,962 INFO L87 Difference]: Start difference. First operand 149 states. Second operand 162 states. [2018-11-23 12:46:31,966 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:31,966 INFO L93 Difference]: Finished difference Result 162 states and 236 transitions. [2018-11-23 12:46:31,966 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 236 transitions. [2018-11-23 12:46:31,967 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:31,967 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:31,967 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:31,967 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:31,968 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-23 12:46:31,971 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 219 transitions. [2018-11-23 12:46:31,971 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 219 transitions. Word has length 67 [2018-11-23 12:46:31,972 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:31,972 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 219 transitions. [2018-11-23 12:46:31,972 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:31,972 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 219 transitions. [2018-11-23 12:46:31,973 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2018-11-23 12:46:31,973 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:31,973 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:31,973 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:31,974 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:31,974 INFO L82 PathProgramCache]: Analyzing trace with hash -51019519, now seen corresponding path program 1 times [2018-11-23 12:46:31,974 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:31,974 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:31,975 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:31,975 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:31,975 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:31,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:32,497 WARN L180 SmtUtils]: Spent 101.00 ms on a formula simplification. DAG size of input: 6 DAG size of output: 3 [2018-11-23 12:46:32,584 INFO L256 TraceCheckUtils]: 0: Hoare triple {6211#true} call ULTIMATE.init(); {6211#true} is VALID [2018-11-23 12:46:32,584 INFO L273 TraceCheckUtils]: 1: Hoare triple {6211#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {6211#true} is VALID [2018-11-23 12:46:32,584 INFO L273 TraceCheckUtils]: 2: Hoare triple {6211#true} assume true; {6211#true} is VALID [2018-11-23 12:46:32,585 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {6211#true} {6211#true} #607#return; {6211#true} is VALID [2018-11-23 12:46:32,585 INFO L256 TraceCheckUtils]: 4: Hoare triple {6211#true} call #t~ret139 := main(); {6211#true} is VALID [2018-11-23 12:46:32,585 INFO L273 TraceCheckUtils]: 5: Hoare triple {6211#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {6211#true} is VALID [2018-11-23 12:46:32,585 INFO L256 TraceCheckUtils]: 6: Hoare triple {6211#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {6211#true} is VALID [2018-11-23 12:46:32,585 INFO L273 TraceCheckUtils]: 7: Hoare triple {6211#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {6211#true} is VALID [2018-11-23 12:46:32,585 INFO L273 TraceCheckUtils]: 8: Hoare triple {6211#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {6211#true} is VALID [2018-11-23 12:46:32,586 INFO L273 TraceCheckUtils]: 9: Hoare triple {6211#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {6211#true} is VALID [2018-11-23 12:46:32,586 INFO L273 TraceCheckUtils]: 10: Hoare triple {6211#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {6211#true} is VALID [2018-11-23 12:46:32,586 INFO L273 TraceCheckUtils]: 11: Hoare triple {6211#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {6211#true} is VALID [2018-11-23 12:46:32,586 INFO L273 TraceCheckUtils]: 12: Hoare triple {6211#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {6211#true} is VALID [2018-11-23 12:46:32,586 INFO L273 TraceCheckUtils]: 13: Hoare triple {6211#true} assume !false; {6211#true} is VALID [2018-11-23 12:46:32,587 INFO L273 TraceCheckUtils]: 14: Hoare triple {6211#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {6211#true} is VALID [2018-11-23 12:46:32,587 INFO L273 TraceCheckUtils]: 15: Hoare triple {6211#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {6211#true} is VALID [2018-11-23 12:46:32,587 INFO L273 TraceCheckUtils]: 16: Hoare triple {6211#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {6211#true} is VALID [2018-11-23 12:46:32,587 INFO L273 TraceCheckUtils]: 17: Hoare triple {6211#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {6211#true} is VALID [2018-11-23 12:46:32,587 INFO L273 TraceCheckUtils]: 18: Hoare triple {6211#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {6211#true} is VALID [2018-11-23 12:46:32,588 INFO L273 TraceCheckUtils]: 19: Hoare triple {6211#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {6211#true} is VALID [2018-11-23 12:46:32,588 INFO L273 TraceCheckUtils]: 20: Hoare triple {6211#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {6211#true} is VALID [2018-11-23 12:46:32,588 INFO L273 TraceCheckUtils]: 21: Hoare triple {6211#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {6211#true} is VALID [2018-11-23 12:46:32,588 INFO L273 TraceCheckUtils]: 22: Hoare triple {6211#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {6211#true} is VALID [2018-11-23 12:46:32,588 INFO L273 TraceCheckUtils]: 23: Hoare triple {6211#true} assume 8464 == #t~mem27;havoc #t~mem27; {6211#true} is VALID [2018-11-23 12:46:32,588 INFO L273 TraceCheckUtils]: 24: Hoare triple {6211#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {6211#true} is VALID [2018-11-23 12:46:32,588 INFO L273 TraceCheckUtils]: 25: Hoare triple {6211#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {6211#true} is VALID [2018-11-23 12:46:32,606 INFO L273 TraceCheckUtils]: 26: Hoare triple {6211#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:32,615 INFO L273 TraceCheckUtils]: 27: Hoare triple {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:32,629 INFO L273 TraceCheckUtils]: 28: Hoare triple {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:32,637 INFO L273 TraceCheckUtils]: 29: Hoare triple {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:32,638 INFO L273 TraceCheckUtils]: 30: Hoare triple {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !false; {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:32,639 INFO L273 TraceCheckUtils]: 31: Hoare triple {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:32,644 INFO L273 TraceCheckUtils]: 32: Hoare triple {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:32,647 INFO L273 TraceCheckUtils]: 33: Hoare triple {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:32,647 INFO L273 TraceCheckUtils]: 34: Hoare triple {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:32,647 INFO L273 TraceCheckUtils]: 35: Hoare triple {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:32,648 INFO L273 TraceCheckUtils]: 36: Hoare triple {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:32,648 INFO L273 TraceCheckUtils]: 37: Hoare triple {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:32,648 INFO L273 TraceCheckUtils]: 38: Hoare triple {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:32,649 INFO L273 TraceCheckUtils]: 39: Hoare triple {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:32,649 INFO L273 TraceCheckUtils]: 40: Hoare triple {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:32,649 INFO L273 TraceCheckUtils]: 41: Hoare triple {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:32,650 INFO L273 TraceCheckUtils]: 42: Hoare triple {6213#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {6214#(= 8496 |ssl3_accept_#t~mem30|)} is VALID [2018-11-23 12:46:32,650 INFO L273 TraceCheckUtils]: 43: Hoare triple {6214#(= 8496 |ssl3_accept_#t~mem30|)} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {6212#false} is VALID [2018-11-23 12:46:32,650 INFO L273 TraceCheckUtils]: 44: Hoare triple {6212#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {6212#false} is VALID [2018-11-23 12:46:32,650 INFO L273 TraceCheckUtils]: 45: Hoare triple {6212#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {6212#false} is VALID [2018-11-23 12:46:32,651 INFO L273 TraceCheckUtils]: 46: Hoare triple {6212#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {6212#false} is VALID [2018-11-23 12:46:32,651 INFO L273 TraceCheckUtils]: 47: Hoare triple {6212#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {6212#false} is VALID [2018-11-23 12:46:32,651 INFO L273 TraceCheckUtils]: 48: Hoare triple {6212#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {6212#false} is VALID [2018-11-23 12:46:32,651 INFO L273 TraceCheckUtils]: 49: Hoare triple {6212#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {6212#false} is VALID [2018-11-23 12:46:32,652 INFO L273 TraceCheckUtils]: 50: Hoare triple {6212#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {6212#false} is VALID [2018-11-23 12:46:32,652 INFO L273 TraceCheckUtils]: 51: Hoare triple {6212#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {6212#false} is VALID [2018-11-23 12:46:32,652 INFO L273 TraceCheckUtils]: 52: Hoare triple {6212#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {6212#false} is VALID [2018-11-23 12:46:32,652 INFO L273 TraceCheckUtils]: 53: Hoare triple {6212#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {6212#false} is VALID [2018-11-23 12:46:32,652 INFO L273 TraceCheckUtils]: 54: Hoare triple {6212#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {6212#false} is VALID [2018-11-23 12:46:32,653 INFO L273 TraceCheckUtils]: 55: Hoare triple {6212#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {6212#false} is VALID [2018-11-23 12:46:32,653 INFO L273 TraceCheckUtils]: 56: Hoare triple {6212#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {6212#false} is VALID [2018-11-23 12:46:32,653 INFO L273 TraceCheckUtils]: 57: Hoare triple {6212#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {6212#false} is VALID [2018-11-23 12:46:32,653 INFO L273 TraceCheckUtils]: 58: Hoare triple {6212#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {6212#false} is VALID [2018-11-23 12:46:32,653 INFO L273 TraceCheckUtils]: 59: Hoare triple {6212#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {6212#false} is VALID [2018-11-23 12:46:32,653 INFO L273 TraceCheckUtils]: 60: Hoare triple {6212#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {6212#false} is VALID [2018-11-23 12:46:32,653 INFO L273 TraceCheckUtils]: 61: Hoare triple {6212#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {6212#false} is VALID [2018-11-23 12:46:32,653 INFO L273 TraceCheckUtils]: 62: Hoare triple {6212#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {6212#false} is VALID [2018-11-23 12:46:32,654 INFO L273 TraceCheckUtils]: 63: Hoare triple {6212#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {6212#false} is VALID [2018-11-23 12:46:32,654 INFO L273 TraceCheckUtils]: 64: Hoare triple {6212#false} assume 8672 == #t~mem51;havoc #t~mem51; {6212#false} is VALID [2018-11-23 12:46:32,654 INFO L273 TraceCheckUtils]: 65: Hoare triple {6212#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {6212#false} is VALID [2018-11-23 12:46:32,654 INFO L273 TraceCheckUtils]: 66: Hoare triple {6212#false} assume 4 == ~blastFlag~0; {6212#false} is VALID [2018-11-23 12:46:32,654 INFO L273 TraceCheckUtils]: 67: Hoare triple {6212#false} assume !false; {6212#false} is VALID [2018-11-23 12:46:32,666 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:46:32,667 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:32,667 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:32,667 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 68 [2018-11-23 12:46:32,671 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:32,671 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:32,752 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 68 edges. 68 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:32,752 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:32,752 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:32,752 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:32,753 INFO L87 Difference]: Start difference. First operand 149 states and 219 transitions. Second operand 4 states. [2018-11-23 12:46:34,130 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:34,130 INFO L93 Difference]: Finished difference Result 316 states and 474 transitions. [2018-11-23 12:46:34,130 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:34,130 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 68 [2018-11-23 12:46:34,131 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:34,131 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:34,134 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 461 transitions. [2018-11-23 12:46:34,134 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:34,138 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 461 transitions. [2018-11-23 12:46:34,138 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 461 transitions. [2018-11-23 12:46:35,195 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 461 edges. 461 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:35,201 INFO L225 Difference]: With dead ends: 316 [2018-11-23 12:46:35,201 INFO L226 Difference]: Without dead ends: 192 [2018-11-23 12:46:35,201 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:35,202 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 192 states. [2018-11-23 12:46:35,234 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 192 to 171. [2018-11-23 12:46:35,234 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:35,234 INFO L82 GeneralOperation]: Start isEquivalent. First operand 192 states. Second operand 171 states. [2018-11-23 12:46:35,234 INFO L74 IsIncluded]: Start isIncluded. First operand 192 states. Second operand 171 states. [2018-11-23 12:46:35,235 INFO L87 Difference]: Start difference. First operand 192 states. Second operand 171 states. [2018-11-23 12:46:35,240 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:35,240 INFO L93 Difference]: Finished difference Result 192 states and 284 transitions. [2018-11-23 12:46:35,240 INFO L276 IsEmpty]: Start isEmpty. Operand 192 states and 284 transitions. [2018-11-23 12:46:35,241 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:35,241 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:35,241 INFO L74 IsIncluded]: Start isIncluded. First operand 171 states. Second operand 192 states. [2018-11-23 12:46:35,242 INFO L87 Difference]: Start difference. First operand 171 states. Second operand 192 states. [2018-11-23 12:46:35,248 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:35,248 INFO L93 Difference]: Finished difference Result 192 states and 284 transitions. [2018-11-23 12:46:35,248 INFO L276 IsEmpty]: Start isEmpty. Operand 192 states and 284 transitions. [2018-11-23 12:46:35,249 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:35,249 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:35,249 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:35,249 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:35,250 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 171 states. [2018-11-23 12:46:35,254 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 257 transitions. [2018-11-23 12:46:35,254 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 257 transitions. Word has length 68 [2018-11-23 12:46:35,255 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:35,255 INFO L480 AbstractCegarLoop]: Abstraction has 171 states and 257 transitions. [2018-11-23 12:46:35,255 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:35,255 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 257 transitions. [2018-11-23 12:46:35,256 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2018-11-23 12:46:35,256 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:35,256 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:35,257 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:35,257 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:35,257 INFO L82 PathProgramCache]: Analyzing trace with hash 1424345341, now seen corresponding path program 1 times [2018-11-23 12:46:35,257 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:35,257 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:35,259 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:35,259 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:35,259 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:35,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:35,984 INFO L256 TraceCheckUtils]: 0: Hoare triple {7183#true} call ULTIMATE.init(); {7183#true} is VALID [2018-11-23 12:46:35,984 INFO L273 TraceCheckUtils]: 1: Hoare triple {7183#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {7183#true} is VALID [2018-11-23 12:46:35,985 INFO L273 TraceCheckUtils]: 2: Hoare triple {7183#true} assume true; {7183#true} is VALID [2018-11-23 12:46:35,985 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {7183#true} {7183#true} #607#return; {7183#true} is VALID [2018-11-23 12:46:35,985 INFO L256 TraceCheckUtils]: 4: Hoare triple {7183#true} call #t~ret139 := main(); {7183#true} is VALID [2018-11-23 12:46:35,985 INFO L273 TraceCheckUtils]: 5: Hoare triple {7183#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {7183#true} is VALID [2018-11-23 12:46:35,985 INFO L256 TraceCheckUtils]: 6: Hoare triple {7183#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {7183#true} is VALID [2018-11-23 12:46:35,994 INFO L273 TraceCheckUtils]: 7: Hoare triple {7183#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {7185#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:35,994 INFO L273 TraceCheckUtils]: 8: Hoare triple {7185#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {7185#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:35,996 INFO L273 TraceCheckUtils]: 9: Hoare triple {7185#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {7185#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:35,996 INFO L273 TraceCheckUtils]: 10: Hoare triple {7185#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {7185#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:35,999 INFO L273 TraceCheckUtils]: 11: Hoare triple {7185#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {7185#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:35,999 INFO L273 TraceCheckUtils]: 12: Hoare triple {7185#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {7185#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:36,002 INFO L273 TraceCheckUtils]: 13: Hoare triple {7185#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {7185#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:36,002 INFO L273 TraceCheckUtils]: 14: Hoare triple {7185#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {7185#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:36,002 INFO L273 TraceCheckUtils]: 15: Hoare triple {7185#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {7185#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:36,003 INFO L273 TraceCheckUtils]: 16: Hoare triple {7185#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {7185#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:36,003 INFO L273 TraceCheckUtils]: 17: Hoare triple {7185#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {7186#(= |ssl3_accept_#t~mem22| 8464)} is VALID [2018-11-23 12:46:36,004 INFO L273 TraceCheckUtils]: 18: Hoare triple {7186#(= |ssl3_accept_#t~mem22| 8464)} assume 24576 == #t~mem22;havoc #t~mem22; {7184#false} is VALID [2018-11-23 12:46:36,004 INFO L273 TraceCheckUtils]: 19: Hoare triple {7184#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,004 INFO L273 TraceCheckUtils]: 20: Hoare triple {7184#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {7184#false} is VALID [2018-11-23 12:46:36,004 INFO L273 TraceCheckUtils]: 21: Hoare triple {7184#false} call #t~mem54 := read~int(~s.base, ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,005 INFO L273 TraceCheckUtils]: 22: Hoare triple {7184#false} assume !(3 != #t~mem54 / 256);havoc #t~mem54;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,005 INFO L273 TraceCheckUtils]: 23: Hoare triple {7184#false} assume !(0 == (#t~mem55.base + #t~mem55.offset) % 4294967296);havoc #t~mem55.base, #t~mem55.offset; {7184#false} is VALID [2018-11-23 12:46:36,005 INFO L273 TraceCheckUtils]: 24: Hoare triple {7184#false} assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~tmp___4~0 := #t~nondet57;havoc #t~nondet57; {7184#false} is VALID [2018-11-23 12:46:36,005 INFO L273 TraceCheckUtils]: 25: Hoare triple {7184#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem58 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,006 INFO L273 TraceCheckUtils]: 26: Hoare triple {7184#false} assume !(12292 != #t~mem58);havoc #t~mem58;call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem63 := read~int(#t~mem62.base, 76 + #t~mem62.offset, 4);call write~int(1 + #t~mem63, #t~mem62.base, 76 + #t~mem62.offset, 4);havoc #t~mem63;havoc #t~mem62.base, #t~mem62.offset;call write~int(8480, ~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,006 INFO L273 TraceCheckUtils]: 27: Hoare triple {7184#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,006 INFO L273 TraceCheckUtils]: 28: Hoare triple {7184#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {7184#false} is VALID [2018-11-23 12:46:36,006 INFO L273 TraceCheckUtils]: 29: Hoare triple {7184#false} ~skip~0 := 0; {7184#false} is VALID [2018-11-23 12:46:36,007 INFO L273 TraceCheckUtils]: 30: Hoare triple {7184#false} assume !false; {7184#false} is VALID [2018-11-23 12:46:36,007 INFO L273 TraceCheckUtils]: 31: Hoare triple {7184#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,007 INFO L273 TraceCheckUtils]: 32: Hoare triple {7184#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,007 INFO L273 TraceCheckUtils]: 33: Hoare triple {7184#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,008 INFO L273 TraceCheckUtils]: 34: Hoare triple {7184#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,008 INFO L273 TraceCheckUtils]: 35: Hoare triple {7184#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,008 INFO L273 TraceCheckUtils]: 36: Hoare triple {7184#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,008 INFO L273 TraceCheckUtils]: 37: Hoare triple {7184#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,009 INFO L273 TraceCheckUtils]: 38: Hoare triple {7184#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,009 INFO L273 TraceCheckUtils]: 39: Hoare triple {7184#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,009 INFO L273 TraceCheckUtils]: 40: Hoare triple {7184#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,009 INFO L273 TraceCheckUtils]: 41: Hoare triple {7184#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,009 INFO L273 TraceCheckUtils]: 42: Hoare triple {7184#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,009 INFO L273 TraceCheckUtils]: 43: Hoare triple {7184#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,010 INFO L273 TraceCheckUtils]: 44: Hoare triple {7184#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,010 INFO L273 TraceCheckUtils]: 45: Hoare triple {7184#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,010 INFO L273 TraceCheckUtils]: 46: Hoare triple {7184#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,010 INFO L273 TraceCheckUtils]: 47: Hoare triple {7184#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,010 INFO L273 TraceCheckUtils]: 48: Hoare triple {7184#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,010 INFO L273 TraceCheckUtils]: 49: Hoare triple {7184#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,011 INFO L273 TraceCheckUtils]: 50: Hoare triple {7184#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,011 INFO L273 TraceCheckUtils]: 51: Hoare triple {7184#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,011 INFO L273 TraceCheckUtils]: 52: Hoare triple {7184#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,011 INFO L273 TraceCheckUtils]: 53: Hoare triple {7184#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,011 INFO L273 TraceCheckUtils]: 54: Hoare triple {7184#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,011 INFO L273 TraceCheckUtils]: 55: Hoare triple {7184#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,012 INFO L273 TraceCheckUtils]: 56: Hoare triple {7184#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,012 INFO L273 TraceCheckUtils]: 57: Hoare triple {7184#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,012 INFO L273 TraceCheckUtils]: 58: Hoare triple {7184#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,012 INFO L273 TraceCheckUtils]: 59: Hoare triple {7184#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,012 INFO L273 TraceCheckUtils]: 60: Hoare triple {7184#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,012 INFO L273 TraceCheckUtils]: 61: Hoare triple {7184#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,012 INFO L273 TraceCheckUtils]: 62: Hoare triple {7184#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,013 INFO L273 TraceCheckUtils]: 63: Hoare triple {7184#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {7184#false} is VALID [2018-11-23 12:46:36,013 INFO L273 TraceCheckUtils]: 64: Hoare triple {7184#false} assume 8672 == #t~mem51;havoc #t~mem51; {7184#false} is VALID [2018-11-23 12:46:36,013 INFO L273 TraceCheckUtils]: 65: Hoare triple {7184#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {7184#false} is VALID [2018-11-23 12:46:36,013 INFO L273 TraceCheckUtils]: 66: Hoare triple {7184#false} assume 4 == ~blastFlag~0; {7184#false} is VALID [2018-11-23 12:46:36,013 INFO L273 TraceCheckUtils]: 67: Hoare triple {7184#false} assume !false; {7184#false} is VALID [2018-11-23 12:46:36,020 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:46:36,020 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:36,020 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:36,021 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 68 [2018-11-23 12:46:36,021 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:36,021 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:36,275 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 68 edges. 68 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:36,275 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:36,275 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:36,275 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:36,276 INFO L87 Difference]: Start difference. First operand 171 states and 257 transitions. Second operand 4 states. [2018-11-23 12:46:37,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:37,688 INFO L93 Difference]: Finished difference Result 330 states and 501 transitions. [2018-11-23 12:46:37,688 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:37,688 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 68 [2018-11-23 12:46:37,688 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:37,688 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:37,692 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 425 transitions. [2018-11-23 12:46:37,692 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:37,694 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 425 transitions. [2018-11-23 12:46:37,694 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 425 transitions. [2018-11-23 12:46:38,112 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 425 edges. 425 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:38,116 INFO L225 Difference]: With dead ends: 330 [2018-11-23 12:46:38,117 INFO L226 Difference]: Without dead ends: 184 [2018-11-23 12:46:38,117 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:38,118 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 184 states. [2018-11-23 12:46:38,173 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 184 to 171. [2018-11-23 12:46:38,173 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:38,173 INFO L82 GeneralOperation]: Start isEquivalent. First operand 184 states. Second operand 171 states. [2018-11-23 12:46:38,174 INFO L74 IsIncluded]: Start isIncluded. First operand 184 states. Second operand 171 states. [2018-11-23 12:46:38,174 INFO L87 Difference]: Start difference. First operand 184 states. Second operand 171 states. [2018-11-23 12:46:38,179 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:38,179 INFO L93 Difference]: Finished difference Result 184 states and 273 transitions. [2018-11-23 12:46:38,179 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 273 transitions. [2018-11-23 12:46:38,180 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:38,180 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:38,180 INFO L74 IsIncluded]: Start isIncluded. First operand 171 states. Second operand 184 states. [2018-11-23 12:46:38,180 INFO L87 Difference]: Start difference. First operand 171 states. Second operand 184 states. [2018-11-23 12:46:38,184 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:38,184 INFO L93 Difference]: Finished difference Result 184 states and 273 transitions. [2018-11-23 12:46:38,184 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 273 transitions. [2018-11-23 12:46:38,185 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:38,185 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:38,185 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:38,185 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:38,185 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 171 states. [2018-11-23 12:46:38,188 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 256 transitions. [2018-11-23 12:46:38,188 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 256 transitions. Word has length 68 [2018-11-23 12:46:38,189 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:38,189 INFO L480 AbstractCegarLoop]: Abstraction has 171 states and 256 transitions. [2018-11-23 12:46:38,189 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:38,189 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 256 transitions. [2018-11-23 12:46:38,190 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2018-11-23 12:46:38,190 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:38,190 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:38,190 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:38,190 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:38,191 INFO L82 PathProgramCache]: Analyzing trace with hash 993066636, now seen corresponding path program 1 times [2018-11-23 12:46:38,191 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:38,191 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:38,192 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:38,192 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:38,192 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:38,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:38,409 INFO L256 TraceCheckUtils]: 0: Hoare triple {8151#true} call ULTIMATE.init(); {8151#true} is VALID [2018-11-23 12:46:38,410 INFO L273 TraceCheckUtils]: 1: Hoare triple {8151#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {8151#true} is VALID [2018-11-23 12:46:38,410 INFO L273 TraceCheckUtils]: 2: Hoare triple {8151#true} assume true; {8151#true} is VALID [2018-11-23 12:46:38,410 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {8151#true} {8151#true} #607#return; {8151#true} is VALID [2018-11-23 12:46:38,410 INFO L256 TraceCheckUtils]: 4: Hoare triple {8151#true} call #t~ret139 := main(); {8151#true} is VALID [2018-11-23 12:46:38,411 INFO L273 TraceCheckUtils]: 5: Hoare triple {8151#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {8151#true} is VALID [2018-11-23 12:46:38,411 INFO L256 TraceCheckUtils]: 6: Hoare triple {8151#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {8151#true} is VALID [2018-11-23 12:46:38,413 INFO L273 TraceCheckUtils]: 7: Hoare triple {8151#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {8153#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:38,414 INFO L273 TraceCheckUtils]: 8: Hoare triple {8153#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {8153#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:38,415 INFO L273 TraceCheckUtils]: 9: Hoare triple {8153#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {8153#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:38,415 INFO L273 TraceCheckUtils]: 10: Hoare triple {8153#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {8153#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:38,415 INFO L273 TraceCheckUtils]: 11: Hoare triple {8153#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {8153#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:38,416 INFO L273 TraceCheckUtils]: 12: Hoare triple {8153#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {8153#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:38,416 INFO L273 TraceCheckUtils]: 13: Hoare triple {8153#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {8153#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:38,416 INFO L273 TraceCheckUtils]: 14: Hoare triple {8153#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {8153#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:38,417 INFO L273 TraceCheckUtils]: 15: Hoare triple {8153#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {8153#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:38,417 INFO L273 TraceCheckUtils]: 16: Hoare triple {8153#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {8153#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:38,417 INFO L273 TraceCheckUtils]: 17: Hoare triple {8153#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {8153#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:38,418 INFO L273 TraceCheckUtils]: 18: Hoare triple {8153#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {8154#(= |ssl3_accept_#t~mem23| 8464)} is VALID [2018-11-23 12:46:38,418 INFO L273 TraceCheckUtils]: 19: Hoare triple {8154#(= |ssl3_accept_#t~mem23| 8464)} assume 8195 == #t~mem23;havoc #t~mem23; {8152#false} is VALID [2018-11-23 12:46:38,418 INFO L273 TraceCheckUtils]: 20: Hoare triple {8152#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,419 INFO L273 TraceCheckUtils]: 21: Hoare triple {8152#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {8152#false} is VALID [2018-11-23 12:46:38,419 INFO L273 TraceCheckUtils]: 22: Hoare triple {8152#false} call #t~mem54 := read~int(~s.base, ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,419 INFO L273 TraceCheckUtils]: 23: Hoare triple {8152#false} assume !(3 != #t~mem54 / 256);havoc #t~mem54;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,419 INFO L273 TraceCheckUtils]: 24: Hoare triple {8152#false} assume !(0 == (#t~mem55.base + #t~mem55.offset) % 4294967296);havoc #t~mem55.base, #t~mem55.offset; {8152#false} is VALID [2018-11-23 12:46:38,420 INFO L273 TraceCheckUtils]: 25: Hoare triple {8152#false} assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~tmp___4~0 := #t~nondet57;havoc #t~nondet57; {8152#false} is VALID [2018-11-23 12:46:38,420 INFO L273 TraceCheckUtils]: 26: Hoare triple {8152#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem58 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,420 INFO L273 TraceCheckUtils]: 27: Hoare triple {8152#false} assume !(12292 != #t~mem58);havoc #t~mem58;call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem63 := read~int(#t~mem62.base, 76 + #t~mem62.offset, 4);call write~int(1 + #t~mem63, #t~mem62.base, 76 + #t~mem62.offset, 4);havoc #t~mem63;havoc #t~mem62.base, #t~mem62.offset;call write~int(8480, ~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,420 INFO L273 TraceCheckUtils]: 28: Hoare triple {8152#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,421 INFO L273 TraceCheckUtils]: 29: Hoare triple {8152#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {8152#false} is VALID [2018-11-23 12:46:38,421 INFO L273 TraceCheckUtils]: 30: Hoare triple {8152#false} ~skip~0 := 0; {8152#false} is VALID [2018-11-23 12:46:38,421 INFO L273 TraceCheckUtils]: 31: Hoare triple {8152#false} assume !false; {8152#false} is VALID [2018-11-23 12:46:38,421 INFO L273 TraceCheckUtils]: 32: Hoare triple {8152#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,421 INFO L273 TraceCheckUtils]: 33: Hoare triple {8152#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,422 INFO L273 TraceCheckUtils]: 34: Hoare triple {8152#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,422 INFO L273 TraceCheckUtils]: 35: Hoare triple {8152#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,422 INFO L273 TraceCheckUtils]: 36: Hoare triple {8152#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,422 INFO L273 TraceCheckUtils]: 37: Hoare triple {8152#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,422 INFO L273 TraceCheckUtils]: 38: Hoare triple {8152#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,423 INFO L273 TraceCheckUtils]: 39: Hoare triple {8152#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,423 INFO L273 TraceCheckUtils]: 40: Hoare triple {8152#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,423 INFO L273 TraceCheckUtils]: 41: Hoare triple {8152#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,423 INFO L273 TraceCheckUtils]: 42: Hoare triple {8152#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,423 INFO L273 TraceCheckUtils]: 43: Hoare triple {8152#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,424 INFO L273 TraceCheckUtils]: 44: Hoare triple {8152#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,424 INFO L273 TraceCheckUtils]: 45: Hoare triple {8152#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,424 INFO L273 TraceCheckUtils]: 46: Hoare triple {8152#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,424 INFO L273 TraceCheckUtils]: 47: Hoare triple {8152#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,424 INFO L273 TraceCheckUtils]: 48: Hoare triple {8152#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,425 INFO L273 TraceCheckUtils]: 49: Hoare triple {8152#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,425 INFO L273 TraceCheckUtils]: 50: Hoare triple {8152#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,425 INFO L273 TraceCheckUtils]: 51: Hoare triple {8152#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,425 INFO L273 TraceCheckUtils]: 52: Hoare triple {8152#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,425 INFO L273 TraceCheckUtils]: 53: Hoare triple {8152#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,425 INFO L273 TraceCheckUtils]: 54: Hoare triple {8152#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,426 INFO L273 TraceCheckUtils]: 55: Hoare triple {8152#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,426 INFO L273 TraceCheckUtils]: 56: Hoare triple {8152#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,426 INFO L273 TraceCheckUtils]: 57: Hoare triple {8152#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,426 INFO L273 TraceCheckUtils]: 58: Hoare triple {8152#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,426 INFO L273 TraceCheckUtils]: 59: Hoare triple {8152#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,427 INFO L273 TraceCheckUtils]: 60: Hoare triple {8152#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,427 INFO L273 TraceCheckUtils]: 61: Hoare triple {8152#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,427 INFO L273 TraceCheckUtils]: 62: Hoare triple {8152#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,427 INFO L273 TraceCheckUtils]: 63: Hoare triple {8152#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,427 INFO L273 TraceCheckUtils]: 64: Hoare triple {8152#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {8152#false} is VALID [2018-11-23 12:46:38,427 INFO L273 TraceCheckUtils]: 65: Hoare triple {8152#false} assume 8672 == #t~mem51;havoc #t~mem51; {8152#false} is VALID [2018-11-23 12:46:38,428 INFO L273 TraceCheckUtils]: 66: Hoare triple {8152#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {8152#false} is VALID [2018-11-23 12:46:38,428 INFO L273 TraceCheckUtils]: 67: Hoare triple {8152#false} assume 4 == ~blastFlag~0; {8152#false} is VALID [2018-11-23 12:46:38,428 INFO L273 TraceCheckUtils]: 68: Hoare triple {8152#false} assume !false; {8152#false} is VALID [2018-11-23 12:46:38,433 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:46:38,434 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:38,434 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:38,434 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 69 [2018-11-23 12:46:38,435 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:38,435 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:38,548 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 69 edges. 69 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:38,548 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:38,548 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:38,548 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:38,549 INFO L87 Difference]: Start difference. First operand 171 states and 256 transitions. Second operand 4 states. [2018-11-23 12:46:39,491 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:39,491 INFO L93 Difference]: Finished difference Result 320 states and 487 transitions. [2018-11-23 12:46:39,492 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:39,492 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 69 [2018-11-23 12:46:39,492 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:39,492 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:39,494 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 411 transitions. [2018-11-23 12:46:39,494 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:39,496 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 411 transitions. [2018-11-23 12:46:39,496 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 411 transitions. [2018-11-23 12:46:39,947 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 411 edges. 411 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:39,950 INFO L225 Difference]: With dead ends: 320 [2018-11-23 12:46:39,950 INFO L226 Difference]: Without dead ends: 174 [2018-11-23 12:46:39,951 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:39,951 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 174 states. [2018-11-23 12:46:40,086 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 174 to 171. [2018-11-23 12:46:40,086 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:40,086 INFO L82 GeneralOperation]: Start isEquivalent. First operand 174 states. Second operand 171 states. [2018-11-23 12:46:40,087 INFO L74 IsIncluded]: Start isIncluded. First operand 174 states. Second operand 171 states. [2018-11-23 12:46:40,087 INFO L87 Difference]: Start difference. First operand 174 states. Second operand 171 states. [2018-11-23 12:46:40,090 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:40,091 INFO L93 Difference]: Finished difference Result 174 states and 259 transitions. [2018-11-23 12:46:40,091 INFO L276 IsEmpty]: Start isEmpty. Operand 174 states and 259 transitions. [2018-11-23 12:46:40,091 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:40,092 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:40,092 INFO L74 IsIncluded]: Start isIncluded. First operand 171 states. Second operand 174 states. [2018-11-23 12:46:40,092 INFO L87 Difference]: Start difference. First operand 171 states. Second operand 174 states. [2018-11-23 12:46:40,096 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:40,096 INFO L93 Difference]: Finished difference Result 174 states and 259 transitions. [2018-11-23 12:46:40,096 INFO L276 IsEmpty]: Start isEmpty. Operand 174 states and 259 transitions. [2018-11-23 12:46:40,097 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:40,097 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:40,097 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:40,097 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:40,097 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 171 states. [2018-11-23 12:46:40,100 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 255 transitions. [2018-11-23 12:46:40,101 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 255 transitions. Word has length 69 [2018-11-23 12:46:40,101 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:40,101 INFO L480 AbstractCegarLoop]: Abstraction has 171 states and 255 transitions. [2018-11-23 12:46:40,101 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:40,101 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 255 transitions. [2018-11-23 12:46:40,102 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2018-11-23 12:46:40,102 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:40,103 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:40,103 INFO L423 AbstractCegarLoop]: === Iteration 11 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:40,103 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:40,103 INFO L82 PathProgramCache]: Analyzing trace with hash -1455151314, now seen corresponding path program 1 times [2018-11-23 12:46:40,103 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:40,103 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:40,104 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:40,105 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:40,105 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:40,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:40,336 INFO L256 TraceCheckUtils]: 0: Hoare triple {9088#true} call ULTIMATE.init(); {9088#true} is VALID [2018-11-23 12:46:40,336 INFO L273 TraceCheckUtils]: 1: Hoare triple {9088#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {9088#true} is VALID [2018-11-23 12:46:40,336 INFO L273 TraceCheckUtils]: 2: Hoare triple {9088#true} assume true; {9088#true} is VALID [2018-11-23 12:46:40,337 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {9088#true} {9088#true} #607#return; {9088#true} is VALID [2018-11-23 12:46:40,337 INFO L256 TraceCheckUtils]: 4: Hoare triple {9088#true} call #t~ret139 := main(); {9088#true} is VALID [2018-11-23 12:46:40,337 INFO L273 TraceCheckUtils]: 5: Hoare triple {9088#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {9088#true} is VALID [2018-11-23 12:46:40,337 INFO L256 TraceCheckUtils]: 6: Hoare triple {9088#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {9088#true} is VALID [2018-11-23 12:46:40,337 INFO L273 TraceCheckUtils]: 7: Hoare triple {9088#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {9088#true} is VALID [2018-11-23 12:46:40,338 INFO L273 TraceCheckUtils]: 8: Hoare triple {9088#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {9088#true} is VALID [2018-11-23 12:46:40,338 INFO L273 TraceCheckUtils]: 9: Hoare triple {9088#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {9088#true} is VALID [2018-11-23 12:46:40,338 INFO L273 TraceCheckUtils]: 10: Hoare triple {9088#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {9088#true} is VALID [2018-11-23 12:46:40,338 INFO L273 TraceCheckUtils]: 11: Hoare triple {9088#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {9088#true} is VALID [2018-11-23 12:46:40,338 INFO L273 TraceCheckUtils]: 12: Hoare triple {9088#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {9088#true} is VALID [2018-11-23 12:46:40,338 INFO L273 TraceCheckUtils]: 13: Hoare triple {9088#true} assume !false; {9088#true} is VALID [2018-11-23 12:46:40,339 INFO L273 TraceCheckUtils]: 14: Hoare triple {9088#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {9088#true} is VALID [2018-11-23 12:46:40,339 INFO L273 TraceCheckUtils]: 15: Hoare triple {9088#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {9088#true} is VALID [2018-11-23 12:46:40,339 INFO L273 TraceCheckUtils]: 16: Hoare triple {9088#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {9088#true} is VALID [2018-11-23 12:46:40,339 INFO L273 TraceCheckUtils]: 17: Hoare triple {9088#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {9088#true} is VALID [2018-11-23 12:46:40,339 INFO L273 TraceCheckUtils]: 18: Hoare triple {9088#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {9088#true} is VALID [2018-11-23 12:46:40,339 INFO L273 TraceCheckUtils]: 19: Hoare triple {9088#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {9088#true} is VALID [2018-11-23 12:46:40,339 INFO L273 TraceCheckUtils]: 20: Hoare triple {9088#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {9088#true} is VALID [2018-11-23 12:46:40,339 INFO L273 TraceCheckUtils]: 21: Hoare triple {9088#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {9088#true} is VALID [2018-11-23 12:46:40,343 INFO L273 TraceCheckUtils]: 22: Hoare triple {9088#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {9088#true} is VALID [2018-11-23 12:46:40,343 INFO L273 TraceCheckUtils]: 23: Hoare triple {9088#true} assume 8464 == #t~mem27;havoc #t~mem27; {9088#true} is VALID [2018-11-23 12:46:40,343 INFO L273 TraceCheckUtils]: 24: Hoare triple {9088#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {9088#true} is VALID [2018-11-23 12:46:40,343 INFO L273 TraceCheckUtils]: 25: Hoare triple {9088#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {9088#true} is VALID [2018-11-23 12:46:40,357 INFO L273 TraceCheckUtils]: 26: Hoare triple {9088#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {9090#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:40,362 INFO L273 TraceCheckUtils]: 27: Hoare triple {9090#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {9090#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:40,362 INFO L273 TraceCheckUtils]: 28: Hoare triple {9090#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {9090#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:40,365 INFO L273 TraceCheckUtils]: 29: Hoare triple {9090#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {9090#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:40,365 INFO L273 TraceCheckUtils]: 30: Hoare triple {9090#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {9090#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:40,365 INFO L273 TraceCheckUtils]: 31: Hoare triple {9090#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {9090#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:40,366 INFO L273 TraceCheckUtils]: 32: Hoare triple {9090#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {9090#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:40,366 INFO L273 TraceCheckUtils]: 33: Hoare triple {9090#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {9090#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:40,366 INFO L273 TraceCheckUtils]: 34: Hoare triple {9090#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {9090#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:40,367 INFO L273 TraceCheckUtils]: 35: Hoare triple {9090#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {9090#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:40,367 INFO L273 TraceCheckUtils]: 36: Hoare triple {9090#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {9091#(= |ssl3_accept_#t~mem24| 8496)} is VALID [2018-11-23 12:46:40,367 INFO L273 TraceCheckUtils]: 37: Hoare triple {9091#(= |ssl3_accept_#t~mem24| 8496)} assume 8480 == #t~mem24;havoc #t~mem24; {9089#false} is VALID [2018-11-23 12:46:40,367 INFO L273 TraceCheckUtils]: 38: Hoare triple {9089#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {9089#false} is VALID [2018-11-23 12:46:40,368 INFO L273 TraceCheckUtils]: 39: Hoare triple {9089#false} assume !(~ret~0 <= 0);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem65.base, 844 + #t~mem65.offset, 4);havoc #t~mem65.base, #t~mem65.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,368 INFO L273 TraceCheckUtils]: 40: Hoare triple {9089#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,368 INFO L273 TraceCheckUtils]: 41: Hoare triple {9089#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {9089#false} is VALID [2018-11-23 12:46:40,368 INFO L273 TraceCheckUtils]: 42: Hoare triple {9089#false} ~skip~0 := 0; {9089#false} is VALID [2018-11-23 12:46:40,368 INFO L273 TraceCheckUtils]: 43: Hoare triple {9089#false} assume !false; {9089#false} is VALID [2018-11-23 12:46:40,368 INFO L273 TraceCheckUtils]: 44: Hoare triple {9089#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,369 INFO L273 TraceCheckUtils]: 45: Hoare triple {9089#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,369 INFO L273 TraceCheckUtils]: 46: Hoare triple {9089#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,369 INFO L273 TraceCheckUtils]: 47: Hoare triple {9089#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,369 INFO L273 TraceCheckUtils]: 48: Hoare triple {9089#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,369 INFO L273 TraceCheckUtils]: 49: Hoare triple {9089#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,370 INFO L273 TraceCheckUtils]: 50: Hoare triple {9089#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,370 INFO L273 TraceCheckUtils]: 51: Hoare triple {9089#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,370 INFO L273 TraceCheckUtils]: 52: Hoare triple {9089#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,370 INFO L273 TraceCheckUtils]: 53: Hoare triple {9089#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,370 INFO L273 TraceCheckUtils]: 54: Hoare triple {9089#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,371 INFO L273 TraceCheckUtils]: 55: Hoare triple {9089#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,371 INFO L273 TraceCheckUtils]: 56: Hoare triple {9089#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,371 INFO L273 TraceCheckUtils]: 57: Hoare triple {9089#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,371 INFO L273 TraceCheckUtils]: 58: Hoare triple {9089#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,371 INFO L273 TraceCheckUtils]: 59: Hoare triple {9089#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,371 INFO L273 TraceCheckUtils]: 60: Hoare triple {9089#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,372 INFO L273 TraceCheckUtils]: 61: Hoare triple {9089#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,372 INFO L273 TraceCheckUtils]: 62: Hoare triple {9089#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,372 INFO L273 TraceCheckUtils]: 63: Hoare triple {9089#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,372 INFO L273 TraceCheckUtils]: 64: Hoare triple {9089#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,372 INFO L273 TraceCheckUtils]: 65: Hoare triple {9089#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,372 INFO L273 TraceCheckUtils]: 66: Hoare triple {9089#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,372 INFO L273 TraceCheckUtils]: 67: Hoare triple {9089#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,372 INFO L273 TraceCheckUtils]: 68: Hoare triple {9089#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,373 INFO L273 TraceCheckUtils]: 69: Hoare triple {9089#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,373 INFO L273 TraceCheckUtils]: 70: Hoare triple {9089#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,373 INFO L273 TraceCheckUtils]: 71: Hoare triple {9089#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,373 INFO L273 TraceCheckUtils]: 72: Hoare triple {9089#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,373 INFO L273 TraceCheckUtils]: 73: Hoare triple {9089#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,373 INFO L273 TraceCheckUtils]: 74: Hoare triple {9089#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,373 INFO L273 TraceCheckUtils]: 75: Hoare triple {9089#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,373 INFO L273 TraceCheckUtils]: 76: Hoare triple {9089#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {9089#false} is VALID [2018-11-23 12:46:40,374 INFO L273 TraceCheckUtils]: 77: Hoare triple {9089#false} assume 8672 == #t~mem51;havoc #t~mem51; {9089#false} is VALID [2018-11-23 12:46:40,374 INFO L273 TraceCheckUtils]: 78: Hoare triple {9089#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {9089#false} is VALID [2018-11-23 12:46:40,374 INFO L273 TraceCheckUtils]: 79: Hoare triple {9089#false} assume 4 == ~blastFlag~0; {9089#false} is VALID [2018-11-23 12:46:40,374 INFO L273 TraceCheckUtils]: 80: Hoare triple {9089#false} assume !false; {9089#false} is VALID [2018-11-23 12:46:40,377 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:46:40,378 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:40,378 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:40,378 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 12:46:40,378 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:40,378 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:40,453 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 81 edges. 81 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:40,453 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:40,454 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:40,454 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:40,454 INFO L87 Difference]: Start difference. First operand 171 states and 255 transitions. Second operand 4 states. [2018-11-23 12:46:41,415 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:41,416 INFO L93 Difference]: Finished difference Result 338 states and 509 transitions. [2018-11-23 12:46:41,416 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:41,416 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 12:46:41,416 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:41,416 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:41,419 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 460 transitions. [2018-11-23 12:46:41,419 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:41,423 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 460 transitions. [2018-11-23 12:46:41,423 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 460 transitions. [2018-11-23 12:46:41,877 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 460 edges. 460 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:41,881 INFO L225 Difference]: With dead ends: 338 [2018-11-23 12:46:41,881 INFO L226 Difference]: Without dead ends: 192 [2018-11-23 12:46:41,882 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:41,882 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 192 states. [2018-11-23 12:46:41,930 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 192 to 171. [2018-11-23 12:46:41,930 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:41,931 INFO L82 GeneralOperation]: Start isEquivalent. First operand 192 states. Second operand 171 states. [2018-11-23 12:46:41,931 INFO L74 IsIncluded]: Start isIncluded. First operand 192 states. Second operand 171 states. [2018-11-23 12:46:41,931 INFO L87 Difference]: Start difference. First operand 192 states. Second operand 171 states. [2018-11-23 12:46:41,935 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:41,935 INFO L93 Difference]: Finished difference Result 192 states and 281 transitions. [2018-11-23 12:46:41,936 INFO L276 IsEmpty]: Start isEmpty. Operand 192 states and 281 transitions. [2018-11-23 12:46:41,936 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:41,936 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:41,936 INFO L74 IsIncluded]: Start isIncluded. First operand 171 states. Second operand 192 states. [2018-11-23 12:46:41,936 INFO L87 Difference]: Start difference. First operand 171 states. Second operand 192 states. [2018-11-23 12:46:41,939 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:41,939 INFO L93 Difference]: Finished difference Result 192 states and 281 transitions. [2018-11-23 12:46:41,940 INFO L276 IsEmpty]: Start isEmpty. Operand 192 states and 281 transitions. [2018-11-23 12:46:41,940 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:41,940 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:41,940 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:41,940 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:41,940 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 171 states. [2018-11-23 12:46:41,943 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 254 transitions. [2018-11-23 12:46:41,943 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 254 transitions. Word has length 81 [2018-11-23 12:46:41,943 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:41,943 INFO L480 AbstractCegarLoop]: Abstraction has 171 states and 254 transitions. [2018-11-23 12:46:41,943 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:41,943 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 254 transitions. [2018-11-23 12:46:41,944 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2018-11-23 12:46:41,944 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:41,944 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:41,944 INFO L423 AbstractCegarLoop]: === Iteration 12 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:41,945 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:41,945 INFO L82 PathProgramCache]: Analyzing trace with hash -471659379, now seen corresponding path program 1 times [2018-11-23 12:46:41,945 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:41,945 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:41,946 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:41,946 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:41,946 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:41,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:42,099 INFO L256 TraceCheckUtils]: 0: Hoare triple {10084#true} call ULTIMATE.init(); {10084#true} is VALID [2018-11-23 12:46:42,099 INFO L273 TraceCheckUtils]: 1: Hoare triple {10084#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {10084#true} is VALID [2018-11-23 12:46:42,100 INFO L273 TraceCheckUtils]: 2: Hoare triple {10084#true} assume true; {10084#true} is VALID [2018-11-23 12:46:42,100 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {10084#true} {10084#true} #607#return; {10084#true} is VALID [2018-11-23 12:46:42,100 INFO L256 TraceCheckUtils]: 4: Hoare triple {10084#true} call #t~ret139 := main(); {10084#true} is VALID [2018-11-23 12:46:42,100 INFO L273 TraceCheckUtils]: 5: Hoare triple {10084#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {10084#true} is VALID [2018-11-23 12:46:42,101 INFO L256 TraceCheckUtils]: 6: Hoare triple {10084#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {10084#true} is VALID [2018-11-23 12:46:42,101 INFO L273 TraceCheckUtils]: 7: Hoare triple {10084#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {10084#true} is VALID [2018-11-23 12:46:42,101 INFO L273 TraceCheckUtils]: 8: Hoare triple {10084#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {10084#true} is VALID [2018-11-23 12:46:42,101 INFO L273 TraceCheckUtils]: 9: Hoare triple {10084#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {10084#true} is VALID [2018-11-23 12:46:42,101 INFO L273 TraceCheckUtils]: 10: Hoare triple {10084#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {10084#true} is VALID [2018-11-23 12:46:42,102 INFO L273 TraceCheckUtils]: 11: Hoare triple {10084#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {10084#true} is VALID [2018-11-23 12:46:42,102 INFO L273 TraceCheckUtils]: 12: Hoare triple {10084#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {10084#true} is VALID [2018-11-23 12:46:42,102 INFO L273 TraceCheckUtils]: 13: Hoare triple {10084#true} assume !false; {10084#true} is VALID [2018-11-23 12:46:42,102 INFO L273 TraceCheckUtils]: 14: Hoare triple {10084#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {10084#true} is VALID [2018-11-23 12:46:42,102 INFO L273 TraceCheckUtils]: 15: Hoare triple {10084#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {10084#true} is VALID [2018-11-23 12:46:42,103 INFO L273 TraceCheckUtils]: 16: Hoare triple {10084#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {10084#true} is VALID [2018-11-23 12:46:42,103 INFO L273 TraceCheckUtils]: 17: Hoare triple {10084#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {10084#true} is VALID [2018-11-23 12:46:42,103 INFO L273 TraceCheckUtils]: 18: Hoare triple {10084#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {10084#true} is VALID [2018-11-23 12:46:42,103 INFO L273 TraceCheckUtils]: 19: Hoare triple {10084#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {10084#true} is VALID [2018-11-23 12:46:42,103 INFO L273 TraceCheckUtils]: 20: Hoare triple {10084#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {10084#true} is VALID [2018-11-23 12:46:42,103 INFO L273 TraceCheckUtils]: 21: Hoare triple {10084#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {10084#true} is VALID [2018-11-23 12:46:42,104 INFO L273 TraceCheckUtils]: 22: Hoare triple {10084#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {10084#true} is VALID [2018-11-23 12:46:42,104 INFO L273 TraceCheckUtils]: 23: Hoare triple {10084#true} assume 8464 == #t~mem27;havoc #t~mem27; {10084#true} is VALID [2018-11-23 12:46:42,104 INFO L273 TraceCheckUtils]: 24: Hoare triple {10084#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {10084#true} is VALID [2018-11-23 12:46:42,104 INFO L273 TraceCheckUtils]: 25: Hoare triple {10084#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {10084#true} is VALID [2018-11-23 12:46:42,118 INFO L273 TraceCheckUtils]: 26: Hoare triple {10084#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {10086#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:42,127 INFO L273 TraceCheckUtils]: 27: Hoare triple {10086#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {10086#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:42,140 INFO L273 TraceCheckUtils]: 28: Hoare triple {10086#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {10086#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:42,140 INFO L273 TraceCheckUtils]: 29: Hoare triple {10086#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {10086#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:42,142 INFO L273 TraceCheckUtils]: 30: Hoare triple {10086#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {10086#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:42,142 INFO L273 TraceCheckUtils]: 31: Hoare triple {10086#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {10086#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:42,145 INFO L273 TraceCheckUtils]: 32: Hoare triple {10086#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {10086#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:42,145 INFO L273 TraceCheckUtils]: 33: Hoare triple {10086#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {10086#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:42,148 INFO L273 TraceCheckUtils]: 34: Hoare triple {10086#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {10086#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:42,148 INFO L273 TraceCheckUtils]: 35: Hoare triple {10086#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {10086#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:42,151 INFO L273 TraceCheckUtils]: 36: Hoare triple {10086#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {10086#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:42,151 INFO L273 TraceCheckUtils]: 37: Hoare triple {10086#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {10087#(= |ssl3_accept_#t~mem25| 8496)} is VALID [2018-11-23 12:46:42,151 INFO L273 TraceCheckUtils]: 38: Hoare triple {10087#(= |ssl3_accept_#t~mem25| 8496)} assume 8481 == #t~mem25;havoc #t~mem25; {10085#false} is VALID [2018-11-23 12:46:42,152 INFO L273 TraceCheckUtils]: 39: Hoare triple {10085#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {10085#false} is VALID [2018-11-23 12:46:42,152 INFO L273 TraceCheckUtils]: 40: Hoare triple {10085#false} assume !(~ret~0 <= 0);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem65.base, 844 + #t~mem65.offset, 4);havoc #t~mem65.base, #t~mem65.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,152 INFO L273 TraceCheckUtils]: 41: Hoare triple {10085#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,152 INFO L273 TraceCheckUtils]: 42: Hoare triple {10085#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {10085#false} is VALID [2018-11-23 12:46:42,152 INFO L273 TraceCheckUtils]: 43: Hoare triple {10085#false} ~skip~0 := 0; {10085#false} is VALID [2018-11-23 12:46:42,152 INFO L273 TraceCheckUtils]: 44: Hoare triple {10085#false} assume !false; {10085#false} is VALID [2018-11-23 12:46:42,152 INFO L273 TraceCheckUtils]: 45: Hoare triple {10085#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,153 INFO L273 TraceCheckUtils]: 46: Hoare triple {10085#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,153 INFO L273 TraceCheckUtils]: 47: Hoare triple {10085#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,153 INFO L273 TraceCheckUtils]: 48: Hoare triple {10085#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,153 INFO L273 TraceCheckUtils]: 49: Hoare triple {10085#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,153 INFO L273 TraceCheckUtils]: 50: Hoare triple {10085#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,153 INFO L273 TraceCheckUtils]: 51: Hoare triple {10085#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,153 INFO L273 TraceCheckUtils]: 52: Hoare triple {10085#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,154 INFO L273 TraceCheckUtils]: 53: Hoare triple {10085#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,154 INFO L273 TraceCheckUtils]: 54: Hoare triple {10085#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,154 INFO L273 TraceCheckUtils]: 55: Hoare triple {10085#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,154 INFO L273 TraceCheckUtils]: 56: Hoare triple {10085#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,154 INFO L273 TraceCheckUtils]: 57: Hoare triple {10085#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,155 INFO L273 TraceCheckUtils]: 58: Hoare triple {10085#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,155 INFO L273 TraceCheckUtils]: 59: Hoare triple {10085#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,155 INFO L273 TraceCheckUtils]: 60: Hoare triple {10085#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,155 INFO L273 TraceCheckUtils]: 61: Hoare triple {10085#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,155 INFO L273 TraceCheckUtils]: 62: Hoare triple {10085#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,155 INFO L273 TraceCheckUtils]: 63: Hoare triple {10085#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,156 INFO L273 TraceCheckUtils]: 64: Hoare triple {10085#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,156 INFO L273 TraceCheckUtils]: 65: Hoare triple {10085#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,156 INFO L273 TraceCheckUtils]: 66: Hoare triple {10085#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,156 INFO L273 TraceCheckUtils]: 67: Hoare triple {10085#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,156 INFO L273 TraceCheckUtils]: 68: Hoare triple {10085#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,157 INFO L273 TraceCheckUtils]: 69: Hoare triple {10085#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,157 INFO L273 TraceCheckUtils]: 70: Hoare triple {10085#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,157 INFO L273 TraceCheckUtils]: 71: Hoare triple {10085#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,157 INFO L273 TraceCheckUtils]: 72: Hoare triple {10085#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,157 INFO L273 TraceCheckUtils]: 73: Hoare triple {10085#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,157 INFO L273 TraceCheckUtils]: 74: Hoare triple {10085#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,158 INFO L273 TraceCheckUtils]: 75: Hoare triple {10085#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,158 INFO L273 TraceCheckUtils]: 76: Hoare triple {10085#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,158 INFO L273 TraceCheckUtils]: 77: Hoare triple {10085#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {10085#false} is VALID [2018-11-23 12:46:42,158 INFO L273 TraceCheckUtils]: 78: Hoare triple {10085#false} assume 8672 == #t~mem51;havoc #t~mem51; {10085#false} is VALID [2018-11-23 12:46:42,158 INFO L273 TraceCheckUtils]: 79: Hoare triple {10085#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {10085#false} is VALID [2018-11-23 12:46:42,159 INFO L273 TraceCheckUtils]: 80: Hoare triple {10085#false} assume 4 == ~blastFlag~0; {10085#false} is VALID [2018-11-23 12:46:42,159 INFO L273 TraceCheckUtils]: 81: Hoare triple {10085#false} assume !false; {10085#false} is VALID [2018-11-23 12:46:42,164 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 32 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:46:42,164 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:42,164 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:42,164 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-23 12:46:42,165 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:42,165 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:42,328 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 82 edges. 82 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:42,328 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:42,328 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:42,328 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:42,329 INFO L87 Difference]: Start difference. First operand 171 states and 254 transitions. Second operand 4 states. [2018-11-23 12:46:43,634 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:43,635 INFO L93 Difference]: Finished difference Result 336 states and 505 transitions. [2018-11-23 12:46:43,635 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:43,635 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-23 12:46:43,635 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:43,635 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:43,638 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 457 transitions. [2018-11-23 12:46:43,638 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:43,640 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 457 transitions. [2018-11-23 12:46:43,641 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 457 transitions. [2018-11-23 12:46:44,068 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 457 edges. 457 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:44,073 INFO L225 Difference]: With dead ends: 336 [2018-11-23 12:46:44,073 INFO L226 Difference]: Without dead ends: 190 [2018-11-23 12:46:44,073 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:44,074 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 190 states. [2018-11-23 12:46:44,103 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 190 to 171. [2018-11-23 12:46:44,104 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:44,104 INFO L82 GeneralOperation]: Start isEquivalent. First operand 190 states. Second operand 171 states. [2018-11-23 12:46:44,104 INFO L74 IsIncluded]: Start isIncluded. First operand 190 states. Second operand 171 states. [2018-11-23 12:46:44,104 INFO L87 Difference]: Start difference. First operand 190 states. Second operand 171 states. [2018-11-23 12:46:44,108 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:44,108 INFO L93 Difference]: Finished difference Result 190 states and 278 transitions. [2018-11-23 12:46:44,108 INFO L276 IsEmpty]: Start isEmpty. Operand 190 states and 278 transitions. [2018-11-23 12:46:44,108 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:44,109 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:44,109 INFO L74 IsIncluded]: Start isIncluded. First operand 171 states. Second operand 190 states. [2018-11-23 12:46:44,109 INFO L87 Difference]: Start difference. First operand 171 states. Second operand 190 states. [2018-11-23 12:46:44,112 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:44,113 INFO L93 Difference]: Finished difference Result 190 states and 278 transitions. [2018-11-23 12:46:44,113 INFO L276 IsEmpty]: Start isEmpty. Operand 190 states and 278 transitions. [2018-11-23 12:46:44,113 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:44,114 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:44,114 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:44,114 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:44,114 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 171 states. [2018-11-23 12:46:44,117 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 253 transitions. [2018-11-23 12:46:44,117 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 253 transitions. Word has length 82 [2018-11-23 12:46:44,117 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:44,117 INFO L480 AbstractCegarLoop]: Abstraction has 171 states and 253 transitions. [2018-11-23 12:46:44,118 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:44,118 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 253 transitions. [2018-11-23 12:46:44,118 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2018-11-23 12:46:44,119 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:44,119 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:44,119 INFO L423 AbstractCegarLoop]: === Iteration 13 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:44,119 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:44,119 INFO L82 PathProgramCache]: Analyzing trace with hash -1765794414, now seen corresponding path program 1 times [2018-11-23 12:46:44,119 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:44,120 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:44,121 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:44,121 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:44,121 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:44,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:44,723 INFO L256 TraceCheckUtils]: 0: Hoare triple {11073#true} call ULTIMATE.init(); {11073#true} is VALID [2018-11-23 12:46:44,724 INFO L273 TraceCheckUtils]: 1: Hoare triple {11073#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {11073#true} is VALID [2018-11-23 12:46:44,724 INFO L273 TraceCheckUtils]: 2: Hoare triple {11073#true} assume true; {11073#true} is VALID [2018-11-23 12:46:44,724 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {11073#true} {11073#true} #607#return; {11073#true} is VALID [2018-11-23 12:46:44,724 INFO L256 TraceCheckUtils]: 4: Hoare triple {11073#true} call #t~ret139 := main(); {11073#true} is VALID [2018-11-23 12:46:44,725 INFO L273 TraceCheckUtils]: 5: Hoare triple {11073#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {11073#true} is VALID [2018-11-23 12:46:44,725 INFO L256 TraceCheckUtils]: 6: Hoare triple {11073#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {11073#true} is VALID [2018-11-23 12:46:44,725 INFO L273 TraceCheckUtils]: 7: Hoare triple {11073#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {11073#true} is VALID [2018-11-23 12:46:44,725 INFO L273 TraceCheckUtils]: 8: Hoare triple {11073#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {11073#true} is VALID [2018-11-23 12:46:44,725 INFO L273 TraceCheckUtils]: 9: Hoare triple {11073#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {11073#true} is VALID [2018-11-23 12:46:44,726 INFO L273 TraceCheckUtils]: 10: Hoare triple {11073#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {11073#true} is VALID [2018-11-23 12:46:44,726 INFO L273 TraceCheckUtils]: 11: Hoare triple {11073#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {11073#true} is VALID [2018-11-23 12:46:44,726 INFO L273 TraceCheckUtils]: 12: Hoare triple {11073#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {11073#true} is VALID [2018-11-23 12:46:44,726 INFO L273 TraceCheckUtils]: 13: Hoare triple {11073#true} assume !false; {11073#true} is VALID [2018-11-23 12:46:44,726 INFO L273 TraceCheckUtils]: 14: Hoare triple {11073#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {11073#true} is VALID [2018-11-23 12:46:44,726 INFO L273 TraceCheckUtils]: 15: Hoare triple {11073#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {11073#true} is VALID [2018-11-23 12:46:44,727 INFO L273 TraceCheckUtils]: 16: Hoare triple {11073#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {11073#true} is VALID [2018-11-23 12:46:44,727 INFO L273 TraceCheckUtils]: 17: Hoare triple {11073#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {11073#true} is VALID [2018-11-23 12:46:44,727 INFO L273 TraceCheckUtils]: 18: Hoare triple {11073#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {11073#true} is VALID [2018-11-23 12:46:44,727 INFO L273 TraceCheckUtils]: 19: Hoare triple {11073#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {11073#true} is VALID [2018-11-23 12:46:44,727 INFO L273 TraceCheckUtils]: 20: Hoare triple {11073#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {11073#true} is VALID [2018-11-23 12:46:44,727 INFO L273 TraceCheckUtils]: 21: Hoare triple {11073#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {11073#true} is VALID [2018-11-23 12:46:44,728 INFO L273 TraceCheckUtils]: 22: Hoare triple {11073#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {11073#true} is VALID [2018-11-23 12:46:44,728 INFO L273 TraceCheckUtils]: 23: Hoare triple {11073#true} assume 8464 == #t~mem27;havoc #t~mem27; {11073#true} is VALID [2018-11-23 12:46:44,728 INFO L273 TraceCheckUtils]: 24: Hoare triple {11073#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {11073#true} is VALID [2018-11-23 12:46:44,728 INFO L273 TraceCheckUtils]: 25: Hoare triple {11073#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {11073#true} is VALID [2018-11-23 12:46:44,741 INFO L273 TraceCheckUtils]: 26: Hoare triple {11073#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:44,754 INFO L273 TraceCheckUtils]: 27: Hoare triple {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:44,771 INFO L273 TraceCheckUtils]: 28: Hoare triple {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:44,780 INFO L273 TraceCheckUtils]: 29: Hoare triple {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:44,792 INFO L273 TraceCheckUtils]: 30: Hoare triple {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:44,805 INFO L273 TraceCheckUtils]: 31: Hoare triple {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:44,817 INFO L273 TraceCheckUtils]: 32: Hoare triple {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:44,833 INFO L273 TraceCheckUtils]: 33: Hoare triple {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:44,842 INFO L273 TraceCheckUtils]: 34: Hoare triple {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:44,854 INFO L273 TraceCheckUtils]: 35: Hoare triple {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:44,867 INFO L273 TraceCheckUtils]: 36: Hoare triple {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:44,881 INFO L273 TraceCheckUtils]: 37: Hoare triple {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:44,890 INFO L273 TraceCheckUtils]: 38: Hoare triple {11075#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {11076#(= |ssl3_accept_#t~mem26| 8496)} is VALID [2018-11-23 12:46:44,902 INFO L273 TraceCheckUtils]: 39: Hoare triple {11076#(= |ssl3_accept_#t~mem26| 8496)} assume 8482 == #t~mem26;havoc #t~mem26; {11074#false} is VALID [2018-11-23 12:46:44,903 INFO L273 TraceCheckUtils]: 40: Hoare triple {11074#false} call write~int(3, ~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,903 INFO L273 TraceCheckUtils]: 41: Hoare triple {11074#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,903 INFO L273 TraceCheckUtils]: 42: Hoare triple {11074#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {11074#false} is VALID [2018-11-23 12:46:44,903 INFO L273 TraceCheckUtils]: 43: Hoare triple {11074#false} ~skip~0 := 0; {11074#false} is VALID [2018-11-23 12:46:44,903 INFO L273 TraceCheckUtils]: 44: Hoare triple {11074#false} assume !false; {11074#false} is VALID [2018-11-23 12:46:44,903 INFO L273 TraceCheckUtils]: 45: Hoare triple {11074#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,904 INFO L273 TraceCheckUtils]: 46: Hoare triple {11074#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,904 INFO L273 TraceCheckUtils]: 47: Hoare triple {11074#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,904 INFO L273 TraceCheckUtils]: 48: Hoare triple {11074#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,904 INFO L273 TraceCheckUtils]: 49: Hoare triple {11074#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,904 INFO L273 TraceCheckUtils]: 50: Hoare triple {11074#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,904 INFO L273 TraceCheckUtils]: 51: Hoare triple {11074#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,905 INFO L273 TraceCheckUtils]: 52: Hoare triple {11074#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,905 INFO L273 TraceCheckUtils]: 53: Hoare triple {11074#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,905 INFO L273 TraceCheckUtils]: 54: Hoare triple {11074#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,905 INFO L273 TraceCheckUtils]: 55: Hoare triple {11074#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,905 INFO L273 TraceCheckUtils]: 56: Hoare triple {11074#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,905 INFO L273 TraceCheckUtils]: 57: Hoare triple {11074#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,906 INFO L273 TraceCheckUtils]: 58: Hoare triple {11074#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,906 INFO L273 TraceCheckUtils]: 59: Hoare triple {11074#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,906 INFO L273 TraceCheckUtils]: 60: Hoare triple {11074#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,906 INFO L273 TraceCheckUtils]: 61: Hoare triple {11074#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,906 INFO L273 TraceCheckUtils]: 62: Hoare triple {11074#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,906 INFO L273 TraceCheckUtils]: 63: Hoare triple {11074#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,907 INFO L273 TraceCheckUtils]: 64: Hoare triple {11074#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,907 INFO L273 TraceCheckUtils]: 65: Hoare triple {11074#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,907 INFO L273 TraceCheckUtils]: 66: Hoare triple {11074#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,907 INFO L273 TraceCheckUtils]: 67: Hoare triple {11074#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,907 INFO L273 TraceCheckUtils]: 68: Hoare triple {11074#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,907 INFO L273 TraceCheckUtils]: 69: Hoare triple {11074#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,908 INFO L273 TraceCheckUtils]: 70: Hoare triple {11074#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,908 INFO L273 TraceCheckUtils]: 71: Hoare triple {11074#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,908 INFO L273 TraceCheckUtils]: 72: Hoare triple {11074#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,908 INFO L273 TraceCheckUtils]: 73: Hoare triple {11074#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,908 INFO L273 TraceCheckUtils]: 74: Hoare triple {11074#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,908 INFO L273 TraceCheckUtils]: 75: Hoare triple {11074#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,909 INFO L273 TraceCheckUtils]: 76: Hoare triple {11074#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,909 INFO L273 TraceCheckUtils]: 77: Hoare triple {11074#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {11074#false} is VALID [2018-11-23 12:46:44,909 INFO L273 TraceCheckUtils]: 78: Hoare triple {11074#false} assume 8672 == #t~mem51;havoc #t~mem51; {11074#false} is VALID [2018-11-23 12:46:44,909 INFO L273 TraceCheckUtils]: 79: Hoare triple {11074#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {11074#false} is VALID [2018-11-23 12:46:44,909 INFO L273 TraceCheckUtils]: 80: Hoare triple {11074#false} assume 4 == ~blastFlag~0; {11074#false} is VALID [2018-11-23 12:46:44,909 INFO L273 TraceCheckUtils]: 81: Hoare triple {11074#false} assume !false; {11074#false} is VALID [2018-11-23 12:46:44,915 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 34 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:46:44,915 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:44,915 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:44,916 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-23 12:46:44,916 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:44,916 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:45,116 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 82 edges. 82 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:45,116 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:45,117 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:45,117 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:45,117 INFO L87 Difference]: Start difference. First operand 171 states and 253 transitions. Second operand 4 states. [2018-11-23 12:46:46,139 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:46,139 INFO L93 Difference]: Finished difference Result 335 states and 502 transitions. [2018-11-23 12:46:46,139 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:46,139 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-23 12:46:46,139 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:46,140 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:46,142 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 455 transitions. [2018-11-23 12:46:46,142 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:46,144 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 455 transitions. [2018-11-23 12:46:46,144 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 455 transitions. [2018-11-23 12:46:46,592 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 455 edges. 455 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:46,595 INFO L225 Difference]: With dead ends: 335 [2018-11-23 12:46:46,595 INFO L226 Difference]: Without dead ends: 189 [2018-11-23 12:46:46,596 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:46,596 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 189 states. [2018-11-23 12:46:46,618 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 189 to 171. [2018-11-23 12:46:46,618 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:46,619 INFO L82 GeneralOperation]: Start isEquivalent. First operand 189 states. Second operand 171 states. [2018-11-23 12:46:46,619 INFO L74 IsIncluded]: Start isIncluded. First operand 189 states. Second operand 171 states. [2018-11-23 12:46:46,619 INFO L87 Difference]: Start difference. First operand 189 states. Second operand 171 states. [2018-11-23 12:46:46,622 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:46,623 INFO L93 Difference]: Finished difference Result 189 states and 276 transitions. [2018-11-23 12:46:46,623 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 276 transitions. [2018-11-23 12:46:46,623 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:46,623 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:46,623 INFO L74 IsIncluded]: Start isIncluded. First operand 171 states. Second operand 189 states. [2018-11-23 12:46:46,623 INFO L87 Difference]: Start difference. First operand 171 states. Second operand 189 states. [2018-11-23 12:46:46,626 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:46,626 INFO L93 Difference]: Finished difference Result 189 states and 276 transitions. [2018-11-23 12:46:46,626 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 276 transitions. [2018-11-23 12:46:46,627 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:46,627 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:46,627 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:46,627 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:46,627 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 171 states. [2018-11-23 12:46:46,629 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 252 transitions. [2018-11-23 12:46:46,629 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 252 transitions. Word has length 82 [2018-11-23 12:46:46,630 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:46,630 INFO L480 AbstractCegarLoop]: Abstraction has 171 states and 252 transitions. [2018-11-23 12:46:46,630 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:46,630 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 252 transitions. [2018-11-23 12:46:46,631 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2018-11-23 12:46:46,631 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:46,631 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:46,631 INFO L423 AbstractCegarLoop]: === Iteration 14 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:46,631 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:46,632 INFO L82 PathProgramCache]: Analyzing trace with hash 1790898314, now seen corresponding path program 1 times [2018-11-23 12:46:46,632 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:46,632 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:46,633 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:46,633 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:46,633 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:46,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:46,868 INFO L256 TraceCheckUtils]: 0: Hoare triple {12058#true} call ULTIMATE.init(); {12058#true} is VALID [2018-11-23 12:46:46,868 INFO L273 TraceCheckUtils]: 1: Hoare triple {12058#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {12058#true} is VALID [2018-11-23 12:46:46,868 INFO L273 TraceCheckUtils]: 2: Hoare triple {12058#true} assume true; {12058#true} is VALID [2018-11-23 12:46:46,869 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {12058#true} {12058#true} #607#return; {12058#true} is VALID [2018-11-23 12:46:46,869 INFO L256 TraceCheckUtils]: 4: Hoare triple {12058#true} call #t~ret139 := main(); {12058#true} is VALID [2018-11-23 12:46:46,869 INFO L273 TraceCheckUtils]: 5: Hoare triple {12058#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {12058#true} is VALID [2018-11-23 12:46:46,869 INFO L256 TraceCheckUtils]: 6: Hoare triple {12058#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {12058#true} is VALID [2018-11-23 12:46:46,870 INFO L273 TraceCheckUtils]: 7: Hoare triple {12058#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {12058#true} is VALID [2018-11-23 12:46:46,870 INFO L273 TraceCheckUtils]: 8: Hoare triple {12058#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {12058#true} is VALID [2018-11-23 12:46:46,870 INFO L273 TraceCheckUtils]: 9: Hoare triple {12058#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {12058#true} is VALID [2018-11-23 12:46:46,870 INFO L273 TraceCheckUtils]: 10: Hoare triple {12058#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {12058#true} is VALID [2018-11-23 12:46:46,870 INFO L273 TraceCheckUtils]: 11: Hoare triple {12058#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {12058#true} is VALID [2018-11-23 12:46:46,870 INFO L273 TraceCheckUtils]: 12: Hoare triple {12058#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {12058#true} is VALID [2018-11-23 12:46:46,871 INFO L273 TraceCheckUtils]: 13: Hoare triple {12058#true} assume !false; {12058#true} is VALID [2018-11-23 12:46:46,871 INFO L273 TraceCheckUtils]: 14: Hoare triple {12058#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {12058#true} is VALID [2018-11-23 12:46:46,871 INFO L273 TraceCheckUtils]: 15: Hoare triple {12058#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {12058#true} is VALID [2018-11-23 12:46:46,871 INFO L273 TraceCheckUtils]: 16: Hoare triple {12058#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {12058#true} is VALID [2018-11-23 12:46:46,871 INFO L273 TraceCheckUtils]: 17: Hoare triple {12058#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {12058#true} is VALID [2018-11-23 12:46:46,871 INFO L273 TraceCheckUtils]: 18: Hoare triple {12058#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {12058#true} is VALID [2018-11-23 12:46:46,871 INFO L273 TraceCheckUtils]: 19: Hoare triple {12058#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {12058#true} is VALID [2018-11-23 12:46:46,871 INFO L273 TraceCheckUtils]: 20: Hoare triple {12058#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {12058#true} is VALID [2018-11-23 12:46:46,872 INFO L273 TraceCheckUtils]: 21: Hoare triple {12058#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {12058#true} is VALID [2018-11-23 12:46:46,872 INFO L273 TraceCheckUtils]: 22: Hoare triple {12058#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {12058#true} is VALID [2018-11-23 12:46:46,872 INFO L273 TraceCheckUtils]: 23: Hoare triple {12058#true} assume 8464 == #t~mem27;havoc #t~mem27; {12058#true} is VALID [2018-11-23 12:46:46,872 INFO L273 TraceCheckUtils]: 24: Hoare triple {12058#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {12058#true} is VALID [2018-11-23 12:46:46,872 INFO L273 TraceCheckUtils]: 25: Hoare triple {12058#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {12058#true} is VALID [2018-11-23 12:46:46,872 INFO L273 TraceCheckUtils]: 26: Hoare triple {12058#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {12058#true} is VALID [2018-11-23 12:46:46,872 INFO L273 TraceCheckUtils]: 27: Hoare triple {12058#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {12058#true} is VALID [2018-11-23 12:46:46,872 INFO L273 TraceCheckUtils]: 28: Hoare triple {12058#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {12058#true} is VALID [2018-11-23 12:46:46,873 INFO L273 TraceCheckUtils]: 29: Hoare triple {12058#true} ~skip~0 := 0; {12058#true} is VALID [2018-11-23 12:46:46,873 INFO L273 TraceCheckUtils]: 30: Hoare triple {12058#true} assume !false; {12058#true} is VALID [2018-11-23 12:46:46,873 INFO L273 TraceCheckUtils]: 31: Hoare triple {12058#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {12058#true} is VALID [2018-11-23 12:46:46,873 INFO L273 TraceCheckUtils]: 32: Hoare triple {12058#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {12058#true} is VALID [2018-11-23 12:46:46,873 INFO L273 TraceCheckUtils]: 33: Hoare triple {12058#true} assume 16384 == #t~mem20;havoc #t~mem20; {12058#true} is VALID [2018-11-23 12:46:46,873 INFO L273 TraceCheckUtils]: 34: Hoare triple {12058#true} call write~int(1, ~s.base, 36 + ~s.offset, 4); {12058#true} is VALID [2018-11-23 12:46:46,873 INFO L273 TraceCheckUtils]: 35: Hoare triple {12058#true} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {12058#true} is VALID [2018-11-23 12:46:46,873 INFO L273 TraceCheckUtils]: 36: Hoare triple {12058#true} call #t~mem54 := read~int(~s.base, ~s.offset, 4); {12058#true} is VALID [2018-11-23 12:46:46,873 INFO L273 TraceCheckUtils]: 37: Hoare triple {12058#true} assume !(3 != #t~mem54 / 256);havoc #t~mem54;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {12058#true} is VALID [2018-11-23 12:46:46,874 INFO L273 TraceCheckUtils]: 38: Hoare triple {12058#true} assume !(0 == (#t~mem55.base + #t~mem55.offset) % 4294967296);havoc #t~mem55.base, #t~mem55.offset; {12058#true} is VALID [2018-11-23 12:46:46,874 INFO L273 TraceCheckUtils]: 39: Hoare triple {12058#true} assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~tmp___4~0 := #t~nondet57;havoc #t~nondet57; {12058#true} is VALID [2018-11-23 12:46:46,874 INFO L273 TraceCheckUtils]: 40: Hoare triple {12058#true} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem58 := read~int(~s.base, 52 + ~s.offset, 4); {12058#true} is VALID [2018-11-23 12:46:46,875 INFO L273 TraceCheckUtils]: 41: Hoare triple {12058#true} assume !(12292 != #t~mem58);havoc #t~mem58;call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem63 := read~int(#t~mem62.base, 76 + #t~mem62.offset, 4);call write~int(1 + #t~mem63, #t~mem62.base, 76 + #t~mem62.offset, 4);havoc #t~mem63;havoc #t~mem62.base, #t~mem62.offset;call write~int(8480, ~s.base, 52 + ~s.offset, 4); {12060#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:46,875 INFO L273 TraceCheckUtils]: 42: Hoare triple {12060#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {12060#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:46,876 INFO L273 TraceCheckUtils]: 43: Hoare triple {12060#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {12060#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:46,876 INFO L273 TraceCheckUtils]: 44: Hoare triple {12060#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {12060#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:46,876 INFO L273 TraceCheckUtils]: 45: Hoare triple {12060#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !false; {12060#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:46,877 INFO L273 TraceCheckUtils]: 46: Hoare triple {12060#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {12060#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:46,877 INFO L273 TraceCheckUtils]: 47: Hoare triple {12060#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {12060#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:46,877 INFO L273 TraceCheckUtils]: 48: Hoare triple {12060#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {12060#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:46,878 INFO L273 TraceCheckUtils]: 49: Hoare triple {12060#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {12060#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:46,878 INFO L273 TraceCheckUtils]: 50: Hoare triple {12060#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {12060#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:46,879 INFO L273 TraceCheckUtils]: 51: Hoare triple {12060#(= 8480 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {12061#(= 8480 |ssl3_accept_#t~mem24|)} is VALID [2018-11-23 12:46:46,880 INFO L273 TraceCheckUtils]: 52: Hoare triple {12061#(= 8480 |ssl3_accept_#t~mem24|)} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,880 INFO L273 TraceCheckUtils]: 53: Hoare triple {12059#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,880 INFO L273 TraceCheckUtils]: 54: Hoare triple {12059#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,880 INFO L273 TraceCheckUtils]: 55: Hoare triple {12059#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,881 INFO L273 TraceCheckUtils]: 56: Hoare triple {12059#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,881 INFO L273 TraceCheckUtils]: 57: Hoare triple {12059#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,881 INFO L273 TraceCheckUtils]: 58: Hoare triple {12059#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,881 INFO L273 TraceCheckUtils]: 59: Hoare triple {12059#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,881 INFO L273 TraceCheckUtils]: 60: Hoare triple {12059#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,882 INFO L273 TraceCheckUtils]: 61: Hoare triple {12059#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,882 INFO L273 TraceCheckUtils]: 62: Hoare triple {12059#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,882 INFO L273 TraceCheckUtils]: 63: Hoare triple {12059#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,882 INFO L273 TraceCheckUtils]: 64: Hoare triple {12059#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,882 INFO L273 TraceCheckUtils]: 65: Hoare triple {12059#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,883 INFO L273 TraceCheckUtils]: 66: Hoare triple {12059#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,883 INFO L273 TraceCheckUtils]: 67: Hoare triple {12059#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,883 INFO L273 TraceCheckUtils]: 68: Hoare triple {12059#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,883 INFO L273 TraceCheckUtils]: 69: Hoare triple {12059#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,883 INFO L273 TraceCheckUtils]: 70: Hoare triple {12059#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,884 INFO L273 TraceCheckUtils]: 71: Hoare triple {12059#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,884 INFO L273 TraceCheckUtils]: 72: Hoare triple {12059#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,884 INFO L273 TraceCheckUtils]: 73: Hoare triple {12059#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,884 INFO L273 TraceCheckUtils]: 74: Hoare triple {12059#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,884 INFO L273 TraceCheckUtils]: 75: Hoare triple {12059#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,885 INFO L273 TraceCheckUtils]: 76: Hoare triple {12059#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,885 INFO L273 TraceCheckUtils]: 77: Hoare triple {12059#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,885 INFO L273 TraceCheckUtils]: 78: Hoare triple {12059#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {12059#false} is VALID [2018-11-23 12:46:46,885 INFO L273 TraceCheckUtils]: 79: Hoare triple {12059#false} assume 8672 == #t~mem51;havoc #t~mem51; {12059#false} is VALID [2018-11-23 12:46:46,885 INFO L273 TraceCheckUtils]: 80: Hoare triple {12059#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {12059#false} is VALID [2018-11-23 12:46:46,885 INFO L273 TraceCheckUtils]: 81: Hoare triple {12059#false} assume 4 == ~blastFlag~0; {12059#false} is VALID [2018-11-23 12:46:46,885 INFO L273 TraceCheckUtils]: 82: Hoare triple {12059#false} assume !false; {12059#false} is VALID [2018-11-23 12:46:46,889 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2018-11-23 12:46:46,890 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:46,890 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:46,890 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 83 [2018-11-23 12:46:46,890 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:46,891 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:46,975 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 80 edges. 80 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:46,975 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:46,976 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:46,976 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:46,976 INFO L87 Difference]: Start difference. First operand 171 states and 252 transitions. Second operand 4 states. [2018-11-23 12:46:48,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:48,012 INFO L93 Difference]: Finished difference Result 346 states and 519 transitions. [2018-11-23 12:46:48,012 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:48,012 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 83 [2018-11-23 12:46:48,012 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:48,012 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:48,014 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 438 transitions. [2018-11-23 12:46:48,014 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:48,016 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 438 transitions. [2018-11-23 12:46:48,016 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 438 transitions. [2018-11-23 12:46:48,451 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 438 edges. 438 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:48,455 INFO L225 Difference]: With dead ends: 346 [2018-11-23 12:46:48,455 INFO L226 Difference]: Without dead ends: 200 [2018-11-23 12:46:48,456 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:48,457 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 200 states. [2018-11-23 12:46:48,483 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 200 to 187. [2018-11-23 12:46:48,483 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:48,483 INFO L82 GeneralOperation]: Start isEquivalent. First operand 200 states. Second operand 187 states. [2018-11-23 12:46:48,484 INFO L74 IsIncluded]: Start isIncluded. First operand 200 states. Second operand 187 states. [2018-11-23 12:46:48,484 INFO L87 Difference]: Start difference. First operand 200 states. Second operand 187 states. [2018-11-23 12:46:48,487 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:48,488 INFO L93 Difference]: Finished difference Result 200 states and 294 transitions. [2018-11-23 12:46:48,488 INFO L276 IsEmpty]: Start isEmpty. Operand 200 states and 294 transitions. [2018-11-23 12:46:48,488 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:48,488 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:48,489 INFO L74 IsIncluded]: Start isIncluded. First operand 187 states. Second operand 200 states. [2018-11-23 12:46:48,489 INFO L87 Difference]: Start difference. First operand 187 states. Second operand 200 states. [2018-11-23 12:46:48,493 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:48,493 INFO L93 Difference]: Finished difference Result 200 states and 294 transitions. [2018-11-23 12:46:48,493 INFO L276 IsEmpty]: Start isEmpty. Operand 200 states and 294 transitions. [2018-11-23 12:46:48,494 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:48,494 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:48,494 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:48,494 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:48,494 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 187 states. [2018-11-23 12:46:48,498 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 187 states to 187 states and 278 transitions. [2018-11-23 12:46:48,498 INFO L78 Accepts]: Start accepts. Automaton has 187 states and 278 transitions. Word has length 83 [2018-11-23 12:46:48,498 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:48,498 INFO L480 AbstractCegarLoop]: Abstraction has 187 states and 278 transitions. [2018-11-23 12:46:48,499 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:48,499 INFO L276 IsEmpty]: Start isEmpty. Operand 187 states and 278 transitions. [2018-11-23 12:46:48,499 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2018-11-23 12:46:48,500 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:48,500 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:48,500 INFO L423 AbstractCegarLoop]: === Iteration 15 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:48,500 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:48,500 INFO L82 PathProgramCache]: Analyzing trace with hash 765876923, now seen corresponding path program 1 times [2018-11-23 12:46:48,501 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:48,501 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:48,502 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:48,502 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:48,502 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:48,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:48,715 INFO L256 TraceCheckUtils]: 0: Hoare triple {13095#true} call ULTIMATE.init(); {13095#true} is VALID [2018-11-23 12:46:48,715 INFO L273 TraceCheckUtils]: 1: Hoare triple {13095#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {13095#true} is VALID [2018-11-23 12:46:48,716 INFO L273 TraceCheckUtils]: 2: Hoare triple {13095#true} assume true; {13095#true} is VALID [2018-11-23 12:46:48,716 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {13095#true} {13095#true} #607#return; {13095#true} is VALID [2018-11-23 12:46:48,716 INFO L256 TraceCheckUtils]: 4: Hoare triple {13095#true} call #t~ret139 := main(); {13095#true} is VALID [2018-11-23 12:46:48,716 INFO L273 TraceCheckUtils]: 5: Hoare triple {13095#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {13095#true} is VALID [2018-11-23 12:46:48,717 INFO L256 TraceCheckUtils]: 6: Hoare triple {13095#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {13095#true} is VALID [2018-11-23 12:46:48,717 INFO L273 TraceCheckUtils]: 7: Hoare triple {13095#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {13095#true} is VALID [2018-11-23 12:46:48,717 INFO L273 TraceCheckUtils]: 8: Hoare triple {13095#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {13095#true} is VALID [2018-11-23 12:46:48,717 INFO L273 TraceCheckUtils]: 9: Hoare triple {13095#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {13095#true} is VALID [2018-11-23 12:46:48,717 INFO L273 TraceCheckUtils]: 10: Hoare triple {13095#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {13095#true} is VALID [2018-11-23 12:46:48,718 INFO L273 TraceCheckUtils]: 11: Hoare triple {13095#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {13095#true} is VALID [2018-11-23 12:46:48,718 INFO L273 TraceCheckUtils]: 12: Hoare triple {13095#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {13095#true} is VALID [2018-11-23 12:46:48,718 INFO L273 TraceCheckUtils]: 13: Hoare triple {13095#true} assume !false; {13095#true} is VALID [2018-11-23 12:46:48,718 INFO L273 TraceCheckUtils]: 14: Hoare triple {13095#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {13095#true} is VALID [2018-11-23 12:46:48,718 INFO L273 TraceCheckUtils]: 15: Hoare triple {13095#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {13095#true} is VALID [2018-11-23 12:46:48,719 INFO L273 TraceCheckUtils]: 16: Hoare triple {13095#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {13095#true} is VALID [2018-11-23 12:46:48,719 INFO L273 TraceCheckUtils]: 17: Hoare triple {13095#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {13095#true} is VALID [2018-11-23 12:46:48,719 INFO L273 TraceCheckUtils]: 18: Hoare triple {13095#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {13095#true} is VALID [2018-11-23 12:46:48,719 INFO L273 TraceCheckUtils]: 19: Hoare triple {13095#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {13095#true} is VALID [2018-11-23 12:46:48,719 INFO L273 TraceCheckUtils]: 20: Hoare triple {13095#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {13095#true} is VALID [2018-11-23 12:46:48,720 INFO L273 TraceCheckUtils]: 21: Hoare triple {13095#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {13095#true} is VALID [2018-11-23 12:46:48,720 INFO L273 TraceCheckUtils]: 22: Hoare triple {13095#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {13095#true} is VALID [2018-11-23 12:46:48,720 INFO L273 TraceCheckUtils]: 23: Hoare triple {13095#true} assume 8464 == #t~mem27;havoc #t~mem27; {13095#true} is VALID [2018-11-23 12:46:48,720 INFO L273 TraceCheckUtils]: 24: Hoare triple {13095#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {13095#true} is VALID [2018-11-23 12:46:48,720 INFO L273 TraceCheckUtils]: 25: Hoare triple {13095#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {13095#true} is VALID [2018-11-23 12:46:48,721 INFO L273 TraceCheckUtils]: 26: Hoare triple {13095#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {13097#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:48,722 INFO L273 TraceCheckUtils]: 27: Hoare triple {13097#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {13097#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:48,722 INFO L273 TraceCheckUtils]: 28: Hoare triple {13097#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {13097#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:48,722 INFO L273 TraceCheckUtils]: 29: Hoare triple {13097#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {13097#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:48,723 INFO L273 TraceCheckUtils]: 30: Hoare triple {13097#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {13097#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:48,723 INFO L273 TraceCheckUtils]: 31: Hoare triple {13097#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {13097#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:48,724 INFO L273 TraceCheckUtils]: 32: Hoare triple {13097#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {13098#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem20| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:46:48,724 INFO L273 TraceCheckUtils]: 33: Hoare triple {13098#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem20| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume 16384 == #t~mem20;havoc #t~mem20; {13096#false} is VALID [2018-11-23 12:46:48,724 INFO L273 TraceCheckUtils]: 34: Hoare triple {13096#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,724 INFO L273 TraceCheckUtils]: 35: Hoare triple {13096#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {13096#false} is VALID [2018-11-23 12:46:48,724 INFO L273 TraceCheckUtils]: 36: Hoare triple {13096#false} call #t~mem54 := read~int(~s.base, ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,725 INFO L273 TraceCheckUtils]: 37: Hoare triple {13096#false} assume !(3 != #t~mem54 / 256);havoc #t~mem54;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,725 INFO L273 TraceCheckUtils]: 38: Hoare triple {13096#false} assume !(0 == (#t~mem55.base + #t~mem55.offset) % 4294967296);havoc #t~mem55.base, #t~mem55.offset; {13096#false} is VALID [2018-11-23 12:46:48,725 INFO L273 TraceCheckUtils]: 39: Hoare triple {13096#false} assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~tmp___4~0 := #t~nondet57;havoc #t~nondet57; {13096#false} is VALID [2018-11-23 12:46:48,725 INFO L273 TraceCheckUtils]: 40: Hoare triple {13096#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem58 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,725 INFO L273 TraceCheckUtils]: 41: Hoare triple {13096#false} assume 12292 != #t~mem58;havoc #t~mem58;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~tmp___5~0 := #t~nondet59;havoc #t~nondet59; {13096#false} is VALID [2018-11-23 12:46:48,725 INFO L273 TraceCheckUtils]: 42: Hoare triple {13096#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem61 := read~int(#t~mem60.base, 72 + #t~mem60.offset, 4);call write~int(1 + #t~mem61, #t~mem60.base, 72 + #t~mem60.offset, 4);havoc #t~mem60.base, #t~mem60.offset;havoc #t~mem61; {13096#false} is VALID [2018-11-23 12:46:48,726 INFO L273 TraceCheckUtils]: 43: Hoare triple {13096#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,726 INFO L273 TraceCheckUtils]: 44: Hoare triple {13096#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {13096#false} is VALID [2018-11-23 12:46:48,726 INFO L273 TraceCheckUtils]: 45: Hoare triple {13096#false} ~skip~0 := 0; {13096#false} is VALID [2018-11-23 12:46:48,726 INFO L273 TraceCheckUtils]: 46: Hoare triple {13096#false} assume !false; {13096#false} is VALID [2018-11-23 12:46:48,727 INFO L273 TraceCheckUtils]: 47: Hoare triple {13096#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,727 INFO L273 TraceCheckUtils]: 48: Hoare triple {13096#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,727 INFO L273 TraceCheckUtils]: 49: Hoare triple {13096#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,727 INFO L273 TraceCheckUtils]: 50: Hoare triple {13096#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,727 INFO L273 TraceCheckUtils]: 51: Hoare triple {13096#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,727 INFO L273 TraceCheckUtils]: 52: Hoare triple {13096#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,727 INFO L273 TraceCheckUtils]: 53: Hoare triple {13096#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,727 INFO L273 TraceCheckUtils]: 54: Hoare triple {13096#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,728 INFO L273 TraceCheckUtils]: 55: Hoare triple {13096#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,728 INFO L273 TraceCheckUtils]: 56: Hoare triple {13096#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,728 INFO L273 TraceCheckUtils]: 57: Hoare triple {13096#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,728 INFO L273 TraceCheckUtils]: 58: Hoare triple {13096#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,728 INFO L273 TraceCheckUtils]: 59: Hoare triple {13096#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,728 INFO L273 TraceCheckUtils]: 60: Hoare triple {13096#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,728 INFO L273 TraceCheckUtils]: 61: Hoare triple {13096#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,728 INFO L273 TraceCheckUtils]: 62: Hoare triple {13096#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,729 INFO L273 TraceCheckUtils]: 63: Hoare triple {13096#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,729 INFO L273 TraceCheckUtils]: 64: Hoare triple {13096#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,729 INFO L273 TraceCheckUtils]: 65: Hoare triple {13096#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,729 INFO L273 TraceCheckUtils]: 66: Hoare triple {13096#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,729 INFO L273 TraceCheckUtils]: 67: Hoare triple {13096#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,729 INFO L273 TraceCheckUtils]: 68: Hoare triple {13096#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,729 INFO L273 TraceCheckUtils]: 69: Hoare triple {13096#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,729 INFO L273 TraceCheckUtils]: 70: Hoare triple {13096#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,729 INFO L273 TraceCheckUtils]: 71: Hoare triple {13096#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,730 INFO L273 TraceCheckUtils]: 72: Hoare triple {13096#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,730 INFO L273 TraceCheckUtils]: 73: Hoare triple {13096#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,730 INFO L273 TraceCheckUtils]: 74: Hoare triple {13096#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,730 INFO L273 TraceCheckUtils]: 75: Hoare triple {13096#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,730 INFO L273 TraceCheckUtils]: 76: Hoare triple {13096#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,730 INFO L273 TraceCheckUtils]: 77: Hoare triple {13096#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,730 INFO L273 TraceCheckUtils]: 78: Hoare triple {13096#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,730 INFO L273 TraceCheckUtils]: 79: Hoare triple {13096#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {13096#false} is VALID [2018-11-23 12:46:48,731 INFO L273 TraceCheckUtils]: 80: Hoare triple {13096#false} assume 8672 == #t~mem51;havoc #t~mem51; {13096#false} is VALID [2018-11-23 12:46:48,731 INFO L273 TraceCheckUtils]: 81: Hoare triple {13096#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {13096#false} is VALID [2018-11-23 12:46:48,731 INFO L273 TraceCheckUtils]: 82: Hoare triple {13096#false} assume 4 == ~blastFlag~0; {13096#false} is VALID [2018-11-23 12:46:48,731 INFO L273 TraceCheckUtils]: 83: Hoare triple {13096#false} assume !false; {13096#false} is VALID [2018-11-23 12:46:48,735 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:46:48,736 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:48,736 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:48,736 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 84 [2018-11-23 12:46:48,736 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:48,737 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:48,826 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 84 edges. 84 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:48,826 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:48,827 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:48,827 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:48,827 INFO L87 Difference]: Start difference. First operand 187 states and 278 transitions. Second operand 4 states. [2018-11-23 12:46:49,651 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:49,651 INFO L93 Difference]: Finished difference Result 367 states and 552 transitions. [2018-11-23 12:46:49,651 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:49,651 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 84 [2018-11-23 12:46:49,652 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:49,652 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:49,655 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 454 transitions. [2018-11-23 12:46:49,655 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:49,658 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 454 transitions. [2018-11-23 12:46:49,658 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 454 transitions. [2018-11-23 12:46:50,179 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 454 edges. 454 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:50,184 INFO L225 Difference]: With dead ends: 367 [2018-11-23 12:46:50,184 INFO L226 Difference]: Without dead ends: 205 [2018-11-23 12:46:50,185 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:50,185 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 205 states. [2018-11-23 12:46:50,241 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 205 to 187. [2018-11-23 12:46:50,241 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:50,241 INFO L82 GeneralOperation]: Start isEquivalent. First operand 205 states. Second operand 187 states. [2018-11-23 12:46:50,241 INFO L74 IsIncluded]: Start isIncluded. First operand 205 states. Second operand 187 states. [2018-11-23 12:46:50,241 INFO L87 Difference]: Start difference. First operand 205 states. Second operand 187 states. [2018-11-23 12:46:50,245 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:50,246 INFO L93 Difference]: Finished difference Result 205 states and 301 transitions. [2018-11-23 12:46:50,246 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 301 transitions. [2018-11-23 12:46:50,246 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:50,246 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:50,247 INFO L74 IsIncluded]: Start isIncluded. First operand 187 states. Second operand 205 states. [2018-11-23 12:46:50,247 INFO L87 Difference]: Start difference. First operand 187 states. Second operand 205 states. [2018-11-23 12:46:50,251 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:50,251 INFO L93 Difference]: Finished difference Result 205 states and 301 transitions. [2018-11-23 12:46:50,251 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 301 transitions. [2018-11-23 12:46:50,252 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:50,252 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:50,252 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:50,252 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:50,252 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 187 states. [2018-11-23 12:46:50,256 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 187 states to 187 states and 277 transitions. [2018-11-23 12:46:50,256 INFO L78 Accepts]: Start accepts. Automaton has 187 states and 277 transitions. Word has length 84 [2018-11-23 12:46:50,256 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:50,257 INFO L480 AbstractCegarLoop]: Abstraction has 187 states and 277 transitions. [2018-11-23 12:46:50,257 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:50,257 INFO L276 IsEmpty]: Start isEmpty. Operand 187 states and 277 transitions. [2018-11-23 12:46:50,258 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2018-11-23 12:46:50,258 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:50,258 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:50,258 INFO L423 AbstractCegarLoop]: === Iteration 16 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:50,258 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:50,259 INFO L82 PathProgramCache]: Analyzing trace with hash -1403590617, now seen corresponding path program 1 times [2018-11-23 12:46:50,259 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:50,259 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:50,260 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:50,260 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:50,260 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:50,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:51,059 INFO L256 TraceCheckUtils]: 0: Hoare triple {14164#true} call ULTIMATE.init(); {14164#true} is VALID [2018-11-23 12:46:51,059 INFO L273 TraceCheckUtils]: 1: Hoare triple {14164#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {14164#true} is VALID [2018-11-23 12:46:51,059 INFO L273 TraceCheckUtils]: 2: Hoare triple {14164#true} assume true; {14164#true} is VALID [2018-11-23 12:46:51,060 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {14164#true} {14164#true} #607#return; {14164#true} is VALID [2018-11-23 12:46:51,060 INFO L256 TraceCheckUtils]: 4: Hoare triple {14164#true} call #t~ret139 := main(); {14164#true} is VALID [2018-11-23 12:46:51,060 INFO L273 TraceCheckUtils]: 5: Hoare triple {14164#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {14164#true} is VALID [2018-11-23 12:46:51,060 INFO L256 TraceCheckUtils]: 6: Hoare triple {14164#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {14164#true} is VALID [2018-11-23 12:46:51,060 INFO L273 TraceCheckUtils]: 7: Hoare triple {14164#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {14164#true} is VALID [2018-11-23 12:46:51,060 INFO L273 TraceCheckUtils]: 8: Hoare triple {14164#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {14164#true} is VALID [2018-11-23 12:46:51,060 INFO L273 TraceCheckUtils]: 9: Hoare triple {14164#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {14164#true} is VALID [2018-11-23 12:46:51,060 INFO L273 TraceCheckUtils]: 10: Hoare triple {14164#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {14164#true} is VALID [2018-11-23 12:46:51,061 INFO L273 TraceCheckUtils]: 11: Hoare triple {14164#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {14164#true} is VALID [2018-11-23 12:46:51,061 INFO L273 TraceCheckUtils]: 12: Hoare triple {14164#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {14164#true} is VALID [2018-11-23 12:46:51,061 INFO L273 TraceCheckUtils]: 13: Hoare triple {14164#true} assume !false; {14164#true} is VALID [2018-11-23 12:46:51,061 INFO L273 TraceCheckUtils]: 14: Hoare triple {14164#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {14164#true} is VALID [2018-11-23 12:46:51,061 INFO L273 TraceCheckUtils]: 15: Hoare triple {14164#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {14164#true} is VALID [2018-11-23 12:46:51,061 INFO L273 TraceCheckUtils]: 16: Hoare triple {14164#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {14164#true} is VALID [2018-11-23 12:46:51,061 INFO L273 TraceCheckUtils]: 17: Hoare triple {14164#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {14164#true} is VALID [2018-11-23 12:46:51,061 INFO L273 TraceCheckUtils]: 18: Hoare triple {14164#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {14164#true} is VALID [2018-11-23 12:46:51,062 INFO L273 TraceCheckUtils]: 19: Hoare triple {14164#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {14164#true} is VALID [2018-11-23 12:46:51,062 INFO L273 TraceCheckUtils]: 20: Hoare triple {14164#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {14164#true} is VALID [2018-11-23 12:46:51,062 INFO L273 TraceCheckUtils]: 21: Hoare triple {14164#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {14164#true} is VALID [2018-11-23 12:46:51,062 INFO L273 TraceCheckUtils]: 22: Hoare triple {14164#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {14164#true} is VALID [2018-11-23 12:46:51,062 INFO L273 TraceCheckUtils]: 23: Hoare triple {14164#true} assume 8464 == #t~mem27;havoc #t~mem27; {14164#true} is VALID [2018-11-23 12:46:51,062 INFO L273 TraceCheckUtils]: 24: Hoare triple {14164#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {14164#true} is VALID [2018-11-23 12:46:51,062 INFO L273 TraceCheckUtils]: 25: Hoare triple {14164#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {14164#true} is VALID [2018-11-23 12:46:51,062 INFO L273 TraceCheckUtils]: 26: Hoare triple {14164#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {14164#true} is VALID [2018-11-23 12:46:51,062 INFO L273 TraceCheckUtils]: 27: Hoare triple {14164#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {14164#true} is VALID [2018-11-23 12:46:51,063 INFO L273 TraceCheckUtils]: 28: Hoare triple {14164#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {14164#true} is VALID [2018-11-23 12:46:51,063 INFO L273 TraceCheckUtils]: 29: Hoare triple {14164#true} ~skip~0 := 0; {14164#true} is VALID [2018-11-23 12:46:51,063 INFO L273 TraceCheckUtils]: 30: Hoare triple {14164#true} assume !false; {14164#true} is VALID [2018-11-23 12:46:51,064 INFO L273 TraceCheckUtils]: 31: Hoare triple {14164#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {14166#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) |ssl3_accept_#t~mem19|)} is VALID [2018-11-23 12:46:51,064 INFO L273 TraceCheckUtils]: 32: Hoare triple {14166#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) |ssl3_accept_#t~mem19|)} assume 12292 == #t~mem19;havoc #t~mem19; {14167#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:51,065 INFO L273 TraceCheckUtils]: 33: Hoare triple {14167#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call write~int(1, ~s.base, 40 + ~s.offset, 4); {14167#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:51,066 INFO L273 TraceCheckUtils]: 34: Hoare triple {14167#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call write~int(1, ~s.base, 36 + ~s.offset, 4); {14167#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:51,066 INFO L273 TraceCheckUtils]: 35: Hoare triple {14167#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {14167#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:51,066 INFO L273 TraceCheckUtils]: 36: Hoare triple {14167#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem54 := read~int(~s.base, ~s.offset, 4); {14167#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:51,068 INFO L273 TraceCheckUtils]: 37: Hoare triple {14167#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(3 != #t~mem54 / 256);havoc #t~mem54;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {14167#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:51,069 INFO L273 TraceCheckUtils]: 38: Hoare triple {14167#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(0 == (#t~mem55.base + #t~mem55.offset) % 4294967296);havoc #t~mem55.base, #t~mem55.offset; {14167#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:51,069 INFO L273 TraceCheckUtils]: 39: Hoare triple {14167#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~tmp___4~0 := #t~nondet57;havoc #t~nondet57; {14167#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:51,071 INFO L273 TraceCheckUtils]: 40: Hoare triple {14167#(= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem58 := read~int(~s.base, 52 + ~s.offset, 4); {14168#(= 12292 |ssl3_accept_#t~mem58|)} is VALID [2018-11-23 12:46:51,071 INFO L273 TraceCheckUtils]: 41: Hoare triple {14168#(= 12292 |ssl3_accept_#t~mem58|)} assume 12292 != #t~mem58;havoc #t~mem58;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~tmp___5~0 := #t~nondet59;havoc #t~nondet59; {14165#false} is VALID [2018-11-23 12:46:51,071 INFO L273 TraceCheckUtils]: 42: Hoare triple {14165#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem61 := read~int(#t~mem60.base, 72 + #t~mem60.offset, 4);call write~int(1 + #t~mem61, #t~mem60.base, 72 + #t~mem60.offset, 4);havoc #t~mem60.base, #t~mem60.offset;havoc #t~mem61; {14165#false} is VALID [2018-11-23 12:46:51,072 INFO L273 TraceCheckUtils]: 43: Hoare triple {14165#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,072 INFO L273 TraceCheckUtils]: 44: Hoare triple {14165#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {14165#false} is VALID [2018-11-23 12:46:51,072 INFO L273 TraceCheckUtils]: 45: Hoare triple {14165#false} ~skip~0 := 0; {14165#false} is VALID [2018-11-23 12:46:51,072 INFO L273 TraceCheckUtils]: 46: Hoare triple {14165#false} assume !false; {14165#false} is VALID [2018-11-23 12:46:51,072 INFO L273 TraceCheckUtils]: 47: Hoare triple {14165#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,073 INFO L273 TraceCheckUtils]: 48: Hoare triple {14165#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,073 INFO L273 TraceCheckUtils]: 49: Hoare triple {14165#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,073 INFO L273 TraceCheckUtils]: 50: Hoare triple {14165#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,073 INFO L273 TraceCheckUtils]: 51: Hoare triple {14165#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,073 INFO L273 TraceCheckUtils]: 52: Hoare triple {14165#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,074 INFO L273 TraceCheckUtils]: 53: Hoare triple {14165#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,074 INFO L273 TraceCheckUtils]: 54: Hoare triple {14165#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,074 INFO L273 TraceCheckUtils]: 55: Hoare triple {14165#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,074 INFO L273 TraceCheckUtils]: 56: Hoare triple {14165#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,075 INFO L273 TraceCheckUtils]: 57: Hoare triple {14165#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,075 INFO L273 TraceCheckUtils]: 58: Hoare triple {14165#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,075 INFO L273 TraceCheckUtils]: 59: Hoare triple {14165#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,075 INFO L273 TraceCheckUtils]: 60: Hoare triple {14165#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,075 INFO L273 TraceCheckUtils]: 61: Hoare triple {14165#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,076 INFO L273 TraceCheckUtils]: 62: Hoare triple {14165#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,076 INFO L273 TraceCheckUtils]: 63: Hoare triple {14165#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,076 INFO L273 TraceCheckUtils]: 64: Hoare triple {14165#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,076 INFO L273 TraceCheckUtils]: 65: Hoare triple {14165#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,076 INFO L273 TraceCheckUtils]: 66: Hoare triple {14165#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,076 INFO L273 TraceCheckUtils]: 67: Hoare triple {14165#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,077 INFO L273 TraceCheckUtils]: 68: Hoare triple {14165#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,077 INFO L273 TraceCheckUtils]: 69: Hoare triple {14165#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,077 INFO L273 TraceCheckUtils]: 70: Hoare triple {14165#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,077 INFO L273 TraceCheckUtils]: 71: Hoare triple {14165#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,077 INFO L273 TraceCheckUtils]: 72: Hoare triple {14165#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,077 INFO L273 TraceCheckUtils]: 73: Hoare triple {14165#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,077 INFO L273 TraceCheckUtils]: 74: Hoare triple {14165#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,077 INFO L273 TraceCheckUtils]: 75: Hoare triple {14165#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,077 INFO L273 TraceCheckUtils]: 76: Hoare triple {14165#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,078 INFO L273 TraceCheckUtils]: 77: Hoare triple {14165#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,078 INFO L273 TraceCheckUtils]: 78: Hoare triple {14165#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,078 INFO L273 TraceCheckUtils]: 79: Hoare triple {14165#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {14165#false} is VALID [2018-11-23 12:46:51,078 INFO L273 TraceCheckUtils]: 80: Hoare triple {14165#false} assume 8672 == #t~mem51;havoc #t~mem51; {14165#false} is VALID [2018-11-23 12:46:51,078 INFO L273 TraceCheckUtils]: 81: Hoare triple {14165#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {14165#false} is VALID [2018-11-23 12:46:51,078 INFO L273 TraceCheckUtils]: 82: Hoare triple {14165#false} assume 4 == ~blastFlag~0; {14165#false} is VALID [2018-11-23 12:46:51,078 INFO L273 TraceCheckUtils]: 83: Hoare triple {14165#false} assume !false; {14165#false} is VALID [2018-11-23 12:46:51,082 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 12:46:51,082 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:51,082 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 12:46:51,083 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 84 [2018-11-23 12:46:51,083 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:51,083 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2018-11-23 12:46:51,214 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 83 edges. 83 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:51,214 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 12:46:51,214 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 12:46:51,214 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:51,215 INFO L87 Difference]: Start difference. First operand 187 states and 277 transitions. Second operand 5 states. [2018-11-23 12:46:52,460 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:52,460 INFO L93 Difference]: Finished difference Result 358 states and 538 transitions. [2018-11-23 12:46:52,460 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 12:46:52,460 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 84 [2018-11-23 12:46:52,461 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:52,461 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-23 12:46:52,463 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 407 transitions. [2018-11-23 12:46:52,463 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-23 12:46:52,465 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 407 transitions. [2018-11-23 12:46:52,465 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 407 transitions. [2018-11-23 12:46:52,949 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 407 edges. 407 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:52,953 INFO L225 Difference]: With dead ends: 358 [2018-11-23 12:46:52,953 INFO L226 Difference]: Without dead ends: 196 [2018-11-23 12:46:52,954 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2018-11-23 12:46:52,954 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 196 states. [2018-11-23 12:46:53,034 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 196 to 196. [2018-11-23 12:46:53,034 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:53,034 INFO L82 GeneralOperation]: Start isEquivalent. First operand 196 states. Second operand 196 states. [2018-11-23 12:46:53,035 INFO L74 IsIncluded]: Start isIncluded. First operand 196 states. Second operand 196 states. [2018-11-23 12:46:53,035 INFO L87 Difference]: Start difference. First operand 196 states. Second operand 196 states. [2018-11-23 12:46:53,039 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:53,039 INFO L93 Difference]: Finished difference Result 196 states and 288 transitions. [2018-11-23 12:46:53,039 INFO L276 IsEmpty]: Start isEmpty. Operand 196 states and 288 transitions. [2018-11-23 12:46:53,040 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:53,040 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:53,040 INFO L74 IsIncluded]: Start isIncluded. First operand 196 states. Second operand 196 states. [2018-11-23 12:46:53,040 INFO L87 Difference]: Start difference. First operand 196 states. Second operand 196 states. [2018-11-23 12:46:53,044 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:53,044 INFO L93 Difference]: Finished difference Result 196 states and 288 transitions. [2018-11-23 12:46:53,044 INFO L276 IsEmpty]: Start isEmpty. Operand 196 states and 288 transitions. [2018-11-23 12:46:53,044 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:53,045 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:53,072 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:53,072 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:53,072 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 196 states. [2018-11-23 12:46:53,076 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 196 states to 196 states and 288 transitions. [2018-11-23 12:46:53,076 INFO L78 Accepts]: Start accepts. Automaton has 196 states and 288 transitions. Word has length 84 [2018-11-23 12:46:53,076 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:53,076 INFO L480 AbstractCegarLoop]: Abstraction has 196 states and 288 transitions. [2018-11-23 12:46:53,077 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 12:46:53,077 INFO L276 IsEmpty]: Start isEmpty. Operand 196 states and 288 transitions. [2018-11-23 12:46:53,077 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2018-11-23 12:46:53,078 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:53,078 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:53,078 INFO L423 AbstractCegarLoop]: === Iteration 17 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:53,079 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:53,079 INFO L82 PathProgramCache]: Analyzing trace with hash -868983876, now seen corresponding path program 1 times [2018-11-23 12:46:53,079 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:53,079 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:53,080 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:53,080 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:53,080 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:53,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:53,223 INFO L256 TraceCheckUtils]: 0: Hoare triple {15216#true} call ULTIMATE.init(); {15216#true} is VALID [2018-11-23 12:46:53,223 INFO L273 TraceCheckUtils]: 1: Hoare triple {15216#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {15216#true} is VALID [2018-11-23 12:46:53,224 INFO L273 TraceCheckUtils]: 2: Hoare triple {15216#true} assume true; {15216#true} is VALID [2018-11-23 12:46:53,224 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {15216#true} {15216#true} #607#return; {15216#true} is VALID [2018-11-23 12:46:53,224 INFO L256 TraceCheckUtils]: 4: Hoare triple {15216#true} call #t~ret139 := main(); {15216#true} is VALID [2018-11-23 12:46:53,224 INFO L273 TraceCheckUtils]: 5: Hoare triple {15216#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {15216#true} is VALID [2018-11-23 12:46:53,224 INFO L256 TraceCheckUtils]: 6: Hoare triple {15216#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {15216#true} is VALID [2018-11-23 12:46:53,224 INFO L273 TraceCheckUtils]: 7: Hoare triple {15216#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {15216#true} is VALID [2018-11-23 12:46:53,225 INFO L273 TraceCheckUtils]: 8: Hoare triple {15216#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {15216#true} is VALID [2018-11-23 12:46:53,225 INFO L273 TraceCheckUtils]: 9: Hoare triple {15216#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {15216#true} is VALID [2018-11-23 12:46:53,225 INFO L273 TraceCheckUtils]: 10: Hoare triple {15216#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {15216#true} is VALID [2018-11-23 12:46:53,225 INFO L273 TraceCheckUtils]: 11: Hoare triple {15216#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {15216#true} is VALID [2018-11-23 12:46:53,225 INFO L273 TraceCheckUtils]: 12: Hoare triple {15216#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {15216#true} is VALID [2018-11-23 12:46:53,225 INFO L273 TraceCheckUtils]: 13: Hoare triple {15216#true} assume !false; {15216#true} is VALID [2018-11-23 12:46:53,225 INFO L273 TraceCheckUtils]: 14: Hoare triple {15216#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {15216#true} is VALID [2018-11-23 12:46:53,225 INFO L273 TraceCheckUtils]: 15: Hoare triple {15216#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {15216#true} is VALID [2018-11-23 12:46:53,226 INFO L273 TraceCheckUtils]: 16: Hoare triple {15216#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {15216#true} is VALID [2018-11-23 12:46:53,226 INFO L273 TraceCheckUtils]: 17: Hoare triple {15216#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {15216#true} is VALID [2018-11-23 12:46:53,226 INFO L273 TraceCheckUtils]: 18: Hoare triple {15216#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {15216#true} is VALID [2018-11-23 12:46:53,226 INFO L273 TraceCheckUtils]: 19: Hoare triple {15216#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {15216#true} is VALID [2018-11-23 12:46:53,226 INFO L273 TraceCheckUtils]: 20: Hoare triple {15216#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {15216#true} is VALID [2018-11-23 12:46:53,226 INFO L273 TraceCheckUtils]: 21: Hoare triple {15216#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {15216#true} is VALID [2018-11-23 12:46:53,226 INFO L273 TraceCheckUtils]: 22: Hoare triple {15216#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {15216#true} is VALID [2018-11-23 12:46:53,226 INFO L273 TraceCheckUtils]: 23: Hoare triple {15216#true} assume 8464 == #t~mem27;havoc #t~mem27; {15216#true} is VALID [2018-11-23 12:46:53,227 INFO L273 TraceCheckUtils]: 24: Hoare triple {15216#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {15216#true} is VALID [2018-11-23 12:46:53,227 INFO L273 TraceCheckUtils]: 25: Hoare triple {15216#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {15216#true} is VALID [2018-11-23 12:46:53,228 INFO L273 TraceCheckUtils]: 26: Hoare triple {15216#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {15218#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:53,228 INFO L273 TraceCheckUtils]: 27: Hoare triple {15218#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {15218#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:53,228 INFO L273 TraceCheckUtils]: 28: Hoare triple {15218#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {15218#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:53,229 INFO L273 TraceCheckUtils]: 29: Hoare triple {15218#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {15218#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:53,229 INFO L273 TraceCheckUtils]: 30: Hoare triple {15218#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {15218#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:53,229 INFO L273 TraceCheckUtils]: 31: Hoare triple {15218#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {15218#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:53,230 INFO L273 TraceCheckUtils]: 32: Hoare triple {15218#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {15218#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:53,231 INFO L273 TraceCheckUtils]: 33: Hoare triple {15218#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {15219#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem21| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:46:53,232 INFO L273 TraceCheckUtils]: 34: Hoare triple {15219#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem21| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume 8192 == #t~mem21;havoc #t~mem21; {15217#false} is VALID [2018-11-23 12:46:53,232 INFO L273 TraceCheckUtils]: 35: Hoare triple {15217#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,232 INFO L273 TraceCheckUtils]: 36: Hoare triple {15217#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {15217#false} is VALID [2018-11-23 12:46:53,232 INFO L273 TraceCheckUtils]: 37: Hoare triple {15217#false} call #t~mem54 := read~int(~s.base, ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,233 INFO L273 TraceCheckUtils]: 38: Hoare triple {15217#false} assume !(3 != #t~mem54 / 256);havoc #t~mem54;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,233 INFO L273 TraceCheckUtils]: 39: Hoare triple {15217#false} assume !(0 == (#t~mem55.base + #t~mem55.offset) % 4294967296);havoc #t~mem55.base, #t~mem55.offset; {15217#false} is VALID [2018-11-23 12:46:53,233 INFO L273 TraceCheckUtils]: 40: Hoare triple {15217#false} assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~tmp___4~0 := #t~nondet57;havoc #t~nondet57; {15217#false} is VALID [2018-11-23 12:46:53,233 INFO L273 TraceCheckUtils]: 41: Hoare triple {15217#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem58 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,233 INFO L273 TraceCheckUtils]: 42: Hoare triple {15217#false} assume 12292 != #t~mem58;havoc #t~mem58;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~tmp___5~0 := #t~nondet59;havoc #t~nondet59; {15217#false} is VALID [2018-11-23 12:46:53,233 INFO L273 TraceCheckUtils]: 43: Hoare triple {15217#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem61 := read~int(#t~mem60.base, 72 + #t~mem60.offset, 4);call write~int(1 + #t~mem61, #t~mem60.base, 72 + #t~mem60.offset, 4);havoc #t~mem60.base, #t~mem60.offset;havoc #t~mem61; {15217#false} is VALID [2018-11-23 12:46:53,233 INFO L273 TraceCheckUtils]: 44: Hoare triple {15217#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,233 INFO L273 TraceCheckUtils]: 45: Hoare triple {15217#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {15217#false} is VALID [2018-11-23 12:46:53,234 INFO L273 TraceCheckUtils]: 46: Hoare triple {15217#false} ~skip~0 := 0; {15217#false} is VALID [2018-11-23 12:46:53,234 INFO L273 TraceCheckUtils]: 47: Hoare triple {15217#false} assume !false; {15217#false} is VALID [2018-11-23 12:46:53,234 INFO L273 TraceCheckUtils]: 48: Hoare triple {15217#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,234 INFO L273 TraceCheckUtils]: 49: Hoare triple {15217#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,234 INFO L273 TraceCheckUtils]: 50: Hoare triple {15217#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,234 INFO L273 TraceCheckUtils]: 51: Hoare triple {15217#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,234 INFO L273 TraceCheckUtils]: 52: Hoare triple {15217#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,234 INFO L273 TraceCheckUtils]: 53: Hoare triple {15217#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,235 INFO L273 TraceCheckUtils]: 54: Hoare triple {15217#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,235 INFO L273 TraceCheckUtils]: 55: Hoare triple {15217#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,235 INFO L273 TraceCheckUtils]: 56: Hoare triple {15217#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,235 INFO L273 TraceCheckUtils]: 57: Hoare triple {15217#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,235 INFO L273 TraceCheckUtils]: 58: Hoare triple {15217#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,235 INFO L273 TraceCheckUtils]: 59: Hoare triple {15217#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,235 INFO L273 TraceCheckUtils]: 60: Hoare triple {15217#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,235 INFO L273 TraceCheckUtils]: 61: Hoare triple {15217#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,236 INFO L273 TraceCheckUtils]: 62: Hoare triple {15217#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,236 INFO L273 TraceCheckUtils]: 63: Hoare triple {15217#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,236 INFO L273 TraceCheckUtils]: 64: Hoare triple {15217#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,236 INFO L273 TraceCheckUtils]: 65: Hoare triple {15217#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,236 INFO L273 TraceCheckUtils]: 66: Hoare triple {15217#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,236 INFO L273 TraceCheckUtils]: 67: Hoare triple {15217#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,236 INFO L273 TraceCheckUtils]: 68: Hoare triple {15217#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,236 INFO L273 TraceCheckUtils]: 69: Hoare triple {15217#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,236 INFO L273 TraceCheckUtils]: 70: Hoare triple {15217#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,237 INFO L273 TraceCheckUtils]: 71: Hoare triple {15217#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,237 INFO L273 TraceCheckUtils]: 72: Hoare triple {15217#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,237 INFO L273 TraceCheckUtils]: 73: Hoare triple {15217#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,237 INFO L273 TraceCheckUtils]: 74: Hoare triple {15217#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,237 INFO L273 TraceCheckUtils]: 75: Hoare triple {15217#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,237 INFO L273 TraceCheckUtils]: 76: Hoare triple {15217#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,237 INFO L273 TraceCheckUtils]: 77: Hoare triple {15217#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,237 INFO L273 TraceCheckUtils]: 78: Hoare triple {15217#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,238 INFO L273 TraceCheckUtils]: 79: Hoare triple {15217#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,238 INFO L273 TraceCheckUtils]: 80: Hoare triple {15217#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {15217#false} is VALID [2018-11-23 12:46:53,238 INFO L273 TraceCheckUtils]: 81: Hoare triple {15217#false} assume 8672 == #t~mem51;havoc #t~mem51; {15217#false} is VALID [2018-11-23 12:46:53,238 INFO L273 TraceCheckUtils]: 82: Hoare triple {15217#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {15217#false} is VALID [2018-11-23 12:46:53,238 INFO L273 TraceCheckUtils]: 83: Hoare triple {15217#false} assume 4 == ~blastFlag~0; {15217#false} is VALID [2018-11-23 12:46:53,238 INFO L273 TraceCheckUtils]: 84: Hoare triple {15217#false} assume !false; {15217#false} is VALID [2018-11-23 12:46:53,242 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:46:53,243 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:53,243 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:53,243 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 85 [2018-11-23 12:46:53,243 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:53,244 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:53,330 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 85 edges. 85 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:53,330 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:53,330 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:53,330 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:53,331 INFO L87 Difference]: Start difference. First operand 196 states and 288 transitions. Second operand 4 states. [2018-11-23 12:46:54,222 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:54,222 INFO L93 Difference]: Finished difference Result 394 states and 583 transitions. [2018-11-23 12:46:54,222 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:54,222 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 85 [2018-11-23 12:46:54,222 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:54,222 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:54,224 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 453 transitions. [2018-11-23 12:46:54,224 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:54,226 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 453 transitions. [2018-11-23 12:46:54,227 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 453 transitions. [2018-11-23 12:46:54,682 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 453 edges. 453 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:54,687 INFO L225 Difference]: With dead ends: 394 [2018-11-23 12:46:54,687 INFO L226 Difference]: Without dead ends: 223 [2018-11-23 12:46:54,687 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:54,688 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2018-11-23 12:46:55,106 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 196. [2018-11-23 12:46:55,106 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:55,107 INFO L82 GeneralOperation]: Start isEquivalent. First operand 223 states. Second operand 196 states. [2018-11-23 12:46:55,107 INFO L74 IsIncluded]: Start isIncluded. First operand 223 states. Second operand 196 states. [2018-11-23 12:46:55,107 INFO L87 Difference]: Start difference. First operand 223 states. Second operand 196 states. [2018-11-23 12:46:55,112 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:55,113 INFO L93 Difference]: Finished difference Result 223 states and 322 transitions. [2018-11-23 12:46:55,113 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 322 transitions. [2018-11-23 12:46:55,113 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:55,113 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:55,114 INFO L74 IsIncluded]: Start isIncluded. First operand 196 states. Second operand 223 states. [2018-11-23 12:46:55,114 INFO L87 Difference]: Start difference. First operand 196 states. Second operand 223 states. [2018-11-23 12:46:55,118 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:55,119 INFO L93 Difference]: Finished difference Result 223 states and 322 transitions. [2018-11-23 12:46:55,119 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 322 transitions. [2018-11-23 12:46:55,119 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:55,119 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:55,120 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:55,120 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:55,120 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 196 states. [2018-11-23 12:46:55,124 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 196 states to 196 states and 287 transitions. [2018-11-23 12:46:55,124 INFO L78 Accepts]: Start accepts. Automaton has 196 states and 287 transitions. Word has length 85 [2018-11-23 12:46:55,124 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:55,124 INFO L480 AbstractCegarLoop]: Abstraction has 196 states and 287 transitions. [2018-11-23 12:46:55,124 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:55,124 INFO L276 IsEmpty]: Start isEmpty. Operand 196 states and 287 transitions. [2018-11-23 12:46:55,125 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2018-11-23 12:46:55,125 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:55,125 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:55,126 INFO L423 AbstractCegarLoop]: === Iteration 18 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:55,126 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:55,126 INFO L82 PathProgramCache]: Analyzing trace with hash 1360924576, now seen corresponding path program 1 times [2018-11-23 12:46:55,126 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:55,126 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:55,127 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:55,128 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:55,128 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:55,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:55,276 INFO L256 TraceCheckUtils]: 0: Hoare triple {16361#true} call ULTIMATE.init(); {16361#true} is VALID [2018-11-23 12:46:55,276 INFO L273 TraceCheckUtils]: 1: Hoare triple {16361#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {16361#true} is VALID [2018-11-23 12:46:55,276 INFO L273 TraceCheckUtils]: 2: Hoare triple {16361#true} assume true; {16361#true} is VALID [2018-11-23 12:46:55,277 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {16361#true} {16361#true} #607#return; {16361#true} is VALID [2018-11-23 12:46:55,277 INFO L256 TraceCheckUtils]: 4: Hoare triple {16361#true} call #t~ret139 := main(); {16361#true} is VALID [2018-11-23 12:46:55,277 INFO L273 TraceCheckUtils]: 5: Hoare triple {16361#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {16361#true} is VALID [2018-11-23 12:46:55,277 INFO L256 TraceCheckUtils]: 6: Hoare triple {16361#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {16361#true} is VALID [2018-11-23 12:46:55,277 INFO L273 TraceCheckUtils]: 7: Hoare triple {16361#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {16361#true} is VALID [2018-11-23 12:46:55,277 INFO L273 TraceCheckUtils]: 8: Hoare triple {16361#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {16361#true} is VALID [2018-11-23 12:46:55,277 INFO L273 TraceCheckUtils]: 9: Hoare triple {16361#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {16361#true} is VALID [2018-11-23 12:46:55,277 INFO L273 TraceCheckUtils]: 10: Hoare triple {16361#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {16361#true} is VALID [2018-11-23 12:46:55,278 INFO L273 TraceCheckUtils]: 11: Hoare triple {16361#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {16361#true} is VALID [2018-11-23 12:46:55,278 INFO L273 TraceCheckUtils]: 12: Hoare triple {16361#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {16361#true} is VALID [2018-11-23 12:46:55,278 INFO L273 TraceCheckUtils]: 13: Hoare triple {16361#true} assume !false; {16361#true} is VALID [2018-11-23 12:46:55,278 INFO L273 TraceCheckUtils]: 14: Hoare triple {16361#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {16361#true} is VALID [2018-11-23 12:46:55,278 INFO L273 TraceCheckUtils]: 15: Hoare triple {16361#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {16361#true} is VALID [2018-11-23 12:46:55,278 INFO L273 TraceCheckUtils]: 16: Hoare triple {16361#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {16361#true} is VALID [2018-11-23 12:46:55,278 INFO L273 TraceCheckUtils]: 17: Hoare triple {16361#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {16361#true} is VALID [2018-11-23 12:46:55,278 INFO L273 TraceCheckUtils]: 18: Hoare triple {16361#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {16361#true} is VALID [2018-11-23 12:46:55,279 INFO L273 TraceCheckUtils]: 19: Hoare triple {16361#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {16361#true} is VALID [2018-11-23 12:46:55,279 INFO L273 TraceCheckUtils]: 20: Hoare triple {16361#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {16361#true} is VALID [2018-11-23 12:46:55,279 INFO L273 TraceCheckUtils]: 21: Hoare triple {16361#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {16361#true} is VALID [2018-11-23 12:46:55,279 INFO L273 TraceCheckUtils]: 22: Hoare triple {16361#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {16361#true} is VALID [2018-11-23 12:46:55,279 INFO L273 TraceCheckUtils]: 23: Hoare triple {16361#true} assume 8464 == #t~mem27;havoc #t~mem27; {16361#true} is VALID [2018-11-23 12:46:55,279 INFO L273 TraceCheckUtils]: 24: Hoare triple {16361#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {16361#true} is VALID [2018-11-23 12:46:55,279 INFO L273 TraceCheckUtils]: 25: Hoare triple {16361#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {16361#true} is VALID [2018-11-23 12:46:55,284 INFO L273 TraceCheckUtils]: 26: Hoare triple {16361#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {16363#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:55,284 INFO L273 TraceCheckUtils]: 27: Hoare triple {16363#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {16363#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:55,287 INFO L273 TraceCheckUtils]: 28: Hoare triple {16363#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {16363#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:55,287 INFO L273 TraceCheckUtils]: 29: Hoare triple {16363#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {16363#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:55,289 INFO L273 TraceCheckUtils]: 30: Hoare triple {16363#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {16363#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:55,289 INFO L273 TraceCheckUtils]: 31: Hoare triple {16363#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {16363#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:55,292 INFO L273 TraceCheckUtils]: 32: Hoare triple {16363#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {16363#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:55,292 INFO L273 TraceCheckUtils]: 33: Hoare triple {16363#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {16363#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:55,295 INFO L273 TraceCheckUtils]: 34: Hoare triple {16363#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {16364#(= |ssl3_accept_#t~mem22| 8496)} is VALID [2018-11-23 12:46:55,298 INFO L273 TraceCheckUtils]: 35: Hoare triple {16364#(= |ssl3_accept_#t~mem22| 8496)} assume 24576 == #t~mem22;havoc #t~mem22; {16362#false} is VALID [2018-11-23 12:46:55,298 INFO L273 TraceCheckUtils]: 36: Hoare triple {16362#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,298 INFO L273 TraceCheckUtils]: 37: Hoare triple {16362#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {16362#false} is VALID [2018-11-23 12:46:55,298 INFO L273 TraceCheckUtils]: 38: Hoare triple {16362#false} call #t~mem54 := read~int(~s.base, ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,298 INFO L273 TraceCheckUtils]: 39: Hoare triple {16362#false} assume !(3 != #t~mem54 / 256);havoc #t~mem54;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,298 INFO L273 TraceCheckUtils]: 40: Hoare triple {16362#false} assume !(0 == (#t~mem55.base + #t~mem55.offset) % 4294967296);havoc #t~mem55.base, #t~mem55.offset; {16362#false} is VALID [2018-11-23 12:46:55,298 INFO L273 TraceCheckUtils]: 41: Hoare triple {16362#false} assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~tmp___4~0 := #t~nondet57;havoc #t~nondet57; {16362#false} is VALID [2018-11-23 12:46:55,299 INFO L273 TraceCheckUtils]: 42: Hoare triple {16362#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem58 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,299 INFO L273 TraceCheckUtils]: 43: Hoare triple {16362#false} assume 12292 != #t~mem58;havoc #t~mem58;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~tmp___5~0 := #t~nondet59;havoc #t~nondet59; {16362#false} is VALID [2018-11-23 12:46:55,299 INFO L273 TraceCheckUtils]: 44: Hoare triple {16362#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem61 := read~int(#t~mem60.base, 72 + #t~mem60.offset, 4);call write~int(1 + #t~mem61, #t~mem60.base, 72 + #t~mem60.offset, 4);havoc #t~mem60.base, #t~mem60.offset;havoc #t~mem61; {16362#false} is VALID [2018-11-23 12:46:55,299 INFO L273 TraceCheckUtils]: 45: Hoare triple {16362#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,299 INFO L273 TraceCheckUtils]: 46: Hoare triple {16362#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {16362#false} is VALID [2018-11-23 12:46:55,299 INFO L273 TraceCheckUtils]: 47: Hoare triple {16362#false} ~skip~0 := 0; {16362#false} is VALID [2018-11-23 12:46:55,299 INFO L273 TraceCheckUtils]: 48: Hoare triple {16362#false} assume !false; {16362#false} is VALID [2018-11-23 12:46:55,299 INFO L273 TraceCheckUtils]: 49: Hoare triple {16362#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,300 INFO L273 TraceCheckUtils]: 50: Hoare triple {16362#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,300 INFO L273 TraceCheckUtils]: 51: Hoare triple {16362#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,300 INFO L273 TraceCheckUtils]: 52: Hoare triple {16362#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,300 INFO L273 TraceCheckUtils]: 53: Hoare triple {16362#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,300 INFO L273 TraceCheckUtils]: 54: Hoare triple {16362#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,300 INFO L273 TraceCheckUtils]: 55: Hoare triple {16362#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,300 INFO L273 TraceCheckUtils]: 56: Hoare triple {16362#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,300 INFO L273 TraceCheckUtils]: 57: Hoare triple {16362#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,300 INFO L273 TraceCheckUtils]: 58: Hoare triple {16362#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,301 INFO L273 TraceCheckUtils]: 59: Hoare triple {16362#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,301 INFO L273 TraceCheckUtils]: 60: Hoare triple {16362#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,301 INFO L273 TraceCheckUtils]: 61: Hoare triple {16362#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,301 INFO L273 TraceCheckUtils]: 62: Hoare triple {16362#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,301 INFO L273 TraceCheckUtils]: 63: Hoare triple {16362#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,301 INFO L273 TraceCheckUtils]: 64: Hoare triple {16362#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,301 INFO L273 TraceCheckUtils]: 65: Hoare triple {16362#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,301 INFO L273 TraceCheckUtils]: 66: Hoare triple {16362#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,302 INFO L273 TraceCheckUtils]: 67: Hoare triple {16362#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,302 INFO L273 TraceCheckUtils]: 68: Hoare triple {16362#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,302 INFO L273 TraceCheckUtils]: 69: Hoare triple {16362#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,302 INFO L273 TraceCheckUtils]: 70: Hoare triple {16362#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,302 INFO L273 TraceCheckUtils]: 71: Hoare triple {16362#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,302 INFO L273 TraceCheckUtils]: 72: Hoare triple {16362#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,302 INFO L273 TraceCheckUtils]: 73: Hoare triple {16362#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,302 INFO L273 TraceCheckUtils]: 74: Hoare triple {16362#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,302 INFO L273 TraceCheckUtils]: 75: Hoare triple {16362#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,303 INFO L273 TraceCheckUtils]: 76: Hoare triple {16362#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,303 INFO L273 TraceCheckUtils]: 77: Hoare triple {16362#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,303 INFO L273 TraceCheckUtils]: 78: Hoare triple {16362#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,303 INFO L273 TraceCheckUtils]: 79: Hoare triple {16362#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,303 INFO L273 TraceCheckUtils]: 80: Hoare triple {16362#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,303 INFO L273 TraceCheckUtils]: 81: Hoare triple {16362#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {16362#false} is VALID [2018-11-23 12:46:55,303 INFO L273 TraceCheckUtils]: 82: Hoare triple {16362#false} assume 8672 == #t~mem51;havoc #t~mem51; {16362#false} is VALID [2018-11-23 12:46:55,303 INFO L273 TraceCheckUtils]: 83: Hoare triple {16362#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {16362#false} is VALID [2018-11-23 12:46:55,304 INFO L273 TraceCheckUtils]: 84: Hoare triple {16362#false} assume 4 == ~blastFlag~0; {16362#false} is VALID [2018-11-23 12:46:55,304 INFO L273 TraceCheckUtils]: 85: Hoare triple {16362#false} assume !false; {16362#false} is VALID [2018-11-23 12:46:55,307 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:46:55,307 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:55,308 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:55,308 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 86 [2018-11-23 12:46:55,308 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:55,309 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:55,423 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 86 edges. 86 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:55,423 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:55,423 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:55,424 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:55,424 INFO L87 Difference]: Start difference. First operand 196 states and 287 transitions. Second operand 4 states. [2018-11-23 12:46:56,428 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:56,429 INFO L93 Difference]: Finished difference Result 394 states and 581 transitions. [2018-11-23 12:46:56,429 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:56,429 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 86 [2018-11-23 12:46:56,429 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:56,429 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:56,431 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 452 transitions. [2018-11-23 12:46:56,431 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:56,433 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 452 transitions. [2018-11-23 12:46:56,433 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 452 transitions. [2018-11-23 12:46:56,868 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 452 edges. 452 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:56,873 INFO L225 Difference]: With dead ends: 394 [2018-11-23 12:46:56,873 INFO L226 Difference]: Without dead ends: 223 [2018-11-23 12:46:56,874 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:56,874 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2018-11-23 12:46:56,926 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 196. [2018-11-23 12:46:56,926 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:56,926 INFO L82 GeneralOperation]: Start isEquivalent. First operand 223 states. Second operand 196 states. [2018-11-23 12:46:56,927 INFO L74 IsIncluded]: Start isIncluded. First operand 223 states. Second operand 196 states. [2018-11-23 12:46:56,927 INFO L87 Difference]: Start difference. First operand 223 states. Second operand 196 states. [2018-11-23 12:46:56,930 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:56,930 INFO L93 Difference]: Finished difference Result 223 states and 321 transitions. [2018-11-23 12:46:56,931 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 321 transitions. [2018-11-23 12:46:56,931 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:56,931 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:56,931 INFO L74 IsIncluded]: Start isIncluded. First operand 196 states. Second operand 223 states. [2018-11-23 12:46:56,931 INFO L87 Difference]: Start difference. First operand 196 states. Second operand 223 states. [2018-11-23 12:46:56,935 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:56,935 INFO L93 Difference]: Finished difference Result 223 states and 321 transitions. [2018-11-23 12:46:56,935 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 321 transitions. [2018-11-23 12:46:56,935 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:56,935 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:56,935 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:56,935 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:56,936 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 196 states. [2018-11-23 12:46:56,938 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 196 states to 196 states and 286 transitions. [2018-11-23 12:46:56,938 INFO L78 Accepts]: Start accepts. Automaton has 196 states and 286 transitions. Word has length 86 [2018-11-23 12:46:56,939 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:56,939 INFO L480 AbstractCegarLoop]: Abstraction has 196 states and 286 transitions. [2018-11-23 12:46:56,939 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:56,939 INFO L276 IsEmpty]: Start isEmpty. Operand 196 states and 286 transitions. [2018-11-23 12:46:56,940 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2018-11-23 12:46:56,940 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:56,940 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:56,940 INFO L423 AbstractCegarLoop]: === Iteration 19 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:56,940 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:56,940 INFO L82 PathProgramCache]: Analyzing trace with hash -1155371775, now seen corresponding path program 1 times [2018-11-23 12:46:56,941 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:56,941 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:56,942 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:56,942 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:56,942 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:56,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:57,207 INFO L256 TraceCheckUtils]: 0: Hoare triple {17508#true} call ULTIMATE.init(); {17508#true} is VALID [2018-11-23 12:46:57,208 INFO L273 TraceCheckUtils]: 1: Hoare triple {17508#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {17508#true} is VALID [2018-11-23 12:46:57,208 INFO L273 TraceCheckUtils]: 2: Hoare triple {17508#true} assume true; {17508#true} is VALID [2018-11-23 12:46:57,208 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {17508#true} {17508#true} #607#return; {17508#true} is VALID [2018-11-23 12:46:57,208 INFO L256 TraceCheckUtils]: 4: Hoare triple {17508#true} call #t~ret139 := main(); {17508#true} is VALID [2018-11-23 12:46:57,209 INFO L273 TraceCheckUtils]: 5: Hoare triple {17508#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {17508#true} is VALID [2018-11-23 12:46:57,209 INFO L256 TraceCheckUtils]: 6: Hoare triple {17508#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {17508#true} is VALID [2018-11-23 12:46:57,209 INFO L273 TraceCheckUtils]: 7: Hoare triple {17508#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {17508#true} is VALID [2018-11-23 12:46:57,209 INFO L273 TraceCheckUtils]: 8: Hoare triple {17508#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {17508#true} is VALID [2018-11-23 12:46:57,209 INFO L273 TraceCheckUtils]: 9: Hoare triple {17508#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {17508#true} is VALID [2018-11-23 12:46:57,210 INFO L273 TraceCheckUtils]: 10: Hoare triple {17508#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {17508#true} is VALID [2018-11-23 12:46:57,210 INFO L273 TraceCheckUtils]: 11: Hoare triple {17508#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {17508#true} is VALID [2018-11-23 12:46:57,210 INFO L273 TraceCheckUtils]: 12: Hoare triple {17508#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {17508#true} is VALID [2018-11-23 12:46:57,210 INFO L273 TraceCheckUtils]: 13: Hoare triple {17508#true} assume !false; {17508#true} is VALID [2018-11-23 12:46:57,210 INFO L273 TraceCheckUtils]: 14: Hoare triple {17508#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {17508#true} is VALID [2018-11-23 12:46:57,211 INFO L273 TraceCheckUtils]: 15: Hoare triple {17508#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {17508#true} is VALID [2018-11-23 12:46:57,211 INFO L273 TraceCheckUtils]: 16: Hoare triple {17508#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {17508#true} is VALID [2018-11-23 12:46:57,211 INFO L273 TraceCheckUtils]: 17: Hoare triple {17508#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {17508#true} is VALID [2018-11-23 12:46:57,211 INFO L273 TraceCheckUtils]: 18: Hoare triple {17508#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {17508#true} is VALID [2018-11-23 12:46:57,211 INFO L273 TraceCheckUtils]: 19: Hoare triple {17508#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {17508#true} is VALID [2018-11-23 12:46:57,211 INFO L273 TraceCheckUtils]: 20: Hoare triple {17508#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {17508#true} is VALID [2018-11-23 12:46:57,211 INFO L273 TraceCheckUtils]: 21: Hoare triple {17508#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {17508#true} is VALID [2018-11-23 12:46:57,212 INFO L273 TraceCheckUtils]: 22: Hoare triple {17508#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {17508#true} is VALID [2018-11-23 12:46:57,212 INFO L273 TraceCheckUtils]: 23: Hoare triple {17508#true} assume 8464 == #t~mem27;havoc #t~mem27; {17508#true} is VALID [2018-11-23 12:46:57,212 INFO L273 TraceCheckUtils]: 24: Hoare triple {17508#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {17508#true} is VALID [2018-11-23 12:46:57,212 INFO L273 TraceCheckUtils]: 25: Hoare triple {17508#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {17508#true} is VALID [2018-11-23 12:46:57,230 INFO L273 TraceCheckUtils]: 26: Hoare triple {17508#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {17510#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:57,231 INFO L273 TraceCheckUtils]: 27: Hoare triple {17510#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {17510#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:57,231 INFO L273 TraceCheckUtils]: 28: Hoare triple {17510#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {17510#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:57,231 INFO L273 TraceCheckUtils]: 29: Hoare triple {17510#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {17510#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:57,232 INFO L273 TraceCheckUtils]: 30: Hoare triple {17510#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {17510#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:57,232 INFO L273 TraceCheckUtils]: 31: Hoare triple {17510#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {17510#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:57,232 INFO L273 TraceCheckUtils]: 32: Hoare triple {17510#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {17510#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:57,233 INFO L273 TraceCheckUtils]: 33: Hoare triple {17510#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {17510#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:57,233 INFO L273 TraceCheckUtils]: 34: Hoare triple {17510#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {17510#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:46:57,233 INFO L273 TraceCheckUtils]: 35: Hoare triple {17510#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {17511#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem23| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:46:57,234 INFO L273 TraceCheckUtils]: 36: Hoare triple {17511#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem23| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume 8195 == #t~mem23;havoc #t~mem23; {17509#false} is VALID [2018-11-23 12:46:57,234 INFO L273 TraceCheckUtils]: 37: Hoare triple {17509#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,234 INFO L273 TraceCheckUtils]: 38: Hoare triple {17509#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {17509#false} is VALID [2018-11-23 12:46:57,235 INFO L273 TraceCheckUtils]: 39: Hoare triple {17509#false} call #t~mem54 := read~int(~s.base, ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,235 INFO L273 TraceCheckUtils]: 40: Hoare triple {17509#false} assume !(3 != #t~mem54 / 256);havoc #t~mem54;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,235 INFO L273 TraceCheckUtils]: 41: Hoare triple {17509#false} assume !(0 == (#t~mem55.base + #t~mem55.offset) % 4294967296);havoc #t~mem55.base, #t~mem55.offset; {17509#false} is VALID [2018-11-23 12:46:57,235 INFO L273 TraceCheckUtils]: 42: Hoare triple {17509#false} assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~tmp___4~0 := #t~nondet57;havoc #t~nondet57; {17509#false} is VALID [2018-11-23 12:46:57,235 INFO L273 TraceCheckUtils]: 43: Hoare triple {17509#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem58 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,236 INFO L273 TraceCheckUtils]: 44: Hoare triple {17509#false} assume 12292 != #t~mem58;havoc #t~mem58;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~tmp___5~0 := #t~nondet59;havoc #t~nondet59; {17509#false} is VALID [2018-11-23 12:46:57,236 INFO L273 TraceCheckUtils]: 45: Hoare triple {17509#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem61 := read~int(#t~mem60.base, 72 + #t~mem60.offset, 4);call write~int(1 + #t~mem61, #t~mem60.base, 72 + #t~mem60.offset, 4);havoc #t~mem60.base, #t~mem60.offset;havoc #t~mem61; {17509#false} is VALID [2018-11-23 12:46:57,236 INFO L273 TraceCheckUtils]: 46: Hoare triple {17509#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,236 INFO L273 TraceCheckUtils]: 47: Hoare triple {17509#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {17509#false} is VALID [2018-11-23 12:46:57,236 INFO L273 TraceCheckUtils]: 48: Hoare triple {17509#false} ~skip~0 := 0; {17509#false} is VALID [2018-11-23 12:46:57,237 INFO L273 TraceCheckUtils]: 49: Hoare triple {17509#false} assume !false; {17509#false} is VALID [2018-11-23 12:46:57,237 INFO L273 TraceCheckUtils]: 50: Hoare triple {17509#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,237 INFO L273 TraceCheckUtils]: 51: Hoare triple {17509#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,237 INFO L273 TraceCheckUtils]: 52: Hoare triple {17509#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,237 INFO L273 TraceCheckUtils]: 53: Hoare triple {17509#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,237 INFO L273 TraceCheckUtils]: 54: Hoare triple {17509#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,237 INFO L273 TraceCheckUtils]: 55: Hoare triple {17509#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,237 INFO L273 TraceCheckUtils]: 56: Hoare triple {17509#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,238 INFO L273 TraceCheckUtils]: 57: Hoare triple {17509#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,238 INFO L273 TraceCheckUtils]: 58: Hoare triple {17509#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,238 INFO L273 TraceCheckUtils]: 59: Hoare triple {17509#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,238 INFO L273 TraceCheckUtils]: 60: Hoare triple {17509#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,238 INFO L273 TraceCheckUtils]: 61: Hoare triple {17509#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,238 INFO L273 TraceCheckUtils]: 62: Hoare triple {17509#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,238 INFO L273 TraceCheckUtils]: 63: Hoare triple {17509#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,238 INFO L273 TraceCheckUtils]: 64: Hoare triple {17509#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,239 INFO L273 TraceCheckUtils]: 65: Hoare triple {17509#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,239 INFO L273 TraceCheckUtils]: 66: Hoare triple {17509#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,239 INFO L273 TraceCheckUtils]: 67: Hoare triple {17509#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,239 INFO L273 TraceCheckUtils]: 68: Hoare triple {17509#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,239 INFO L273 TraceCheckUtils]: 69: Hoare triple {17509#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,239 INFO L273 TraceCheckUtils]: 70: Hoare triple {17509#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,239 INFO L273 TraceCheckUtils]: 71: Hoare triple {17509#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,239 INFO L273 TraceCheckUtils]: 72: Hoare triple {17509#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,240 INFO L273 TraceCheckUtils]: 73: Hoare triple {17509#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,240 INFO L273 TraceCheckUtils]: 74: Hoare triple {17509#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,240 INFO L273 TraceCheckUtils]: 75: Hoare triple {17509#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,240 INFO L273 TraceCheckUtils]: 76: Hoare triple {17509#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,240 INFO L273 TraceCheckUtils]: 77: Hoare triple {17509#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,240 INFO L273 TraceCheckUtils]: 78: Hoare triple {17509#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,240 INFO L273 TraceCheckUtils]: 79: Hoare triple {17509#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,240 INFO L273 TraceCheckUtils]: 80: Hoare triple {17509#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,240 INFO L273 TraceCheckUtils]: 81: Hoare triple {17509#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,241 INFO L273 TraceCheckUtils]: 82: Hoare triple {17509#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {17509#false} is VALID [2018-11-23 12:46:57,241 INFO L273 TraceCheckUtils]: 83: Hoare triple {17509#false} assume 8672 == #t~mem51;havoc #t~mem51; {17509#false} is VALID [2018-11-23 12:46:57,241 INFO L273 TraceCheckUtils]: 84: Hoare triple {17509#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {17509#false} is VALID [2018-11-23 12:46:57,241 INFO L273 TraceCheckUtils]: 85: Hoare triple {17509#false} assume 4 == ~blastFlag~0; {17509#false} is VALID [2018-11-23 12:46:57,241 INFO L273 TraceCheckUtils]: 86: Hoare triple {17509#false} assume !false; {17509#false} is VALID [2018-11-23 12:46:57,246 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:46:57,246 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:57,246 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:57,247 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 87 [2018-11-23 12:46:57,247 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:57,247 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:57,343 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 87 edges. 87 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:57,344 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:57,344 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:57,344 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:57,345 INFO L87 Difference]: Start difference. First operand 196 states and 286 transitions. Second operand 4 states. [2018-11-23 12:46:58,131 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:58,131 INFO L93 Difference]: Finished difference Result 384 states and 566 transitions. [2018-11-23 12:46:58,132 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:58,132 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 87 [2018-11-23 12:46:58,132 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:58,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:58,134 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 449 transitions. [2018-11-23 12:46:58,135 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:58,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 449 transitions. [2018-11-23 12:46:58,137 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 449 transitions. [2018-11-23 12:46:58,577 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 449 edges. 449 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:58,581 INFO L225 Difference]: With dead ends: 384 [2018-11-23 12:46:58,581 INFO L226 Difference]: Without dead ends: 213 [2018-11-23 12:46:58,582 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:58,582 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 213 states. [2018-11-23 12:46:58,659 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 213 to 196. [2018-11-23 12:46:58,659 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:58,660 INFO L82 GeneralOperation]: Start isEquivalent. First operand 213 states. Second operand 196 states. [2018-11-23 12:46:58,660 INFO L74 IsIncluded]: Start isIncluded. First operand 213 states. Second operand 196 states. [2018-11-23 12:46:58,660 INFO L87 Difference]: Start difference. First operand 213 states. Second operand 196 states. [2018-11-23 12:46:58,664 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:58,665 INFO L93 Difference]: Finished difference Result 213 states and 307 transitions. [2018-11-23 12:46:58,665 INFO L276 IsEmpty]: Start isEmpty. Operand 213 states and 307 transitions. [2018-11-23 12:46:58,665 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:58,665 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:58,665 INFO L74 IsIncluded]: Start isIncluded. First operand 196 states. Second operand 213 states. [2018-11-23 12:46:58,666 INFO L87 Difference]: Start difference. First operand 196 states. Second operand 213 states. [2018-11-23 12:46:58,669 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:58,669 INFO L93 Difference]: Finished difference Result 213 states and 307 transitions. [2018-11-23 12:46:58,670 INFO L276 IsEmpty]: Start isEmpty. Operand 213 states and 307 transitions. [2018-11-23 12:46:58,670 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:58,670 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:58,670 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:58,670 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:58,670 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 196 states. [2018-11-23 12:46:58,673 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 196 states to 196 states and 285 transitions. [2018-11-23 12:46:58,673 INFO L78 Accepts]: Start accepts. Automaton has 196 states and 285 transitions. Word has length 87 [2018-11-23 12:46:58,673 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:58,673 INFO L480 AbstractCegarLoop]: Abstraction has 196 states and 285 transitions. [2018-11-23 12:46:58,673 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:58,674 INFO L276 IsEmpty]: Start isEmpty. Operand 196 states and 285 transitions. [2018-11-23 12:46:58,674 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2018-11-23 12:46:58,674 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:58,674 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:58,674 INFO L423 AbstractCegarLoop]: === Iteration 20 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:58,675 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:58,675 INFO L82 PathProgramCache]: Analyzing trace with hash -896304831, now seen corresponding path program 1 times [2018-11-23 12:46:58,675 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:58,675 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:58,676 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:58,676 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:58,676 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:58,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:59,425 INFO L256 TraceCheckUtils]: 0: Hoare triple {18622#true} call ULTIMATE.init(); {18622#true} is VALID [2018-11-23 12:46:59,425 INFO L273 TraceCheckUtils]: 1: Hoare triple {18622#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,425 INFO L273 TraceCheckUtils]: 2: Hoare triple {18622#true} assume true; {18622#true} is VALID [2018-11-23 12:46:59,426 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {18622#true} {18622#true} #607#return; {18622#true} is VALID [2018-11-23 12:46:59,426 INFO L256 TraceCheckUtils]: 4: Hoare triple {18622#true} call #t~ret139 := main(); {18622#true} is VALID [2018-11-23 12:46:59,426 INFO L273 TraceCheckUtils]: 5: Hoare triple {18622#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,426 INFO L256 TraceCheckUtils]: 6: Hoare triple {18622#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {18622#true} is VALID [2018-11-23 12:46:59,426 INFO L273 TraceCheckUtils]: 7: Hoare triple {18622#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,427 INFO L273 TraceCheckUtils]: 8: Hoare triple {18622#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {18622#true} is VALID [2018-11-23 12:46:59,427 INFO L273 TraceCheckUtils]: 9: Hoare triple {18622#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {18622#true} is VALID [2018-11-23 12:46:59,427 INFO L273 TraceCheckUtils]: 10: Hoare triple {18622#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {18622#true} is VALID [2018-11-23 12:46:59,427 INFO L273 TraceCheckUtils]: 11: Hoare triple {18622#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,427 INFO L273 TraceCheckUtils]: 12: Hoare triple {18622#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {18622#true} is VALID [2018-11-23 12:46:59,428 INFO L273 TraceCheckUtils]: 13: Hoare triple {18622#true} assume !false; {18622#true} is VALID [2018-11-23 12:46:59,428 INFO L273 TraceCheckUtils]: 14: Hoare triple {18622#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,428 INFO L273 TraceCheckUtils]: 15: Hoare triple {18622#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,428 INFO L273 TraceCheckUtils]: 16: Hoare triple {18622#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,428 INFO L273 TraceCheckUtils]: 17: Hoare triple {18622#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,428 INFO L273 TraceCheckUtils]: 18: Hoare triple {18622#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,429 INFO L273 TraceCheckUtils]: 19: Hoare triple {18622#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,429 INFO L273 TraceCheckUtils]: 20: Hoare triple {18622#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,429 INFO L273 TraceCheckUtils]: 21: Hoare triple {18622#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,429 INFO L273 TraceCheckUtils]: 22: Hoare triple {18622#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,429 INFO L273 TraceCheckUtils]: 23: Hoare triple {18622#true} assume 8464 == #t~mem27;havoc #t~mem27; {18622#true} is VALID [2018-11-23 12:46:59,430 INFO L273 TraceCheckUtils]: 24: Hoare triple {18622#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {18622#true} is VALID [2018-11-23 12:46:59,430 INFO L273 TraceCheckUtils]: 25: Hoare triple {18622#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {18622#true} is VALID [2018-11-23 12:46:59,430 INFO L273 TraceCheckUtils]: 26: Hoare triple {18622#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,430 INFO L273 TraceCheckUtils]: 27: Hoare triple {18622#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,430 INFO L273 TraceCheckUtils]: 28: Hoare triple {18622#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {18622#true} is VALID [2018-11-23 12:46:59,431 INFO L273 TraceCheckUtils]: 29: Hoare triple {18622#true} ~skip~0 := 0; {18622#true} is VALID [2018-11-23 12:46:59,431 INFO L273 TraceCheckUtils]: 30: Hoare triple {18622#true} assume !false; {18622#true} is VALID [2018-11-23 12:46:59,431 INFO L273 TraceCheckUtils]: 31: Hoare triple {18622#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,431 INFO L273 TraceCheckUtils]: 32: Hoare triple {18622#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,431 INFO L273 TraceCheckUtils]: 33: Hoare triple {18622#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,431 INFO L273 TraceCheckUtils]: 34: Hoare triple {18622#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,432 INFO L273 TraceCheckUtils]: 35: Hoare triple {18622#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,432 INFO L273 TraceCheckUtils]: 36: Hoare triple {18622#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,432 INFO L273 TraceCheckUtils]: 37: Hoare triple {18622#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,432 INFO L273 TraceCheckUtils]: 38: Hoare triple {18622#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,432 INFO L273 TraceCheckUtils]: 39: Hoare triple {18622#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,432 INFO L273 TraceCheckUtils]: 40: Hoare triple {18622#true} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,432 INFO L273 TraceCheckUtils]: 41: Hoare triple {18622#true} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,433 INFO L273 TraceCheckUtils]: 42: Hoare triple {18622#true} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,433 INFO L273 TraceCheckUtils]: 43: Hoare triple {18622#true} assume 8496 == #t~mem30;havoc #t~mem30; {18622#true} is VALID [2018-11-23 12:46:59,433 INFO L273 TraceCheckUtils]: 44: Hoare triple {18622#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {18622#true} is VALID [2018-11-23 12:46:59,433 INFO L273 TraceCheckUtils]: 45: Hoare triple {18622#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {18622#true} is VALID [2018-11-23 12:46:59,433 INFO L273 TraceCheckUtils]: 46: Hoare triple {18622#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {18622#true} is VALID [2018-11-23 12:46:59,448 INFO L273 TraceCheckUtils]: 47: Hoare triple {18622#true} assume 0 != #t~mem68;havoc #t~mem68;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,457 INFO L273 TraceCheckUtils]: 48: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,466 INFO L273 TraceCheckUtils]: 49: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,479 INFO L273 TraceCheckUtils]: 50: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,492 INFO L273 TraceCheckUtils]: 51: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,504 INFO L273 TraceCheckUtils]: 52: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,517 INFO L273 TraceCheckUtils]: 53: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,530 INFO L273 TraceCheckUtils]: 54: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,543 INFO L273 TraceCheckUtils]: 55: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,555 INFO L273 TraceCheckUtils]: 56: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,569 INFO L273 TraceCheckUtils]: 57: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,578 INFO L273 TraceCheckUtils]: 58: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,591 INFO L273 TraceCheckUtils]: 59: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,599 INFO L273 TraceCheckUtils]: 60: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,599 INFO L273 TraceCheckUtils]: 61: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,601 INFO L273 TraceCheckUtils]: 62: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,601 INFO L273 TraceCheckUtils]: 63: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,603 INFO L273 TraceCheckUtils]: 64: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,603 INFO L273 TraceCheckUtils]: 65: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,605 INFO L273 TraceCheckUtils]: 66: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,605 INFO L273 TraceCheckUtils]: 67: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,607 INFO L273 TraceCheckUtils]: 68: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,607 INFO L273 TraceCheckUtils]: 69: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,607 INFO L273 TraceCheckUtils]: 70: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,608 INFO L273 TraceCheckUtils]: 71: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,608 INFO L273 TraceCheckUtils]: 72: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,608 INFO L273 TraceCheckUtils]: 73: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,609 INFO L273 TraceCheckUtils]: 74: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,609 INFO L273 TraceCheckUtils]: 75: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,609 INFO L273 TraceCheckUtils]: 76: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,609 INFO L273 TraceCheckUtils]: 77: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,610 INFO L273 TraceCheckUtils]: 78: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,610 INFO L273 TraceCheckUtils]: 79: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,610 INFO L273 TraceCheckUtils]: 80: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,611 INFO L273 TraceCheckUtils]: 81: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,611 INFO L273 TraceCheckUtils]: 82: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:59,612 INFO L273 TraceCheckUtils]: 83: Hoare triple {18624#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {18625#(= 8656 |ssl3_accept_#t~mem49|)} is VALID [2018-11-23 12:46:59,612 INFO L273 TraceCheckUtils]: 84: Hoare triple {18625#(= 8656 |ssl3_accept_#t~mem49|)} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {18623#false} is VALID [2018-11-23 12:46:59,613 INFO L273 TraceCheckUtils]: 85: Hoare triple {18623#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {18623#false} is VALID [2018-11-23 12:46:59,613 INFO L273 TraceCheckUtils]: 86: Hoare triple {18623#false} assume 8672 == #t~mem51;havoc #t~mem51; {18623#false} is VALID [2018-11-23 12:46:59,613 INFO L273 TraceCheckUtils]: 87: Hoare triple {18623#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {18623#false} is VALID [2018-11-23 12:46:59,613 INFO L273 TraceCheckUtils]: 88: Hoare triple {18623#false} assume 4 == ~blastFlag~0; {18623#false} is VALID [2018-11-23 12:46:59,613 INFO L273 TraceCheckUtils]: 89: Hoare triple {18623#false} assume !false; {18623#false} is VALID [2018-11-23 12:46:59,626 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:46:59,626 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:59,627 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:59,627 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 90 [2018-11-23 12:46:59,627 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:59,628 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:59,726 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 80 edges. 80 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:59,726 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:59,727 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:59,727 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:59,727 INFO L87 Difference]: Start difference. First operand 196 states and 285 transitions. Second operand 4 states. [2018-11-23 12:47:01,325 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:01,326 INFO L93 Difference]: Finished difference Result 473 states and 703 transitions. [2018-11-23 12:47:01,326 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:01,326 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 90 [2018-11-23 12:47:01,326 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:01,326 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:01,328 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 545 transitions. [2018-11-23 12:47:01,328 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:01,331 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 545 transitions. [2018-11-23 12:47:01,331 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 545 transitions. [2018-11-23 12:47:01,932 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 545 edges. 545 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:01,940 INFO L225 Difference]: With dead ends: 473 [2018-11-23 12:47:01,940 INFO L226 Difference]: Without dead ends: 302 [2018-11-23 12:47:01,941 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:01,941 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 302 states. [2018-11-23 12:47:01,978 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 302 to 239. [2018-11-23 12:47:01,978 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:01,978 INFO L82 GeneralOperation]: Start isEquivalent. First operand 302 states. Second operand 239 states. [2018-11-23 12:47:01,978 INFO L74 IsIncluded]: Start isIncluded. First operand 302 states. Second operand 239 states. [2018-11-23 12:47:01,978 INFO L87 Difference]: Start difference. First operand 302 states. Second operand 239 states. [2018-11-23 12:47:01,984 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:01,985 INFO L93 Difference]: Finished difference Result 302 states and 445 transitions. [2018-11-23 12:47:01,985 INFO L276 IsEmpty]: Start isEmpty. Operand 302 states and 445 transitions. [2018-11-23 12:47:01,985 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:01,985 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:01,985 INFO L74 IsIncluded]: Start isIncluded. First operand 239 states. Second operand 302 states. [2018-11-23 12:47:01,985 INFO L87 Difference]: Start difference. First operand 239 states. Second operand 302 states. [2018-11-23 12:47:01,992 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:01,992 INFO L93 Difference]: Finished difference Result 302 states and 445 transitions. [2018-11-23 12:47:01,992 INFO L276 IsEmpty]: Start isEmpty. Operand 302 states and 445 transitions. [2018-11-23 12:47:01,993 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:01,993 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:01,993 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:01,993 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:01,993 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 239 states. [2018-11-23 12:47:01,998 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 239 states to 239 states and 363 transitions. [2018-11-23 12:47:01,998 INFO L78 Accepts]: Start accepts. Automaton has 239 states and 363 transitions. Word has length 90 [2018-11-23 12:47:01,998 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:01,999 INFO L480 AbstractCegarLoop]: Abstraction has 239 states and 363 transitions. [2018-11-23 12:47:01,999 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:01,999 INFO L276 IsEmpty]: Start isEmpty. Operand 239 states and 363 transitions. [2018-11-23 12:47:01,999 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2018-11-23 12:47:02,000 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:02,000 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:02,000 INFO L423 AbstractCegarLoop]: === Iteration 21 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:02,000 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:02,000 INFO L82 PathProgramCache]: Analyzing trace with hash -1793698109, now seen corresponding path program 1 times [2018-11-23 12:47:02,000 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:02,001 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:02,001 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:02,002 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:02,002 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:02,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:02,408 INFO L256 TraceCheckUtils]: 0: Hoare triple {20067#true} call ULTIMATE.init(); {20067#true} is VALID [2018-11-23 12:47:02,409 INFO L273 TraceCheckUtils]: 1: Hoare triple {20067#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,409 INFO L273 TraceCheckUtils]: 2: Hoare triple {20067#true} assume true; {20067#true} is VALID [2018-11-23 12:47:02,409 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {20067#true} {20067#true} #607#return; {20067#true} is VALID [2018-11-23 12:47:02,409 INFO L256 TraceCheckUtils]: 4: Hoare triple {20067#true} call #t~ret139 := main(); {20067#true} is VALID [2018-11-23 12:47:02,409 INFO L273 TraceCheckUtils]: 5: Hoare triple {20067#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,409 INFO L256 TraceCheckUtils]: 6: Hoare triple {20067#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {20067#true} is VALID [2018-11-23 12:47:02,409 INFO L273 TraceCheckUtils]: 7: Hoare triple {20067#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,409 INFO L273 TraceCheckUtils]: 8: Hoare triple {20067#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {20067#true} is VALID [2018-11-23 12:47:02,410 INFO L273 TraceCheckUtils]: 9: Hoare triple {20067#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {20067#true} is VALID [2018-11-23 12:47:02,410 INFO L273 TraceCheckUtils]: 10: Hoare triple {20067#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {20067#true} is VALID [2018-11-23 12:47:02,410 INFO L273 TraceCheckUtils]: 11: Hoare triple {20067#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,410 INFO L273 TraceCheckUtils]: 12: Hoare triple {20067#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {20067#true} is VALID [2018-11-23 12:47:02,410 INFO L273 TraceCheckUtils]: 13: Hoare triple {20067#true} assume !false; {20067#true} is VALID [2018-11-23 12:47:02,410 INFO L273 TraceCheckUtils]: 14: Hoare triple {20067#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,410 INFO L273 TraceCheckUtils]: 15: Hoare triple {20067#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,410 INFO L273 TraceCheckUtils]: 16: Hoare triple {20067#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,411 INFO L273 TraceCheckUtils]: 17: Hoare triple {20067#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,411 INFO L273 TraceCheckUtils]: 18: Hoare triple {20067#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,411 INFO L273 TraceCheckUtils]: 19: Hoare triple {20067#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,411 INFO L273 TraceCheckUtils]: 20: Hoare triple {20067#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,411 INFO L273 TraceCheckUtils]: 21: Hoare triple {20067#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,411 INFO L273 TraceCheckUtils]: 22: Hoare triple {20067#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,411 INFO L273 TraceCheckUtils]: 23: Hoare triple {20067#true} assume 8464 == #t~mem27;havoc #t~mem27; {20067#true} is VALID [2018-11-23 12:47:02,411 INFO L273 TraceCheckUtils]: 24: Hoare triple {20067#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {20067#true} is VALID [2018-11-23 12:47:02,411 INFO L273 TraceCheckUtils]: 25: Hoare triple {20067#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {20067#true} is VALID [2018-11-23 12:47:02,412 INFO L273 TraceCheckUtils]: 26: Hoare triple {20067#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,412 INFO L273 TraceCheckUtils]: 27: Hoare triple {20067#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,412 INFO L273 TraceCheckUtils]: 28: Hoare triple {20067#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {20067#true} is VALID [2018-11-23 12:47:02,412 INFO L273 TraceCheckUtils]: 29: Hoare triple {20067#true} ~skip~0 := 0; {20067#true} is VALID [2018-11-23 12:47:02,412 INFO L273 TraceCheckUtils]: 30: Hoare triple {20067#true} assume !false; {20067#true} is VALID [2018-11-23 12:47:02,412 INFO L273 TraceCheckUtils]: 31: Hoare triple {20067#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,412 INFO L273 TraceCheckUtils]: 32: Hoare triple {20067#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,412 INFO L273 TraceCheckUtils]: 33: Hoare triple {20067#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,413 INFO L273 TraceCheckUtils]: 34: Hoare triple {20067#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,413 INFO L273 TraceCheckUtils]: 35: Hoare triple {20067#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,413 INFO L273 TraceCheckUtils]: 36: Hoare triple {20067#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,413 INFO L273 TraceCheckUtils]: 37: Hoare triple {20067#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,413 INFO L273 TraceCheckUtils]: 38: Hoare triple {20067#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,413 INFO L273 TraceCheckUtils]: 39: Hoare triple {20067#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,413 INFO L273 TraceCheckUtils]: 40: Hoare triple {20067#true} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,413 INFO L273 TraceCheckUtils]: 41: Hoare triple {20067#true} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,413 INFO L273 TraceCheckUtils]: 42: Hoare triple {20067#true} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,414 INFO L273 TraceCheckUtils]: 43: Hoare triple {20067#true} assume 8496 == #t~mem30;havoc #t~mem30; {20067#true} is VALID [2018-11-23 12:47:02,414 INFO L273 TraceCheckUtils]: 44: Hoare triple {20067#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {20067#true} is VALID [2018-11-23 12:47:02,414 INFO L273 TraceCheckUtils]: 45: Hoare triple {20067#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {20067#true} is VALID [2018-11-23 12:47:02,414 INFO L273 TraceCheckUtils]: 46: Hoare triple {20067#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {20067#true} is VALID [2018-11-23 12:47:02,415 INFO L273 TraceCheckUtils]: 47: Hoare triple {20067#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:02,416 INFO L273 TraceCheckUtils]: 48: Hoare triple {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:02,416 INFO L273 TraceCheckUtils]: 49: Hoare triple {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:02,416 INFO L273 TraceCheckUtils]: 50: Hoare triple {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:02,417 INFO L273 TraceCheckUtils]: 51: Hoare triple {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:02,417 INFO L273 TraceCheckUtils]: 52: Hoare triple {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:02,417 INFO L273 TraceCheckUtils]: 53: Hoare triple {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:02,417 INFO L273 TraceCheckUtils]: 54: Hoare triple {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:02,418 INFO L273 TraceCheckUtils]: 55: Hoare triple {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:02,418 INFO L273 TraceCheckUtils]: 56: Hoare triple {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:02,419 INFO L273 TraceCheckUtils]: 57: Hoare triple {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:02,419 INFO L273 TraceCheckUtils]: 58: Hoare triple {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:02,420 INFO L273 TraceCheckUtils]: 59: Hoare triple {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:02,420 INFO L273 TraceCheckUtils]: 60: Hoare triple {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:02,421 INFO L273 TraceCheckUtils]: 61: Hoare triple {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:02,421 INFO L273 TraceCheckUtils]: 62: Hoare triple {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:02,422 INFO L273 TraceCheckUtils]: 63: Hoare triple {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:02,422 INFO L273 TraceCheckUtils]: 64: Hoare triple {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:02,423 INFO L273 TraceCheckUtils]: 65: Hoare triple {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:02,424 INFO L273 TraceCheckUtils]: 66: Hoare triple {20069#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {20070#(= 8512 |ssl3_accept_#t~mem32|)} is VALID [2018-11-23 12:47:02,424 INFO L273 TraceCheckUtils]: 67: Hoare triple {20070#(= 8512 |ssl3_accept_#t~mem32|)} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {20068#false} is VALID [2018-11-23 12:47:02,425 INFO L273 TraceCheckUtils]: 68: Hoare triple {20068#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {20068#false} is VALID [2018-11-23 12:47:02,425 INFO L273 TraceCheckUtils]: 69: Hoare triple {20068#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {20068#false} is VALID [2018-11-23 12:47:02,425 INFO L273 TraceCheckUtils]: 70: Hoare triple {20068#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {20068#false} is VALID [2018-11-23 12:47:02,425 INFO L273 TraceCheckUtils]: 71: Hoare triple {20068#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {20068#false} is VALID [2018-11-23 12:47:02,425 INFO L273 TraceCheckUtils]: 72: Hoare triple {20068#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {20068#false} is VALID [2018-11-23 12:47:02,426 INFO L273 TraceCheckUtils]: 73: Hoare triple {20068#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {20068#false} is VALID [2018-11-23 12:47:02,426 INFO L273 TraceCheckUtils]: 74: Hoare triple {20068#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {20068#false} is VALID [2018-11-23 12:47:02,426 INFO L273 TraceCheckUtils]: 75: Hoare triple {20068#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {20068#false} is VALID [2018-11-23 12:47:02,426 INFO L273 TraceCheckUtils]: 76: Hoare triple {20068#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {20068#false} is VALID [2018-11-23 12:47:02,426 INFO L273 TraceCheckUtils]: 77: Hoare triple {20068#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {20068#false} is VALID [2018-11-23 12:47:02,427 INFO L273 TraceCheckUtils]: 78: Hoare triple {20068#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {20068#false} is VALID [2018-11-23 12:47:02,427 INFO L273 TraceCheckUtils]: 79: Hoare triple {20068#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {20068#false} is VALID [2018-11-23 12:47:02,427 INFO L273 TraceCheckUtils]: 80: Hoare triple {20068#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {20068#false} is VALID [2018-11-23 12:47:02,427 INFO L273 TraceCheckUtils]: 81: Hoare triple {20068#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {20068#false} is VALID [2018-11-23 12:47:02,427 INFO L273 TraceCheckUtils]: 82: Hoare triple {20068#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {20068#false} is VALID [2018-11-23 12:47:02,428 INFO L273 TraceCheckUtils]: 83: Hoare triple {20068#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {20068#false} is VALID [2018-11-23 12:47:02,428 INFO L273 TraceCheckUtils]: 84: Hoare triple {20068#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {20068#false} is VALID [2018-11-23 12:47:02,428 INFO L273 TraceCheckUtils]: 85: Hoare triple {20068#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {20068#false} is VALID [2018-11-23 12:47:02,428 INFO L273 TraceCheckUtils]: 86: Hoare triple {20068#false} assume 8672 == #t~mem51;havoc #t~mem51; {20068#false} is VALID [2018-11-23 12:47:02,428 INFO L273 TraceCheckUtils]: 87: Hoare triple {20068#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {20068#false} is VALID [2018-11-23 12:47:02,428 INFO L273 TraceCheckUtils]: 88: Hoare triple {20068#false} assume 4 == ~blastFlag~0; {20068#false} is VALID [2018-11-23 12:47:02,428 INFO L273 TraceCheckUtils]: 89: Hoare triple {20068#false} assume !false; {20068#false} is VALID [2018-11-23 12:47:02,435 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:02,435 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:02,435 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:02,436 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 90 [2018-11-23 12:47:02,436 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:02,436 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:02,519 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 80 edges. 80 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:02,520 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:02,520 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:02,520 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:02,521 INFO L87 Difference]: Start difference. First operand 239 states and 363 transitions. Second operand 4 states. [2018-11-23 12:47:03,681 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:03,682 INFO L93 Difference]: Finished difference Result 511 states and 784 transitions. [2018-11-23 12:47:03,682 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:03,682 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 90 [2018-11-23 12:47:03,682 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:03,682 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:03,684 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 471 transitions. [2018-11-23 12:47:03,684 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:03,686 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 471 transitions. [2018-11-23 12:47:03,686 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 471 transitions. [2018-11-23 12:47:04,144 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 471 edges. 471 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:04,152 INFO L225 Difference]: With dead ends: 511 [2018-11-23 12:47:04,153 INFO L226 Difference]: Without dead ends: 297 [2018-11-23 12:47:04,153 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:04,154 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 297 states. [2018-11-23 12:47:04,218 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 297 to 263. [2018-11-23 12:47:04,218 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:04,218 INFO L82 GeneralOperation]: Start isEquivalent. First operand 297 states. Second operand 263 states. [2018-11-23 12:47:04,219 INFO L74 IsIncluded]: Start isIncluded. First operand 297 states. Second operand 263 states. [2018-11-23 12:47:04,219 INFO L87 Difference]: Start difference. First operand 297 states. Second operand 263 states. [2018-11-23 12:47:04,224 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:04,224 INFO L93 Difference]: Finished difference Result 297 states and 448 transitions. [2018-11-23 12:47:04,225 INFO L276 IsEmpty]: Start isEmpty. Operand 297 states and 448 transitions. [2018-11-23 12:47:04,225 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:04,225 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:04,225 INFO L74 IsIncluded]: Start isIncluded. First operand 263 states. Second operand 297 states. [2018-11-23 12:47:04,225 INFO L87 Difference]: Start difference. First operand 263 states. Second operand 297 states. [2018-11-23 12:47:04,231 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:04,232 INFO L93 Difference]: Finished difference Result 297 states and 448 transitions. [2018-11-23 12:47:04,232 INFO L276 IsEmpty]: Start isEmpty. Operand 297 states and 448 transitions. [2018-11-23 12:47:04,232 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:04,232 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:04,233 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:04,233 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:04,233 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 12:47:04,238 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 405 transitions. [2018-11-23 12:47:04,239 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 405 transitions. Word has length 90 [2018-11-23 12:47:04,239 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:04,239 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 405 transitions. [2018-11-23 12:47:04,239 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:04,239 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 405 transitions. [2018-11-23 12:47:04,240 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2018-11-23 12:47:04,240 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:04,240 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:04,240 INFO L423 AbstractCegarLoop]: === Iteration 22 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:04,241 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:04,241 INFO L82 PathProgramCache]: Analyzing trace with hash 1958988209, now seen corresponding path program 1 times [2018-11-23 12:47:04,241 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:04,241 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:04,242 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:04,242 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:04,242 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:04,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:05,164 INFO L256 TraceCheckUtils]: 0: Hoare triple {21559#true} call ULTIMATE.init(); {21559#true} is VALID [2018-11-23 12:47:05,165 INFO L273 TraceCheckUtils]: 1: Hoare triple {21559#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {21559#true} is VALID [2018-11-23 12:47:05,165 INFO L273 TraceCheckUtils]: 2: Hoare triple {21559#true} assume true; {21559#true} is VALID [2018-11-23 12:47:05,165 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {21559#true} {21559#true} #607#return; {21559#true} is VALID [2018-11-23 12:47:05,165 INFO L256 TraceCheckUtils]: 4: Hoare triple {21559#true} call #t~ret139 := main(); {21559#true} is VALID [2018-11-23 12:47:05,165 INFO L273 TraceCheckUtils]: 5: Hoare triple {21559#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {21559#true} is VALID [2018-11-23 12:47:05,166 INFO L256 TraceCheckUtils]: 6: Hoare triple {21559#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {21559#true} is VALID [2018-11-23 12:47:05,166 INFO L273 TraceCheckUtils]: 7: Hoare triple {21559#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {21559#true} is VALID [2018-11-23 12:47:05,166 INFO L273 TraceCheckUtils]: 8: Hoare triple {21559#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {21559#true} is VALID [2018-11-23 12:47:05,166 INFO L273 TraceCheckUtils]: 9: Hoare triple {21559#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {21559#true} is VALID [2018-11-23 12:47:05,166 INFO L273 TraceCheckUtils]: 10: Hoare triple {21559#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {21559#true} is VALID [2018-11-23 12:47:05,166 INFO L273 TraceCheckUtils]: 11: Hoare triple {21559#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {21559#true} is VALID [2018-11-23 12:47:05,167 INFO L273 TraceCheckUtils]: 12: Hoare triple {21559#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {21559#true} is VALID [2018-11-23 12:47:05,167 INFO L273 TraceCheckUtils]: 13: Hoare triple {21559#true} assume !false; {21559#true} is VALID [2018-11-23 12:47:05,167 INFO L273 TraceCheckUtils]: 14: Hoare triple {21559#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {21559#true} is VALID [2018-11-23 12:47:05,167 INFO L273 TraceCheckUtils]: 15: Hoare triple {21559#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {21559#true} is VALID [2018-11-23 12:47:05,167 INFO L273 TraceCheckUtils]: 16: Hoare triple {21559#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {21559#true} is VALID [2018-11-23 12:47:05,168 INFO L273 TraceCheckUtils]: 17: Hoare triple {21559#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {21559#true} is VALID [2018-11-23 12:47:05,168 INFO L273 TraceCheckUtils]: 18: Hoare triple {21559#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {21559#true} is VALID [2018-11-23 12:47:05,168 INFO L273 TraceCheckUtils]: 19: Hoare triple {21559#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {21559#true} is VALID [2018-11-23 12:47:05,168 INFO L273 TraceCheckUtils]: 20: Hoare triple {21559#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {21559#true} is VALID [2018-11-23 12:47:05,168 INFO L273 TraceCheckUtils]: 21: Hoare triple {21559#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {21559#true} is VALID [2018-11-23 12:47:05,168 INFO L273 TraceCheckUtils]: 22: Hoare triple {21559#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {21559#true} is VALID [2018-11-23 12:47:05,169 INFO L273 TraceCheckUtils]: 23: Hoare triple {21559#true} assume 8464 == #t~mem27;havoc #t~mem27; {21559#true} is VALID [2018-11-23 12:47:05,169 INFO L273 TraceCheckUtils]: 24: Hoare triple {21559#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {21559#true} is VALID [2018-11-23 12:47:05,169 INFO L273 TraceCheckUtils]: 25: Hoare triple {21559#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {21559#true} is VALID [2018-11-23 12:47:05,182 INFO L273 TraceCheckUtils]: 26: Hoare triple {21559#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:05,195 INFO L273 TraceCheckUtils]: 27: Hoare triple {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:05,205 INFO L273 TraceCheckUtils]: 28: Hoare triple {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:05,218 INFO L273 TraceCheckUtils]: 29: Hoare triple {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:05,231 INFO L273 TraceCheckUtils]: 30: Hoare triple {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:05,243 INFO L273 TraceCheckUtils]: 31: Hoare triple {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:05,259 INFO L273 TraceCheckUtils]: 32: Hoare triple {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume 12292 == #t~mem19;havoc #t~mem19; {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:05,269 INFO L273 TraceCheckUtils]: 33: Hoare triple {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call write~int(1, ~s.base, 40 + ~s.offset, 4); {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:05,282 INFO L273 TraceCheckUtils]: 34: Hoare triple {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call write~int(1, ~s.base, 36 + ~s.offset, 4); {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:05,297 INFO L273 TraceCheckUtils]: 35: Hoare triple {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:05,306 INFO L273 TraceCheckUtils]: 36: Hoare triple {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem54 := read~int(~s.base, ~s.offset, 4); {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:05,323 INFO L273 TraceCheckUtils]: 37: Hoare triple {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(3 != #t~mem54 / 256);havoc #t~mem54;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:05,335 INFO L273 TraceCheckUtils]: 38: Hoare triple {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == (#t~mem55.base + #t~mem55.offset) % 4294967296);havoc #t~mem55.base, #t~mem55.offset; {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:05,348 INFO L273 TraceCheckUtils]: 39: Hoare triple {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~tmp___4~0 := #t~nondet57;havoc #t~nondet57; {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:05,363 INFO L273 TraceCheckUtils]: 40: Hoare triple {21561#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 40) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem58 := read~int(~s.base, 52 + ~s.offset, 4); {21562#(= |ssl3_accept_#t~mem58| 8496)} is VALID [2018-11-23 12:47:05,378 INFO L273 TraceCheckUtils]: 41: Hoare triple {21562#(= |ssl3_accept_#t~mem58| 8496)} assume !(12292 != #t~mem58);havoc #t~mem58;call #t~mem62.base, #t~mem62.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem63 := read~int(#t~mem62.base, 76 + #t~mem62.offset, 4);call write~int(1 + #t~mem63, #t~mem62.base, 76 + #t~mem62.offset, 4);havoc #t~mem63;havoc #t~mem62.base, #t~mem62.offset;call write~int(8480, ~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,378 INFO L273 TraceCheckUtils]: 42: Hoare triple {21560#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,378 INFO L273 TraceCheckUtils]: 43: Hoare triple {21560#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {21560#false} is VALID [2018-11-23 12:47:05,379 INFO L273 TraceCheckUtils]: 44: Hoare triple {21560#false} ~skip~0 := 0; {21560#false} is VALID [2018-11-23 12:47:05,379 INFO L273 TraceCheckUtils]: 45: Hoare triple {21560#false} assume !false; {21560#false} is VALID [2018-11-23 12:47:05,379 INFO L273 TraceCheckUtils]: 46: Hoare triple {21560#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,379 INFO L273 TraceCheckUtils]: 47: Hoare triple {21560#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,379 INFO L273 TraceCheckUtils]: 48: Hoare triple {21560#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,379 INFO L273 TraceCheckUtils]: 49: Hoare triple {21560#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,380 INFO L273 TraceCheckUtils]: 50: Hoare triple {21560#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,380 INFO L273 TraceCheckUtils]: 51: Hoare triple {21560#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,380 INFO L273 TraceCheckUtils]: 52: Hoare triple {21560#false} assume 8480 == #t~mem24;havoc #t~mem24; {21560#false} is VALID [2018-11-23 12:47:05,380 INFO L273 TraceCheckUtils]: 53: Hoare triple {21560#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {21560#false} is VALID [2018-11-23 12:47:05,380 INFO L273 TraceCheckUtils]: 54: Hoare triple {21560#false} assume !(~ret~0 <= 0);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem65.base, 844 + #t~mem65.offset, 4);havoc #t~mem65.base, #t~mem65.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,380 INFO L273 TraceCheckUtils]: 55: Hoare triple {21560#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,381 INFO L273 TraceCheckUtils]: 56: Hoare triple {21560#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {21560#false} is VALID [2018-11-23 12:47:05,381 INFO L273 TraceCheckUtils]: 57: Hoare triple {21560#false} ~skip~0 := 0; {21560#false} is VALID [2018-11-23 12:47:05,381 INFO L273 TraceCheckUtils]: 58: Hoare triple {21560#false} assume !false; {21560#false} is VALID [2018-11-23 12:47:05,381 INFO L273 TraceCheckUtils]: 59: Hoare triple {21560#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,381 INFO L273 TraceCheckUtils]: 60: Hoare triple {21560#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,381 INFO L273 TraceCheckUtils]: 61: Hoare triple {21560#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,382 INFO L273 TraceCheckUtils]: 62: Hoare triple {21560#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,382 INFO L273 TraceCheckUtils]: 63: Hoare triple {21560#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,382 INFO L273 TraceCheckUtils]: 64: Hoare triple {21560#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,382 INFO L273 TraceCheckUtils]: 65: Hoare triple {21560#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,382 INFO L273 TraceCheckUtils]: 66: Hoare triple {21560#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,382 INFO L273 TraceCheckUtils]: 67: Hoare triple {21560#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,383 INFO L273 TraceCheckUtils]: 68: Hoare triple {21560#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,383 INFO L273 TraceCheckUtils]: 69: Hoare triple {21560#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,383 INFO L273 TraceCheckUtils]: 70: Hoare triple {21560#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,383 INFO L273 TraceCheckUtils]: 71: Hoare triple {21560#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,383 INFO L273 TraceCheckUtils]: 72: Hoare triple {21560#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,383 INFO L273 TraceCheckUtils]: 73: Hoare triple {21560#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,384 INFO L273 TraceCheckUtils]: 74: Hoare triple {21560#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,384 INFO L273 TraceCheckUtils]: 75: Hoare triple {21560#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,384 INFO L273 TraceCheckUtils]: 76: Hoare triple {21560#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,384 INFO L273 TraceCheckUtils]: 77: Hoare triple {21560#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,384 INFO L273 TraceCheckUtils]: 78: Hoare triple {21560#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,384 INFO L273 TraceCheckUtils]: 79: Hoare triple {21560#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,384 INFO L273 TraceCheckUtils]: 80: Hoare triple {21560#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,385 INFO L273 TraceCheckUtils]: 81: Hoare triple {21560#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,385 INFO L273 TraceCheckUtils]: 82: Hoare triple {21560#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,385 INFO L273 TraceCheckUtils]: 83: Hoare triple {21560#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,385 INFO L273 TraceCheckUtils]: 84: Hoare triple {21560#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,385 INFO L273 TraceCheckUtils]: 85: Hoare triple {21560#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,385 INFO L273 TraceCheckUtils]: 86: Hoare triple {21560#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,386 INFO L273 TraceCheckUtils]: 87: Hoare triple {21560#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,386 INFO L273 TraceCheckUtils]: 88: Hoare triple {21560#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,386 INFO L273 TraceCheckUtils]: 89: Hoare triple {21560#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,386 INFO L273 TraceCheckUtils]: 90: Hoare triple {21560#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,386 INFO L273 TraceCheckUtils]: 91: Hoare triple {21560#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {21560#false} is VALID [2018-11-23 12:47:05,386 INFO L273 TraceCheckUtils]: 92: Hoare triple {21560#false} assume 8672 == #t~mem51;havoc #t~mem51; {21560#false} is VALID [2018-11-23 12:47:05,387 INFO L273 TraceCheckUtils]: 93: Hoare triple {21560#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {21560#false} is VALID [2018-11-23 12:47:05,387 INFO L273 TraceCheckUtils]: 94: Hoare triple {21560#false} assume 4 == ~blastFlag~0; {21560#false} is VALID [2018-11-23 12:47:05,387 INFO L273 TraceCheckUtils]: 95: Hoare triple {21560#false} assume !false; {21560#false} is VALID [2018-11-23 12:47:05,396 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 34 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:05,396 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:05,396 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:05,397 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 96 [2018-11-23 12:47:05,397 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:05,397 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:05,650 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 86 edges. 86 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:05,650 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:05,650 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:05,650 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:05,650 INFO L87 Difference]: Start difference. First operand 263 states and 405 transitions. Second operand 4 states. [2018-11-23 12:47:06,647 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:06,647 INFO L93 Difference]: Finished difference Result 518 states and 804 transitions. [2018-11-23 12:47:06,647 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:06,647 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 96 [2018-11-23 12:47:06,648 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:06,648 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:06,650 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 448 transitions. [2018-11-23 12:47:06,651 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:06,653 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 448 transitions. [2018-11-23 12:47:06,653 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 448 transitions. [2018-11-23 12:47:07,107 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 448 edges. 448 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:07,114 INFO L225 Difference]: With dead ends: 518 [2018-11-23 12:47:07,114 INFO L226 Difference]: Without dead ends: 270 [2018-11-23 12:47:07,115 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 3 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:07,115 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 270 states. [2018-11-23 12:47:07,186 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 270 to 263. [2018-11-23 12:47:07,186 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:07,186 INFO L82 GeneralOperation]: Start isEquivalent. First operand 270 states. Second operand 263 states. [2018-11-23 12:47:07,186 INFO L74 IsIncluded]: Start isIncluded. First operand 270 states. Second operand 263 states. [2018-11-23 12:47:07,187 INFO L87 Difference]: Start difference. First operand 270 states. Second operand 263 states. [2018-11-23 12:47:07,192 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:07,193 INFO L93 Difference]: Finished difference Result 270 states and 414 transitions. [2018-11-23 12:47:07,193 INFO L276 IsEmpty]: Start isEmpty. Operand 270 states and 414 transitions. [2018-11-23 12:47:07,193 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:07,193 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:07,193 INFO L74 IsIncluded]: Start isIncluded. First operand 263 states. Second operand 270 states. [2018-11-23 12:47:07,193 INFO L87 Difference]: Start difference. First operand 263 states. Second operand 270 states. [2018-11-23 12:47:07,198 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:07,198 INFO L93 Difference]: Finished difference Result 270 states and 414 transitions. [2018-11-23 12:47:07,198 INFO L276 IsEmpty]: Start isEmpty. Operand 270 states and 414 transitions. [2018-11-23 12:47:07,199 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:07,199 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:07,199 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:07,199 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:07,199 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 12:47:07,203 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 404 transitions. [2018-11-23 12:47:07,203 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 404 transitions. Word has length 96 [2018-11-23 12:47:07,204 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:07,204 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 404 transitions. [2018-11-23 12:47:07,204 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:07,204 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 404 transitions. [2018-11-23 12:47:07,204 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2018-11-23 12:47:07,204 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:07,205 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:07,205 INFO L423 AbstractCegarLoop]: === Iteration 23 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:07,205 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:07,205 INFO L82 PathProgramCache]: Analyzing trace with hash -175401234, now seen corresponding path program 1 times [2018-11-23 12:47:07,205 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:07,205 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:07,206 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:07,206 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:07,206 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:07,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:07,949 INFO L256 TraceCheckUtils]: 0: Hoare triple {23002#true} call ULTIMATE.init(); {23002#true} is VALID [2018-11-23 12:47:07,949 INFO L273 TraceCheckUtils]: 1: Hoare triple {23002#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,950 INFO L273 TraceCheckUtils]: 2: Hoare triple {23002#true} assume true; {23002#true} is VALID [2018-11-23 12:47:07,950 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {23002#true} {23002#true} #607#return; {23002#true} is VALID [2018-11-23 12:47:07,950 INFO L256 TraceCheckUtils]: 4: Hoare triple {23002#true} call #t~ret139 := main(); {23002#true} is VALID [2018-11-23 12:47:07,950 INFO L273 TraceCheckUtils]: 5: Hoare triple {23002#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,950 INFO L256 TraceCheckUtils]: 6: Hoare triple {23002#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {23002#true} is VALID [2018-11-23 12:47:07,950 INFO L273 TraceCheckUtils]: 7: Hoare triple {23002#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,951 INFO L273 TraceCheckUtils]: 8: Hoare triple {23002#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {23002#true} is VALID [2018-11-23 12:47:07,951 INFO L273 TraceCheckUtils]: 9: Hoare triple {23002#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {23002#true} is VALID [2018-11-23 12:47:07,951 INFO L273 TraceCheckUtils]: 10: Hoare triple {23002#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {23002#true} is VALID [2018-11-23 12:47:07,951 INFO L273 TraceCheckUtils]: 11: Hoare triple {23002#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,951 INFO L273 TraceCheckUtils]: 12: Hoare triple {23002#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {23002#true} is VALID [2018-11-23 12:47:07,952 INFO L273 TraceCheckUtils]: 13: Hoare triple {23002#true} assume !false; {23002#true} is VALID [2018-11-23 12:47:07,952 INFO L273 TraceCheckUtils]: 14: Hoare triple {23002#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,952 INFO L273 TraceCheckUtils]: 15: Hoare triple {23002#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,952 INFO L273 TraceCheckUtils]: 16: Hoare triple {23002#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,952 INFO L273 TraceCheckUtils]: 17: Hoare triple {23002#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,953 INFO L273 TraceCheckUtils]: 18: Hoare triple {23002#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,953 INFO L273 TraceCheckUtils]: 19: Hoare triple {23002#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,953 INFO L273 TraceCheckUtils]: 20: Hoare triple {23002#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,953 INFO L273 TraceCheckUtils]: 21: Hoare triple {23002#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,953 INFO L273 TraceCheckUtils]: 22: Hoare triple {23002#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,953 INFO L273 TraceCheckUtils]: 23: Hoare triple {23002#true} assume 8464 == #t~mem27;havoc #t~mem27; {23002#true} is VALID [2018-11-23 12:47:07,954 INFO L273 TraceCheckUtils]: 24: Hoare triple {23002#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {23002#true} is VALID [2018-11-23 12:47:07,954 INFO L273 TraceCheckUtils]: 25: Hoare triple {23002#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {23002#true} is VALID [2018-11-23 12:47:07,954 INFO L273 TraceCheckUtils]: 26: Hoare triple {23002#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,954 INFO L273 TraceCheckUtils]: 27: Hoare triple {23002#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,954 INFO L273 TraceCheckUtils]: 28: Hoare triple {23002#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {23002#true} is VALID [2018-11-23 12:47:07,955 INFO L273 TraceCheckUtils]: 29: Hoare triple {23002#true} ~skip~0 := 0; {23002#true} is VALID [2018-11-23 12:47:07,955 INFO L273 TraceCheckUtils]: 30: Hoare triple {23002#true} assume !false; {23002#true} is VALID [2018-11-23 12:47:07,955 INFO L273 TraceCheckUtils]: 31: Hoare triple {23002#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,955 INFO L273 TraceCheckUtils]: 32: Hoare triple {23002#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,955 INFO L273 TraceCheckUtils]: 33: Hoare triple {23002#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,955 INFO L273 TraceCheckUtils]: 34: Hoare triple {23002#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,956 INFO L273 TraceCheckUtils]: 35: Hoare triple {23002#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,956 INFO L273 TraceCheckUtils]: 36: Hoare triple {23002#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,956 INFO L273 TraceCheckUtils]: 37: Hoare triple {23002#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,956 INFO L273 TraceCheckUtils]: 38: Hoare triple {23002#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,956 INFO L273 TraceCheckUtils]: 39: Hoare triple {23002#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,957 INFO L273 TraceCheckUtils]: 40: Hoare triple {23002#true} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,957 INFO L273 TraceCheckUtils]: 41: Hoare triple {23002#true} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,957 INFO L273 TraceCheckUtils]: 42: Hoare triple {23002#true} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,957 INFO L273 TraceCheckUtils]: 43: Hoare triple {23002#true} assume 8496 == #t~mem30;havoc #t~mem30; {23002#true} is VALID [2018-11-23 12:47:07,957 INFO L273 TraceCheckUtils]: 44: Hoare triple {23002#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {23002#true} is VALID [2018-11-23 12:47:07,958 INFO L273 TraceCheckUtils]: 45: Hoare triple {23002#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {23002#true} is VALID [2018-11-23 12:47:07,958 INFO L273 TraceCheckUtils]: 46: Hoare triple {23002#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {23002#true} is VALID [2018-11-23 12:47:07,971 INFO L273 TraceCheckUtils]: 47: Hoare triple {23002#true} assume 0 != #t~mem68;havoc #t~mem68;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {23004#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:07,988 INFO L273 TraceCheckUtils]: 48: Hoare triple {23004#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {23004#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:07,997 INFO L273 TraceCheckUtils]: 49: Hoare triple {23004#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {23004#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:08,009 INFO L273 TraceCheckUtils]: 50: Hoare triple {23004#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {23004#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:08,022 INFO L273 TraceCheckUtils]: 51: Hoare triple {23004#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {23004#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:08,035 INFO L273 TraceCheckUtils]: 52: Hoare triple {23004#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {23004#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:08,048 INFO L273 TraceCheckUtils]: 53: Hoare triple {23004#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {23004#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:08,057 INFO L273 TraceCheckUtils]: 54: Hoare triple {23004#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {23004#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:08,069 INFO L273 TraceCheckUtils]: 55: Hoare triple {23004#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {23004#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:08,082 INFO L273 TraceCheckUtils]: 56: Hoare triple {23004#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {23004#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:08,094 INFO L273 TraceCheckUtils]: 57: Hoare triple {23004#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {23004#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:08,107 INFO L273 TraceCheckUtils]: 58: Hoare triple {23004#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {23005#(= 8656 |ssl3_accept_#t~mem24|)} is VALID [2018-11-23 12:47:08,122 INFO L273 TraceCheckUtils]: 59: Hoare triple {23005#(= 8656 |ssl3_accept_#t~mem24|)} assume 8480 == #t~mem24;havoc #t~mem24; {23003#false} is VALID [2018-11-23 12:47:08,122 INFO L273 TraceCheckUtils]: 60: Hoare triple {23003#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {23003#false} is VALID [2018-11-23 12:47:08,122 INFO L273 TraceCheckUtils]: 61: Hoare triple {23003#false} assume !(~ret~0 <= 0);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem65.base, 844 + #t~mem65.offset, 4);havoc #t~mem65.base, #t~mem65.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,123 INFO L273 TraceCheckUtils]: 62: Hoare triple {23003#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,123 INFO L273 TraceCheckUtils]: 63: Hoare triple {23003#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {23003#false} is VALID [2018-11-23 12:47:08,123 INFO L273 TraceCheckUtils]: 64: Hoare triple {23003#false} ~skip~0 := 0; {23003#false} is VALID [2018-11-23 12:47:08,123 INFO L273 TraceCheckUtils]: 65: Hoare triple {23003#false} assume !false; {23003#false} is VALID [2018-11-23 12:47:08,123 INFO L273 TraceCheckUtils]: 66: Hoare triple {23003#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,123 INFO L273 TraceCheckUtils]: 67: Hoare triple {23003#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,124 INFO L273 TraceCheckUtils]: 68: Hoare triple {23003#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,124 INFO L273 TraceCheckUtils]: 69: Hoare triple {23003#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,124 INFO L273 TraceCheckUtils]: 70: Hoare triple {23003#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,124 INFO L273 TraceCheckUtils]: 71: Hoare triple {23003#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,124 INFO L273 TraceCheckUtils]: 72: Hoare triple {23003#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,124 INFO L273 TraceCheckUtils]: 73: Hoare triple {23003#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,125 INFO L273 TraceCheckUtils]: 74: Hoare triple {23003#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,125 INFO L273 TraceCheckUtils]: 75: Hoare triple {23003#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,125 INFO L273 TraceCheckUtils]: 76: Hoare triple {23003#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,125 INFO L273 TraceCheckUtils]: 77: Hoare triple {23003#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,125 INFO L273 TraceCheckUtils]: 78: Hoare triple {23003#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,125 INFO L273 TraceCheckUtils]: 79: Hoare triple {23003#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,126 INFO L273 TraceCheckUtils]: 80: Hoare triple {23003#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,126 INFO L273 TraceCheckUtils]: 81: Hoare triple {23003#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,126 INFO L273 TraceCheckUtils]: 82: Hoare triple {23003#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,126 INFO L273 TraceCheckUtils]: 83: Hoare triple {23003#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,126 INFO L273 TraceCheckUtils]: 84: Hoare triple {23003#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,127 INFO L273 TraceCheckUtils]: 85: Hoare triple {23003#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,127 INFO L273 TraceCheckUtils]: 86: Hoare triple {23003#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,127 INFO L273 TraceCheckUtils]: 87: Hoare triple {23003#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,127 INFO L273 TraceCheckUtils]: 88: Hoare triple {23003#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,127 INFO L273 TraceCheckUtils]: 89: Hoare triple {23003#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,127 INFO L273 TraceCheckUtils]: 90: Hoare triple {23003#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,128 INFO L273 TraceCheckUtils]: 91: Hoare triple {23003#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,128 INFO L273 TraceCheckUtils]: 92: Hoare triple {23003#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,128 INFO L273 TraceCheckUtils]: 93: Hoare triple {23003#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,128 INFO L273 TraceCheckUtils]: 94: Hoare triple {23003#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,128 INFO L273 TraceCheckUtils]: 95: Hoare triple {23003#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,128 INFO L273 TraceCheckUtils]: 96: Hoare triple {23003#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,129 INFO L273 TraceCheckUtils]: 97: Hoare triple {23003#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,129 INFO L273 TraceCheckUtils]: 98: Hoare triple {23003#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {23003#false} is VALID [2018-11-23 12:47:08,129 INFO L273 TraceCheckUtils]: 99: Hoare triple {23003#false} assume 8672 == #t~mem51;havoc #t~mem51; {23003#false} is VALID [2018-11-23 12:47:08,129 INFO L273 TraceCheckUtils]: 100: Hoare triple {23003#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {23003#false} is VALID [2018-11-23 12:47:08,129 INFO L273 TraceCheckUtils]: 101: Hoare triple {23003#false} assume 4 == ~blastFlag~0; {23003#false} is VALID [2018-11-23 12:47:08,130 INFO L273 TraceCheckUtils]: 102: Hoare triple {23003#false} assume !false; {23003#false} is VALID [2018-11-23 12:47:08,140 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 58 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:08,141 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:08,141 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:08,141 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 103 [2018-11-23 12:47:08,142 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:08,142 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:08,562 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 93 edges. 93 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:08,563 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:08,563 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:08,563 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:08,563 INFO L87 Difference]: Start difference. First operand 263 states and 404 transitions. Second operand 4 states. [2018-11-23 12:47:09,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:09,899 INFO L93 Difference]: Finished difference Result 564 states and 862 transitions. [2018-11-23 12:47:09,899 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:09,900 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 103 [2018-11-23 12:47:09,900 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:09,900 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:09,902 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 544 transitions. [2018-11-23 12:47:09,902 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:09,905 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 544 transitions. [2018-11-23 12:47:09,905 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 544 transitions. [2018-11-23 12:47:10,453 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 544 edges. 544 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:10,461 INFO L225 Difference]: With dead ends: 564 [2018-11-23 12:47:10,461 INFO L226 Difference]: Without dead ends: 326 [2018-11-23 12:47:10,462 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:10,462 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 326 states. [2018-11-23 12:47:10,551 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 326 to 263. [2018-11-23 12:47:10,551 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:10,551 INFO L82 GeneralOperation]: Start isEquivalent. First operand 326 states. Second operand 263 states. [2018-11-23 12:47:10,551 INFO L74 IsIncluded]: Start isIncluded. First operand 326 states. Second operand 263 states. [2018-11-23 12:47:10,551 INFO L87 Difference]: Start difference. First operand 326 states. Second operand 263 states. [2018-11-23 12:47:10,557 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:10,557 INFO L93 Difference]: Finished difference Result 326 states and 485 transitions. [2018-11-23 12:47:10,557 INFO L276 IsEmpty]: Start isEmpty. Operand 326 states and 485 transitions. [2018-11-23 12:47:10,558 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:10,558 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:10,558 INFO L74 IsIncluded]: Start isIncluded. First operand 263 states. Second operand 326 states. [2018-11-23 12:47:10,558 INFO L87 Difference]: Start difference. First operand 263 states. Second operand 326 states. [2018-11-23 12:47:10,564 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:10,564 INFO L93 Difference]: Finished difference Result 326 states and 485 transitions. [2018-11-23 12:47:10,564 INFO L276 IsEmpty]: Start isEmpty. Operand 326 states and 485 transitions. [2018-11-23 12:47:10,564 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:10,564 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:10,565 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:10,565 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:10,565 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 12:47:10,569 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 403 transitions. [2018-11-23 12:47:10,569 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 403 transitions. Word has length 103 [2018-11-23 12:47:10,569 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:10,569 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 403 transitions. [2018-11-23 12:47:10,569 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:10,569 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 403 transitions. [2018-11-23 12:47:10,570 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2018-11-23 12:47:10,570 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:10,570 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:10,570 INFO L423 AbstractCegarLoop]: === Iteration 24 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:10,571 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:10,571 INFO L82 PathProgramCache]: Analyzing trace with hash -134726484, now seen corresponding path program 1 times [2018-11-23 12:47:10,571 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:10,571 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:10,572 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:10,572 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:10,572 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:10,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:10,811 INFO L256 TraceCheckUtils]: 0: Hoare triple {24618#true} call ULTIMATE.init(); {24618#true} is VALID [2018-11-23 12:47:10,811 INFO L273 TraceCheckUtils]: 1: Hoare triple {24618#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,811 INFO L273 TraceCheckUtils]: 2: Hoare triple {24618#true} assume true; {24618#true} is VALID [2018-11-23 12:47:10,812 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {24618#true} {24618#true} #607#return; {24618#true} is VALID [2018-11-23 12:47:10,812 INFO L256 TraceCheckUtils]: 4: Hoare triple {24618#true} call #t~ret139 := main(); {24618#true} is VALID [2018-11-23 12:47:10,812 INFO L273 TraceCheckUtils]: 5: Hoare triple {24618#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,812 INFO L256 TraceCheckUtils]: 6: Hoare triple {24618#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {24618#true} is VALID [2018-11-23 12:47:10,812 INFO L273 TraceCheckUtils]: 7: Hoare triple {24618#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,812 INFO L273 TraceCheckUtils]: 8: Hoare triple {24618#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {24618#true} is VALID [2018-11-23 12:47:10,813 INFO L273 TraceCheckUtils]: 9: Hoare triple {24618#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {24618#true} is VALID [2018-11-23 12:47:10,813 INFO L273 TraceCheckUtils]: 10: Hoare triple {24618#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {24618#true} is VALID [2018-11-23 12:47:10,813 INFO L273 TraceCheckUtils]: 11: Hoare triple {24618#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,813 INFO L273 TraceCheckUtils]: 12: Hoare triple {24618#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {24618#true} is VALID [2018-11-23 12:47:10,813 INFO L273 TraceCheckUtils]: 13: Hoare triple {24618#true} assume !false; {24618#true} is VALID [2018-11-23 12:47:10,813 INFO L273 TraceCheckUtils]: 14: Hoare triple {24618#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,814 INFO L273 TraceCheckUtils]: 15: Hoare triple {24618#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,814 INFO L273 TraceCheckUtils]: 16: Hoare triple {24618#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,814 INFO L273 TraceCheckUtils]: 17: Hoare triple {24618#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,814 INFO L273 TraceCheckUtils]: 18: Hoare triple {24618#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,814 INFO L273 TraceCheckUtils]: 19: Hoare triple {24618#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,814 INFO L273 TraceCheckUtils]: 20: Hoare triple {24618#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,814 INFO L273 TraceCheckUtils]: 21: Hoare triple {24618#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,815 INFO L273 TraceCheckUtils]: 22: Hoare triple {24618#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,815 INFO L273 TraceCheckUtils]: 23: Hoare triple {24618#true} assume 8464 == #t~mem27;havoc #t~mem27; {24618#true} is VALID [2018-11-23 12:47:10,815 INFO L273 TraceCheckUtils]: 24: Hoare triple {24618#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {24618#true} is VALID [2018-11-23 12:47:10,815 INFO L273 TraceCheckUtils]: 25: Hoare triple {24618#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {24618#true} is VALID [2018-11-23 12:47:10,815 INFO L273 TraceCheckUtils]: 26: Hoare triple {24618#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,815 INFO L273 TraceCheckUtils]: 27: Hoare triple {24618#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,815 INFO L273 TraceCheckUtils]: 28: Hoare triple {24618#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {24618#true} is VALID [2018-11-23 12:47:10,815 INFO L273 TraceCheckUtils]: 29: Hoare triple {24618#true} ~skip~0 := 0; {24618#true} is VALID [2018-11-23 12:47:10,816 INFO L273 TraceCheckUtils]: 30: Hoare triple {24618#true} assume !false; {24618#true} is VALID [2018-11-23 12:47:10,816 INFO L273 TraceCheckUtils]: 31: Hoare triple {24618#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,816 INFO L273 TraceCheckUtils]: 32: Hoare triple {24618#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,816 INFO L273 TraceCheckUtils]: 33: Hoare triple {24618#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,816 INFO L273 TraceCheckUtils]: 34: Hoare triple {24618#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,816 INFO L273 TraceCheckUtils]: 35: Hoare triple {24618#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,816 INFO L273 TraceCheckUtils]: 36: Hoare triple {24618#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,816 INFO L273 TraceCheckUtils]: 37: Hoare triple {24618#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,816 INFO L273 TraceCheckUtils]: 38: Hoare triple {24618#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,817 INFO L273 TraceCheckUtils]: 39: Hoare triple {24618#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,817 INFO L273 TraceCheckUtils]: 40: Hoare triple {24618#true} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,817 INFO L273 TraceCheckUtils]: 41: Hoare triple {24618#true} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,817 INFO L273 TraceCheckUtils]: 42: Hoare triple {24618#true} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,817 INFO L273 TraceCheckUtils]: 43: Hoare triple {24618#true} assume 8496 == #t~mem30;havoc #t~mem30; {24618#true} is VALID [2018-11-23 12:47:10,817 INFO L273 TraceCheckUtils]: 44: Hoare triple {24618#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {24618#true} is VALID [2018-11-23 12:47:10,817 INFO L273 TraceCheckUtils]: 45: Hoare triple {24618#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {24618#true} is VALID [2018-11-23 12:47:10,817 INFO L273 TraceCheckUtils]: 46: Hoare triple {24618#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {24618#true} is VALID [2018-11-23 12:47:10,818 INFO L273 TraceCheckUtils]: 47: Hoare triple {24618#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {24620#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:10,819 INFO L273 TraceCheckUtils]: 48: Hoare triple {24620#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {24620#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:10,823 INFO L273 TraceCheckUtils]: 49: Hoare triple {24620#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {24620#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:10,823 INFO L273 TraceCheckUtils]: 50: Hoare triple {24620#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {24620#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:10,825 INFO L273 TraceCheckUtils]: 51: Hoare triple {24620#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {24620#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:10,825 INFO L273 TraceCheckUtils]: 52: Hoare triple {24620#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {24620#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:10,827 INFO L273 TraceCheckUtils]: 53: Hoare triple {24620#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {24620#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:10,827 INFO L273 TraceCheckUtils]: 54: Hoare triple {24620#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {24620#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:10,829 INFO L273 TraceCheckUtils]: 55: Hoare triple {24620#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {24620#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:10,829 INFO L273 TraceCheckUtils]: 56: Hoare triple {24620#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {24620#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:10,831 INFO L273 TraceCheckUtils]: 57: Hoare triple {24620#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {24620#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:10,833 INFO L273 TraceCheckUtils]: 58: Hoare triple {24620#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {24621#(= 8512 |ssl3_accept_#t~mem24|)} is VALID [2018-11-23 12:47:10,836 INFO L273 TraceCheckUtils]: 59: Hoare triple {24621#(= 8512 |ssl3_accept_#t~mem24|)} assume 8480 == #t~mem24;havoc #t~mem24; {24619#false} is VALID [2018-11-23 12:47:10,836 INFO L273 TraceCheckUtils]: 60: Hoare triple {24619#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {24619#false} is VALID [2018-11-23 12:47:10,836 INFO L273 TraceCheckUtils]: 61: Hoare triple {24619#false} assume !(~ret~0 <= 0);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem65.base, 844 + #t~mem65.offset, 4);havoc #t~mem65.base, #t~mem65.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,836 INFO L273 TraceCheckUtils]: 62: Hoare triple {24619#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,836 INFO L273 TraceCheckUtils]: 63: Hoare triple {24619#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {24619#false} is VALID [2018-11-23 12:47:10,836 INFO L273 TraceCheckUtils]: 64: Hoare triple {24619#false} ~skip~0 := 0; {24619#false} is VALID [2018-11-23 12:47:10,836 INFO L273 TraceCheckUtils]: 65: Hoare triple {24619#false} assume !false; {24619#false} is VALID [2018-11-23 12:47:10,837 INFO L273 TraceCheckUtils]: 66: Hoare triple {24619#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,837 INFO L273 TraceCheckUtils]: 67: Hoare triple {24619#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,837 INFO L273 TraceCheckUtils]: 68: Hoare triple {24619#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,837 INFO L273 TraceCheckUtils]: 69: Hoare triple {24619#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,837 INFO L273 TraceCheckUtils]: 70: Hoare triple {24619#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,837 INFO L273 TraceCheckUtils]: 71: Hoare triple {24619#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,837 INFO L273 TraceCheckUtils]: 72: Hoare triple {24619#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,837 INFO L273 TraceCheckUtils]: 73: Hoare triple {24619#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,838 INFO L273 TraceCheckUtils]: 74: Hoare triple {24619#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,838 INFO L273 TraceCheckUtils]: 75: Hoare triple {24619#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,838 INFO L273 TraceCheckUtils]: 76: Hoare triple {24619#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,838 INFO L273 TraceCheckUtils]: 77: Hoare triple {24619#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,838 INFO L273 TraceCheckUtils]: 78: Hoare triple {24619#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,838 INFO L273 TraceCheckUtils]: 79: Hoare triple {24619#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,838 INFO L273 TraceCheckUtils]: 80: Hoare triple {24619#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,838 INFO L273 TraceCheckUtils]: 81: Hoare triple {24619#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,838 INFO L273 TraceCheckUtils]: 82: Hoare triple {24619#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,839 INFO L273 TraceCheckUtils]: 83: Hoare triple {24619#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,839 INFO L273 TraceCheckUtils]: 84: Hoare triple {24619#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,839 INFO L273 TraceCheckUtils]: 85: Hoare triple {24619#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,839 INFO L273 TraceCheckUtils]: 86: Hoare triple {24619#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,839 INFO L273 TraceCheckUtils]: 87: Hoare triple {24619#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,839 INFO L273 TraceCheckUtils]: 88: Hoare triple {24619#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,839 INFO L273 TraceCheckUtils]: 89: Hoare triple {24619#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,839 INFO L273 TraceCheckUtils]: 90: Hoare triple {24619#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,839 INFO L273 TraceCheckUtils]: 91: Hoare triple {24619#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,840 INFO L273 TraceCheckUtils]: 92: Hoare triple {24619#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,840 INFO L273 TraceCheckUtils]: 93: Hoare triple {24619#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,840 INFO L273 TraceCheckUtils]: 94: Hoare triple {24619#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,840 INFO L273 TraceCheckUtils]: 95: Hoare triple {24619#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,840 INFO L273 TraceCheckUtils]: 96: Hoare triple {24619#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,840 INFO L273 TraceCheckUtils]: 97: Hoare triple {24619#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,840 INFO L273 TraceCheckUtils]: 98: Hoare triple {24619#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {24619#false} is VALID [2018-11-23 12:47:10,840 INFO L273 TraceCheckUtils]: 99: Hoare triple {24619#false} assume 8672 == #t~mem51;havoc #t~mem51; {24619#false} is VALID [2018-11-23 12:47:10,841 INFO L273 TraceCheckUtils]: 100: Hoare triple {24619#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {24619#false} is VALID [2018-11-23 12:47:10,841 INFO L273 TraceCheckUtils]: 101: Hoare triple {24619#false} assume 4 == ~blastFlag~0; {24619#false} is VALID [2018-11-23 12:47:10,841 INFO L273 TraceCheckUtils]: 102: Hoare triple {24619#false} assume !false; {24619#false} is VALID [2018-11-23 12:47:10,847 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 58 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:10,847 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:10,847 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:10,848 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 103 [2018-11-23 12:47:10,848 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:10,848 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:10,968 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 93 edges. 93 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:10,968 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:10,968 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:10,969 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:10,969 INFO L87 Difference]: Start difference. First operand 263 states and 403 transitions. Second operand 4 states. [2018-11-23 12:47:12,219 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:12,219 INFO L93 Difference]: Finished difference Result 535 states and 821 transitions. [2018-11-23 12:47:12,219 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:12,219 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 103 [2018-11-23 12:47:12,219 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:12,219 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:12,221 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 470 transitions. [2018-11-23 12:47:12,222 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:12,224 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 470 transitions. [2018-11-23 12:47:12,224 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 470 transitions. [2018-11-23 12:47:12,697 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 470 edges. 470 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:12,703 INFO L225 Difference]: With dead ends: 535 [2018-11-23 12:47:12,703 INFO L226 Difference]: Without dead ends: 297 [2018-11-23 12:47:12,704 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:12,704 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 297 states. [2018-11-23 12:47:12,738 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 297 to 263. [2018-11-23 12:47:12,738 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:12,739 INFO L82 GeneralOperation]: Start isEquivalent. First operand 297 states. Second operand 263 states. [2018-11-23 12:47:12,739 INFO L74 IsIncluded]: Start isIncluded. First operand 297 states. Second operand 263 states. [2018-11-23 12:47:12,739 INFO L87 Difference]: Start difference. First operand 297 states. Second operand 263 states. [2018-11-23 12:47:12,744 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:12,744 INFO L93 Difference]: Finished difference Result 297 states and 445 transitions. [2018-11-23 12:47:12,744 INFO L276 IsEmpty]: Start isEmpty. Operand 297 states and 445 transitions. [2018-11-23 12:47:12,745 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:12,745 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:12,745 INFO L74 IsIncluded]: Start isIncluded. First operand 263 states. Second operand 297 states. [2018-11-23 12:47:12,745 INFO L87 Difference]: Start difference. First operand 263 states. Second operand 297 states. [2018-11-23 12:47:12,751 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:12,751 INFO L93 Difference]: Finished difference Result 297 states and 445 transitions. [2018-11-23 12:47:12,751 INFO L276 IsEmpty]: Start isEmpty. Operand 297 states and 445 transitions. [2018-11-23 12:47:12,752 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:12,752 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:12,752 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:12,752 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:12,752 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 12:47:12,758 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 402 transitions. [2018-11-23 12:47:12,758 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 402 transitions. Word has length 103 [2018-11-23 12:47:12,758 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:12,758 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 402 transitions. [2018-11-23 12:47:12,758 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:12,759 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 402 transitions. [2018-11-23 12:47:12,759 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 12:47:12,759 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:12,760 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:12,760 INFO L423 AbstractCegarLoop]: === Iteration 25 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:12,760 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:12,760 INFO L82 PathProgramCache]: Analyzing trace with hash 545887437, now seen corresponding path program 1 times [2018-11-23 12:47:12,760 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:12,760 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:12,761 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:12,762 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:12,762 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:12,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:13,031 INFO L256 TraceCheckUtils]: 0: Hoare triple {26136#true} call ULTIMATE.init(); {26136#true} is VALID [2018-11-23 12:47:13,031 INFO L273 TraceCheckUtils]: 1: Hoare triple {26136#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,031 INFO L273 TraceCheckUtils]: 2: Hoare triple {26136#true} assume true; {26136#true} is VALID [2018-11-23 12:47:13,032 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {26136#true} {26136#true} #607#return; {26136#true} is VALID [2018-11-23 12:47:13,032 INFO L256 TraceCheckUtils]: 4: Hoare triple {26136#true} call #t~ret139 := main(); {26136#true} is VALID [2018-11-23 12:47:13,032 INFO L273 TraceCheckUtils]: 5: Hoare triple {26136#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,032 INFO L256 TraceCheckUtils]: 6: Hoare triple {26136#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {26136#true} is VALID [2018-11-23 12:47:13,032 INFO L273 TraceCheckUtils]: 7: Hoare triple {26136#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,033 INFO L273 TraceCheckUtils]: 8: Hoare triple {26136#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {26136#true} is VALID [2018-11-23 12:47:13,033 INFO L273 TraceCheckUtils]: 9: Hoare triple {26136#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {26136#true} is VALID [2018-11-23 12:47:13,033 INFO L273 TraceCheckUtils]: 10: Hoare triple {26136#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {26136#true} is VALID [2018-11-23 12:47:13,033 INFO L273 TraceCheckUtils]: 11: Hoare triple {26136#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,033 INFO L273 TraceCheckUtils]: 12: Hoare triple {26136#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {26136#true} is VALID [2018-11-23 12:47:13,033 INFO L273 TraceCheckUtils]: 13: Hoare triple {26136#true} assume !false; {26136#true} is VALID [2018-11-23 12:47:13,033 INFO L273 TraceCheckUtils]: 14: Hoare triple {26136#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,033 INFO L273 TraceCheckUtils]: 15: Hoare triple {26136#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,034 INFO L273 TraceCheckUtils]: 16: Hoare triple {26136#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,034 INFO L273 TraceCheckUtils]: 17: Hoare triple {26136#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,034 INFO L273 TraceCheckUtils]: 18: Hoare triple {26136#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,034 INFO L273 TraceCheckUtils]: 19: Hoare triple {26136#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,034 INFO L273 TraceCheckUtils]: 20: Hoare triple {26136#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,034 INFO L273 TraceCheckUtils]: 21: Hoare triple {26136#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,034 INFO L273 TraceCheckUtils]: 22: Hoare triple {26136#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,034 INFO L273 TraceCheckUtils]: 23: Hoare triple {26136#true} assume 8464 == #t~mem27;havoc #t~mem27; {26136#true} is VALID [2018-11-23 12:47:13,034 INFO L273 TraceCheckUtils]: 24: Hoare triple {26136#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {26136#true} is VALID [2018-11-23 12:47:13,035 INFO L273 TraceCheckUtils]: 25: Hoare triple {26136#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {26136#true} is VALID [2018-11-23 12:47:13,035 INFO L273 TraceCheckUtils]: 26: Hoare triple {26136#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,035 INFO L273 TraceCheckUtils]: 27: Hoare triple {26136#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,035 INFO L273 TraceCheckUtils]: 28: Hoare triple {26136#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {26136#true} is VALID [2018-11-23 12:47:13,035 INFO L273 TraceCheckUtils]: 29: Hoare triple {26136#true} ~skip~0 := 0; {26136#true} is VALID [2018-11-23 12:47:13,035 INFO L273 TraceCheckUtils]: 30: Hoare triple {26136#true} assume !false; {26136#true} is VALID [2018-11-23 12:47:13,035 INFO L273 TraceCheckUtils]: 31: Hoare triple {26136#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,035 INFO L273 TraceCheckUtils]: 32: Hoare triple {26136#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,036 INFO L273 TraceCheckUtils]: 33: Hoare triple {26136#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,036 INFO L273 TraceCheckUtils]: 34: Hoare triple {26136#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,036 INFO L273 TraceCheckUtils]: 35: Hoare triple {26136#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,036 INFO L273 TraceCheckUtils]: 36: Hoare triple {26136#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,036 INFO L273 TraceCheckUtils]: 37: Hoare triple {26136#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,036 INFO L273 TraceCheckUtils]: 38: Hoare triple {26136#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,036 INFO L273 TraceCheckUtils]: 39: Hoare triple {26136#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,036 INFO L273 TraceCheckUtils]: 40: Hoare triple {26136#true} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,036 INFO L273 TraceCheckUtils]: 41: Hoare triple {26136#true} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,037 INFO L273 TraceCheckUtils]: 42: Hoare triple {26136#true} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,037 INFO L273 TraceCheckUtils]: 43: Hoare triple {26136#true} assume 8496 == #t~mem30;havoc #t~mem30; {26136#true} is VALID [2018-11-23 12:47:13,037 INFO L273 TraceCheckUtils]: 44: Hoare triple {26136#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {26136#true} is VALID [2018-11-23 12:47:13,037 INFO L273 TraceCheckUtils]: 45: Hoare triple {26136#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {26136#true} is VALID [2018-11-23 12:47:13,037 INFO L273 TraceCheckUtils]: 46: Hoare triple {26136#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {26136#true} is VALID [2018-11-23 12:47:13,038 INFO L273 TraceCheckUtils]: 47: Hoare triple {26136#true} assume 0 != #t~mem68;havoc #t~mem68;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:13,039 INFO L273 TraceCheckUtils]: 48: Hoare triple {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:13,039 INFO L273 TraceCheckUtils]: 49: Hoare triple {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:13,039 INFO L273 TraceCheckUtils]: 50: Hoare triple {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:13,040 INFO L273 TraceCheckUtils]: 51: Hoare triple {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:13,040 INFO L273 TraceCheckUtils]: 52: Hoare triple {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:13,040 INFO L273 TraceCheckUtils]: 53: Hoare triple {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:13,040 INFO L273 TraceCheckUtils]: 54: Hoare triple {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:13,041 INFO L273 TraceCheckUtils]: 55: Hoare triple {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:13,041 INFO L273 TraceCheckUtils]: 56: Hoare triple {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:13,042 INFO L273 TraceCheckUtils]: 57: Hoare triple {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:13,042 INFO L273 TraceCheckUtils]: 58: Hoare triple {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:13,043 INFO L273 TraceCheckUtils]: 59: Hoare triple {26138#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {26139#(= 8656 |ssl3_accept_#t~mem25|)} is VALID [2018-11-23 12:47:13,044 INFO L273 TraceCheckUtils]: 60: Hoare triple {26139#(= 8656 |ssl3_accept_#t~mem25|)} assume 8481 == #t~mem25;havoc #t~mem25; {26137#false} is VALID [2018-11-23 12:47:13,044 INFO L273 TraceCheckUtils]: 61: Hoare triple {26137#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {26137#false} is VALID [2018-11-23 12:47:13,044 INFO L273 TraceCheckUtils]: 62: Hoare triple {26137#false} assume !(~ret~0 <= 0);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem65.base, 844 + #t~mem65.offset, 4);havoc #t~mem65.base, #t~mem65.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,044 INFO L273 TraceCheckUtils]: 63: Hoare triple {26137#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,044 INFO L273 TraceCheckUtils]: 64: Hoare triple {26137#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {26137#false} is VALID [2018-11-23 12:47:13,045 INFO L273 TraceCheckUtils]: 65: Hoare triple {26137#false} ~skip~0 := 0; {26137#false} is VALID [2018-11-23 12:47:13,045 INFO L273 TraceCheckUtils]: 66: Hoare triple {26137#false} assume !false; {26137#false} is VALID [2018-11-23 12:47:13,045 INFO L273 TraceCheckUtils]: 67: Hoare triple {26137#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,045 INFO L273 TraceCheckUtils]: 68: Hoare triple {26137#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,045 INFO L273 TraceCheckUtils]: 69: Hoare triple {26137#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,046 INFO L273 TraceCheckUtils]: 70: Hoare triple {26137#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,046 INFO L273 TraceCheckUtils]: 71: Hoare triple {26137#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,046 INFO L273 TraceCheckUtils]: 72: Hoare triple {26137#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,046 INFO L273 TraceCheckUtils]: 73: Hoare triple {26137#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,046 INFO L273 TraceCheckUtils]: 74: Hoare triple {26137#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,046 INFO L273 TraceCheckUtils]: 75: Hoare triple {26137#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,047 INFO L273 TraceCheckUtils]: 76: Hoare triple {26137#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,047 INFO L273 TraceCheckUtils]: 77: Hoare triple {26137#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,047 INFO L273 TraceCheckUtils]: 78: Hoare triple {26137#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,047 INFO L273 TraceCheckUtils]: 79: Hoare triple {26137#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,047 INFO L273 TraceCheckUtils]: 80: Hoare triple {26137#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,047 INFO L273 TraceCheckUtils]: 81: Hoare triple {26137#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,047 INFO L273 TraceCheckUtils]: 82: Hoare triple {26137#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,048 INFO L273 TraceCheckUtils]: 83: Hoare triple {26137#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,048 INFO L273 TraceCheckUtils]: 84: Hoare triple {26137#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,048 INFO L273 TraceCheckUtils]: 85: Hoare triple {26137#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,048 INFO L273 TraceCheckUtils]: 86: Hoare triple {26137#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,048 INFO L273 TraceCheckUtils]: 87: Hoare triple {26137#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,048 INFO L273 TraceCheckUtils]: 88: Hoare triple {26137#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,048 INFO L273 TraceCheckUtils]: 89: Hoare triple {26137#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,048 INFO L273 TraceCheckUtils]: 90: Hoare triple {26137#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,048 INFO L273 TraceCheckUtils]: 91: Hoare triple {26137#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,049 INFO L273 TraceCheckUtils]: 92: Hoare triple {26137#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,049 INFO L273 TraceCheckUtils]: 93: Hoare triple {26137#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,049 INFO L273 TraceCheckUtils]: 94: Hoare triple {26137#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,049 INFO L273 TraceCheckUtils]: 95: Hoare triple {26137#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,049 INFO L273 TraceCheckUtils]: 96: Hoare triple {26137#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,049 INFO L273 TraceCheckUtils]: 97: Hoare triple {26137#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,049 INFO L273 TraceCheckUtils]: 98: Hoare triple {26137#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,049 INFO L273 TraceCheckUtils]: 99: Hoare triple {26137#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {26137#false} is VALID [2018-11-23 12:47:13,049 INFO L273 TraceCheckUtils]: 100: Hoare triple {26137#false} assume 8672 == #t~mem51;havoc #t~mem51; {26137#false} is VALID [2018-11-23 12:47:13,050 INFO L273 TraceCheckUtils]: 101: Hoare triple {26137#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {26137#false} is VALID [2018-11-23 12:47:13,050 INFO L273 TraceCheckUtils]: 102: Hoare triple {26137#false} assume 4 == ~blastFlag~0; {26137#false} is VALID [2018-11-23 12:47:13,050 INFO L273 TraceCheckUtils]: 103: Hoare triple {26137#false} assume !false; {26137#false} is VALID [2018-11-23 12:47:13,056 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 61 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:13,057 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:13,057 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:13,057 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 12:47:13,057 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:13,057 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:13,144 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 94 edges. 94 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:13,145 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:13,145 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:13,145 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:13,145 INFO L87 Difference]: Start difference. First operand 263 states and 402 transitions. Second operand 4 states. [2018-11-23 12:47:14,445 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:14,446 INFO L93 Difference]: Finished difference Result 562 states and 856 transitions. [2018-11-23 12:47:14,446 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:14,446 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 12:47:14,446 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:14,446 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:14,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 541 transitions. [2018-11-23 12:47:14,448 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:14,450 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 541 transitions. [2018-11-23 12:47:14,450 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 541 transitions. [2018-11-23 12:47:15,006 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 541 edges. 541 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:15,015 INFO L225 Difference]: With dead ends: 562 [2018-11-23 12:47:15,015 INFO L226 Difference]: Without dead ends: 324 [2018-11-23 12:47:15,016 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:15,016 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 324 states. [2018-11-23 12:47:15,067 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 324 to 263. [2018-11-23 12:47:15,068 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:15,068 INFO L82 GeneralOperation]: Start isEquivalent. First operand 324 states. Second operand 263 states. [2018-11-23 12:47:15,068 INFO L74 IsIncluded]: Start isIncluded. First operand 324 states. Second operand 263 states. [2018-11-23 12:47:15,068 INFO L87 Difference]: Start difference. First operand 324 states. Second operand 263 states. [2018-11-23 12:47:15,075 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:15,075 INFO L93 Difference]: Finished difference Result 324 states and 481 transitions. [2018-11-23 12:47:15,075 INFO L276 IsEmpty]: Start isEmpty. Operand 324 states and 481 transitions. [2018-11-23 12:47:15,075 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:15,075 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:15,076 INFO L74 IsIncluded]: Start isIncluded. First operand 263 states. Second operand 324 states. [2018-11-23 12:47:15,076 INFO L87 Difference]: Start difference. First operand 263 states. Second operand 324 states. [2018-11-23 12:47:15,082 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:15,082 INFO L93 Difference]: Finished difference Result 324 states and 481 transitions. [2018-11-23 12:47:15,082 INFO L276 IsEmpty]: Start isEmpty. Operand 324 states and 481 transitions. [2018-11-23 12:47:15,082 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:15,082 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:15,082 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:15,083 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:15,083 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 12:47:15,088 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 401 transitions. [2018-11-23 12:47:15,088 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 401 transitions. Word has length 104 [2018-11-23 12:47:15,089 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:15,089 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 401 transitions. [2018-11-23 12:47:15,089 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:15,089 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 401 transitions. [2018-11-23 12:47:15,090 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 12:47:15,090 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:15,090 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:15,090 INFO L423 AbstractCegarLoop]: === Iteration 26 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:15,090 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:15,091 INFO L82 PathProgramCache]: Analyzing trace with hash -748247598, now seen corresponding path program 1 times [2018-11-23 12:47:15,091 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:15,091 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:15,092 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:15,092 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:15,092 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:15,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:15,306 INFO L256 TraceCheckUtils]: 0: Hoare triple {27745#true} call ULTIMATE.init(); {27745#true} is VALID [2018-11-23 12:47:15,307 INFO L273 TraceCheckUtils]: 1: Hoare triple {27745#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,307 INFO L273 TraceCheckUtils]: 2: Hoare triple {27745#true} assume true; {27745#true} is VALID [2018-11-23 12:47:15,307 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {27745#true} {27745#true} #607#return; {27745#true} is VALID [2018-11-23 12:47:15,307 INFO L256 TraceCheckUtils]: 4: Hoare triple {27745#true} call #t~ret139 := main(); {27745#true} is VALID [2018-11-23 12:47:15,307 INFO L273 TraceCheckUtils]: 5: Hoare triple {27745#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,308 INFO L256 TraceCheckUtils]: 6: Hoare triple {27745#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {27745#true} is VALID [2018-11-23 12:47:15,308 INFO L273 TraceCheckUtils]: 7: Hoare triple {27745#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,308 INFO L273 TraceCheckUtils]: 8: Hoare triple {27745#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {27745#true} is VALID [2018-11-23 12:47:15,309 INFO L273 TraceCheckUtils]: 9: Hoare triple {27745#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {27745#true} is VALID [2018-11-23 12:47:15,309 INFO L273 TraceCheckUtils]: 10: Hoare triple {27745#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {27745#true} is VALID [2018-11-23 12:47:15,309 INFO L273 TraceCheckUtils]: 11: Hoare triple {27745#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,309 INFO L273 TraceCheckUtils]: 12: Hoare triple {27745#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {27745#true} is VALID [2018-11-23 12:47:15,309 INFO L273 TraceCheckUtils]: 13: Hoare triple {27745#true} assume !false; {27745#true} is VALID [2018-11-23 12:47:15,309 INFO L273 TraceCheckUtils]: 14: Hoare triple {27745#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,309 INFO L273 TraceCheckUtils]: 15: Hoare triple {27745#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,310 INFO L273 TraceCheckUtils]: 16: Hoare triple {27745#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,310 INFO L273 TraceCheckUtils]: 17: Hoare triple {27745#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,310 INFO L273 TraceCheckUtils]: 18: Hoare triple {27745#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,310 INFO L273 TraceCheckUtils]: 19: Hoare triple {27745#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,310 INFO L273 TraceCheckUtils]: 20: Hoare triple {27745#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,310 INFO L273 TraceCheckUtils]: 21: Hoare triple {27745#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,310 INFO L273 TraceCheckUtils]: 22: Hoare triple {27745#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,310 INFO L273 TraceCheckUtils]: 23: Hoare triple {27745#true} assume 8464 == #t~mem27;havoc #t~mem27; {27745#true} is VALID [2018-11-23 12:47:15,310 INFO L273 TraceCheckUtils]: 24: Hoare triple {27745#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {27745#true} is VALID [2018-11-23 12:47:15,311 INFO L273 TraceCheckUtils]: 25: Hoare triple {27745#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {27745#true} is VALID [2018-11-23 12:47:15,311 INFO L273 TraceCheckUtils]: 26: Hoare triple {27745#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,311 INFO L273 TraceCheckUtils]: 27: Hoare triple {27745#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,311 INFO L273 TraceCheckUtils]: 28: Hoare triple {27745#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {27745#true} is VALID [2018-11-23 12:47:15,311 INFO L273 TraceCheckUtils]: 29: Hoare triple {27745#true} ~skip~0 := 0; {27745#true} is VALID [2018-11-23 12:47:15,311 INFO L273 TraceCheckUtils]: 30: Hoare triple {27745#true} assume !false; {27745#true} is VALID [2018-11-23 12:47:15,311 INFO L273 TraceCheckUtils]: 31: Hoare triple {27745#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,311 INFO L273 TraceCheckUtils]: 32: Hoare triple {27745#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,312 INFO L273 TraceCheckUtils]: 33: Hoare triple {27745#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,312 INFO L273 TraceCheckUtils]: 34: Hoare triple {27745#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,312 INFO L273 TraceCheckUtils]: 35: Hoare triple {27745#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,312 INFO L273 TraceCheckUtils]: 36: Hoare triple {27745#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,312 INFO L273 TraceCheckUtils]: 37: Hoare triple {27745#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,312 INFO L273 TraceCheckUtils]: 38: Hoare triple {27745#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,312 INFO L273 TraceCheckUtils]: 39: Hoare triple {27745#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,312 INFO L273 TraceCheckUtils]: 40: Hoare triple {27745#true} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,312 INFO L273 TraceCheckUtils]: 41: Hoare triple {27745#true} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,313 INFO L273 TraceCheckUtils]: 42: Hoare triple {27745#true} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,313 INFO L273 TraceCheckUtils]: 43: Hoare triple {27745#true} assume 8496 == #t~mem30;havoc #t~mem30; {27745#true} is VALID [2018-11-23 12:47:15,313 INFO L273 TraceCheckUtils]: 44: Hoare triple {27745#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {27745#true} is VALID [2018-11-23 12:47:15,313 INFO L273 TraceCheckUtils]: 45: Hoare triple {27745#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {27745#true} is VALID [2018-11-23 12:47:15,313 INFO L273 TraceCheckUtils]: 46: Hoare triple {27745#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {27745#true} is VALID [2018-11-23 12:47:15,315 INFO L273 TraceCheckUtils]: 47: Hoare triple {27745#true} assume 0 != #t~mem68;havoc #t~mem68;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:15,315 INFO L273 TraceCheckUtils]: 48: Hoare triple {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:15,325 INFO L273 TraceCheckUtils]: 49: Hoare triple {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:15,326 INFO L273 TraceCheckUtils]: 50: Hoare triple {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:15,327 INFO L273 TraceCheckUtils]: 51: Hoare triple {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:15,327 INFO L273 TraceCheckUtils]: 52: Hoare triple {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:15,330 INFO L273 TraceCheckUtils]: 53: Hoare triple {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:15,330 INFO L273 TraceCheckUtils]: 54: Hoare triple {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:15,332 INFO L273 TraceCheckUtils]: 55: Hoare triple {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:15,332 INFO L273 TraceCheckUtils]: 56: Hoare triple {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:15,332 INFO L273 TraceCheckUtils]: 57: Hoare triple {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:15,333 INFO L273 TraceCheckUtils]: 58: Hoare triple {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:15,333 INFO L273 TraceCheckUtils]: 59: Hoare triple {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:15,333 INFO L273 TraceCheckUtils]: 60: Hoare triple {27747#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {27748#(= 8656 |ssl3_accept_#t~mem26|)} is VALID [2018-11-23 12:47:15,334 INFO L273 TraceCheckUtils]: 61: Hoare triple {27748#(= 8656 |ssl3_accept_#t~mem26|)} assume 8482 == #t~mem26;havoc #t~mem26; {27746#false} is VALID [2018-11-23 12:47:15,334 INFO L273 TraceCheckUtils]: 62: Hoare triple {27746#false} call write~int(3, ~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,334 INFO L273 TraceCheckUtils]: 63: Hoare triple {27746#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,334 INFO L273 TraceCheckUtils]: 64: Hoare triple {27746#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {27746#false} is VALID [2018-11-23 12:47:15,334 INFO L273 TraceCheckUtils]: 65: Hoare triple {27746#false} ~skip~0 := 0; {27746#false} is VALID [2018-11-23 12:47:15,334 INFO L273 TraceCheckUtils]: 66: Hoare triple {27746#false} assume !false; {27746#false} is VALID [2018-11-23 12:47:15,335 INFO L273 TraceCheckUtils]: 67: Hoare triple {27746#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,335 INFO L273 TraceCheckUtils]: 68: Hoare triple {27746#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,335 INFO L273 TraceCheckUtils]: 69: Hoare triple {27746#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,335 INFO L273 TraceCheckUtils]: 70: Hoare triple {27746#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,335 INFO L273 TraceCheckUtils]: 71: Hoare triple {27746#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,335 INFO L273 TraceCheckUtils]: 72: Hoare triple {27746#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,335 INFO L273 TraceCheckUtils]: 73: Hoare triple {27746#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,335 INFO L273 TraceCheckUtils]: 74: Hoare triple {27746#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,335 INFO L273 TraceCheckUtils]: 75: Hoare triple {27746#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,336 INFO L273 TraceCheckUtils]: 76: Hoare triple {27746#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,336 INFO L273 TraceCheckUtils]: 77: Hoare triple {27746#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,336 INFO L273 TraceCheckUtils]: 78: Hoare triple {27746#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,336 INFO L273 TraceCheckUtils]: 79: Hoare triple {27746#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,336 INFO L273 TraceCheckUtils]: 80: Hoare triple {27746#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,336 INFO L273 TraceCheckUtils]: 81: Hoare triple {27746#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,336 INFO L273 TraceCheckUtils]: 82: Hoare triple {27746#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,336 INFO L273 TraceCheckUtils]: 83: Hoare triple {27746#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,336 INFO L273 TraceCheckUtils]: 84: Hoare triple {27746#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,337 INFO L273 TraceCheckUtils]: 85: Hoare triple {27746#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,337 INFO L273 TraceCheckUtils]: 86: Hoare triple {27746#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,337 INFO L273 TraceCheckUtils]: 87: Hoare triple {27746#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,337 INFO L273 TraceCheckUtils]: 88: Hoare triple {27746#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,337 INFO L273 TraceCheckUtils]: 89: Hoare triple {27746#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,337 INFO L273 TraceCheckUtils]: 90: Hoare triple {27746#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,337 INFO L273 TraceCheckUtils]: 91: Hoare triple {27746#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,337 INFO L273 TraceCheckUtils]: 92: Hoare triple {27746#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,338 INFO L273 TraceCheckUtils]: 93: Hoare triple {27746#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,338 INFO L273 TraceCheckUtils]: 94: Hoare triple {27746#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,338 INFO L273 TraceCheckUtils]: 95: Hoare triple {27746#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,338 INFO L273 TraceCheckUtils]: 96: Hoare triple {27746#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,338 INFO L273 TraceCheckUtils]: 97: Hoare triple {27746#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,338 INFO L273 TraceCheckUtils]: 98: Hoare triple {27746#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,338 INFO L273 TraceCheckUtils]: 99: Hoare triple {27746#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {27746#false} is VALID [2018-11-23 12:47:15,338 INFO L273 TraceCheckUtils]: 100: Hoare triple {27746#false} assume 8672 == #t~mem51;havoc #t~mem51; {27746#false} is VALID [2018-11-23 12:47:15,338 INFO L273 TraceCheckUtils]: 101: Hoare triple {27746#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {27746#false} is VALID [2018-11-23 12:47:15,339 INFO L273 TraceCheckUtils]: 102: Hoare triple {27746#false} assume 4 == ~blastFlag~0; {27746#false} is VALID [2018-11-23 12:47:15,339 INFO L273 TraceCheckUtils]: 103: Hoare triple {27746#false} assume !false; {27746#false} is VALID [2018-11-23 12:47:15,346 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:15,346 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:15,346 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:15,346 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 12:47:15,346 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:15,347 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:15,433 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 94 edges. 94 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:15,433 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:15,433 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:15,433 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:15,434 INFO L87 Difference]: Start difference. First operand 263 states and 401 transitions. Second operand 4 states. [2018-11-23 12:47:16,887 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:16,887 INFO L93 Difference]: Finished difference Result 561 states and 853 transitions. [2018-11-23 12:47:16,887 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:16,887 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 12:47:16,887 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:16,887 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:16,890 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 539 transitions. [2018-11-23 12:47:16,890 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:16,892 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 539 transitions. [2018-11-23 12:47:16,893 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 539 transitions. [2018-11-23 12:47:17,445 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 539 edges. 539 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:17,453 INFO L225 Difference]: With dead ends: 561 [2018-11-23 12:47:17,453 INFO L226 Difference]: Without dead ends: 323 [2018-11-23 12:47:17,454 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:17,455 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 323 states. [2018-11-23 12:47:17,623 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 323 to 263. [2018-11-23 12:47:17,623 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:17,623 INFO L82 GeneralOperation]: Start isEquivalent. First operand 323 states. Second operand 263 states. [2018-11-23 12:47:17,623 INFO L74 IsIncluded]: Start isIncluded. First operand 323 states. Second operand 263 states. [2018-11-23 12:47:17,624 INFO L87 Difference]: Start difference. First operand 323 states. Second operand 263 states. [2018-11-23 12:47:17,631 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:17,631 INFO L93 Difference]: Finished difference Result 323 states and 479 transitions. [2018-11-23 12:47:17,631 INFO L276 IsEmpty]: Start isEmpty. Operand 323 states and 479 transitions. [2018-11-23 12:47:17,632 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:17,632 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:17,632 INFO L74 IsIncluded]: Start isIncluded. First operand 263 states. Second operand 323 states. [2018-11-23 12:47:17,632 INFO L87 Difference]: Start difference. First operand 263 states. Second operand 323 states. [2018-11-23 12:47:17,639 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:17,639 INFO L93 Difference]: Finished difference Result 323 states and 479 transitions. [2018-11-23 12:47:17,640 INFO L276 IsEmpty]: Start isEmpty. Operand 323 states and 479 transitions. [2018-11-23 12:47:17,640 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:17,640 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:17,640 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:17,641 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:17,641 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 12:47:17,645 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 400 transitions. [2018-11-23 12:47:17,645 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 400 transitions. Word has length 104 [2018-11-23 12:47:17,646 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:17,646 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 400 transitions. [2018-11-23 12:47:17,646 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:17,646 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 400 transitions. [2018-11-23 12:47:17,646 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 12:47:17,646 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:17,647 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:17,647 INFO L423 AbstractCegarLoop]: === Iteration 27 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:17,647 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:17,647 INFO L82 PathProgramCache]: Analyzing trace with hash 1806804687, now seen corresponding path program 1 times [2018-11-23 12:47:17,647 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:17,647 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:17,648 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:17,648 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:17,648 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:17,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:17,831 INFO L256 TraceCheckUtils]: 0: Hoare triple {29350#true} call ULTIMATE.init(); {29350#true} is VALID [2018-11-23 12:47:17,831 INFO L273 TraceCheckUtils]: 1: Hoare triple {29350#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,832 INFO L273 TraceCheckUtils]: 2: Hoare triple {29350#true} assume true; {29350#true} is VALID [2018-11-23 12:47:17,832 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {29350#true} {29350#true} #607#return; {29350#true} is VALID [2018-11-23 12:47:17,832 INFO L256 TraceCheckUtils]: 4: Hoare triple {29350#true} call #t~ret139 := main(); {29350#true} is VALID [2018-11-23 12:47:17,832 INFO L273 TraceCheckUtils]: 5: Hoare triple {29350#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,832 INFO L256 TraceCheckUtils]: 6: Hoare triple {29350#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {29350#true} is VALID [2018-11-23 12:47:17,833 INFO L273 TraceCheckUtils]: 7: Hoare triple {29350#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,833 INFO L273 TraceCheckUtils]: 8: Hoare triple {29350#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {29350#true} is VALID [2018-11-23 12:47:17,833 INFO L273 TraceCheckUtils]: 9: Hoare triple {29350#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {29350#true} is VALID [2018-11-23 12:47:17,833 INFO L273 TraceCheckUtils]: 10: Hoare triple {29350#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {29350#true} is VALID [2018-11-23 12:47:17,833 INFO L273 TraceCheckUtils]: 11: Hoare triple {29350#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,834 INFO L273 TraceCheckUtils]: 12: Hoare triple {29350#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {29350#true} is VALID [2018-11-23 12:47:17,834 INFO L273 TraceCheckUtils]: 13: Hoare triple {29350#true} assume !false; {29350#true} is VALID [2018-11-23 12:47:17,834 INFO L273 TraceCheckUtils]: 14: Hoare triple {29350#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,834 INFO L273 TraceCheckUtils]: 15: Hoare triple {29350#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,834 INFO L273 TraceCheckUtils]: 16: Hoare triple {29350#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,834 INFO L273 TraceCheckUtils]: 17: Hoare triple {29350#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,834 INFO L273 TraceCheckUtils]: 18: Hoare triple {29350#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,835 INFO L273 TraceCheckUtils]: 19: Hoare triple {29350#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,835 INFO L273 TraceCheckUtils]: 20: Hoare triple {29350#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,835 INFO L273 TraceCheckUtils]: 21: Hoare triple {29350#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,835 INFO L273 TraceCheckUtils]: 22: Hoare triple {29350#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,835 INFO L273 TraceCheckUtils]: 23: Hoare triple {29350#true} assume 8464 == #t~mem27;havoc #t~mem27; {29350#true} is VALID [2018-11-23 12:47:17,835 INFO L273 TraceCheckUtils]: 24: Hoare triple {29350#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {29350#true} is VALID [2018-11-23 12:47:17,835 INFO L273 TraceCheckUtils]: 25: Hoare triple {29350#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {29350#true} is VALID [2018-11-23 12:47:17,835 INFO L273 TraceCheckUtils]: 26: Hoare triple {29350#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,835 INFO L273 TraceCheckUtils]: 27: Hoare triple {29350#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,836 INFO L273 TraceCheckUtils]: 28: Hoare triple {29350#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {29350#true} is VALID [2018-11-23 12:47:17,836 INFO L273 TraceCheckUtils]: 29: Hoare triple {29350#true} ~skip~0 := 0; {29350#true} is VALID [2018-11-23 12:47:17,836 INFO L273 TraceCheckUtils]: 30: Hoare triple {29350#true} assume !false; {29350#true} is VALID [2018-11-23 12:47:17,836 INFO L273 TraceCheckUtils]: 31: Hoare triple {29350#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,836 INFO L273 TraceCheckUtils]: 32: Hoare triple {29350#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,836 INFO L273 TraceCheckUtils]: 33: Hoare triple {29350#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,836 INFO L273 TraceCheckUtils]: 34: Hoare triple {29350#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,836 INFO L273 TraceCheckUtils]: 35: Hoare triple {29350#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,836 INFO L273 TraceCheckUtils]: 36: Hoare triple {29350#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,837 INFO L273 TraceCheckUtils]: 37: Hoare triple {29350#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,837 INFO L273 TraceCheckUtils]: 38: Hoare triple {29350#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,837 INFO L273 TraceCheckUtils]: 39: Hoare triple {29350#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,837 INFO L273 TraceCheckUtils]: 40: Hoare triple {29350#true} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,837 INFO L273 TraceCheckUtils]: 41: Hoare triple {29350#true} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,837 INFO L273 TraceCheckUtils]: 42: Hoare triple {29350#true} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,837 INFO L273 TraceCheckUtils]: 43: Hoare triple {29350#true} assume 8496 == #t~mem30;havoc #t~mem30; {29350#true} is VALID [2018-11-23 12:47:17,837 INFO L273 TraceCheckUtils]: 44: Hoare triple {29350#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {29350#true} is VALID [2018-11-23 12:47:17,837 INFO L273 TraceCheckUtils]: 45: Hoare triple {29350#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {29350#true} is VALID [2018-11-23 12:47:17,838 INFO L273 TraceCheckUtils]: 46: Hoare triple {29350#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {29350#true} is VALID [2018-11-23 12:47:17,838 INFO L273 TraceCheckUtils]: 47: Hoare triple {29350#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:17,839 INFO L273 TraceCheckUtils]: 48: Hoare triple {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:17,840 INFO L273 TraceCheckUtils]: 49: Hoare triple {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:17,840 INFO L273 TraceCheckUtils]: 50: Hoare triple {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:17,840 INFO L273 TraceCheckUtils]: 51: Hoare triple {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:17,840 INFO L273 TraceCheckUtils]: 52: Hoare triple {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:17,841 INFO L273 TraceCheckUtils]: 53: Hoare triple {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:17,841 INFO L273 TraceCheckUtils]: 54: Hoare triple {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:17,842 INFO L273 TraceCheckUtils]: 55: Hoare triple {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:17,842 INFO L273 TraceCheckUtils]: 56: Hoare triple {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:17,843 INFO L273 TraceCheckUtils]: 57: Hoare triple {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:17,843 INFO L273 TraceCheckUtils]: 58: Hoare triple {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:17,844 INFO L273 TraceCheckUtils]: 59: Hoare triple {29352#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {29353#(= 8512 |ssl3_accept_#t~mem25|)} is VALID [2018-11-23 12:47:17,845 INFO L273 TraceCheckUtils]: 60: Hoare triple {29353#(= 8512 |ssl3_accept_#t~mem25|)} assume 8481 == #t~mem25;havoc #t~mem25; {29351#false} is VALID [2018-11-23 12:47:17,845 INFO L273 TraceCheckUtils]: 61: Hoare triple {29351#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet64 && #t~nondet64 <= 2147483647;~ret~0 := #t~nondet64;havoc #t~nondet64; {29351#false} is VALID [2018-11-23 12:47:17,845 INFO L273 TraceCheckUtils]: 62: Hoare triple {29351#false} assume !(~ret~0 <= 0);call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem65.base, 844 + #t~mem65.offset, 4);havoc #t~mem65.base, #t~mem65.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,845 INFO L273 TraceCheckUtils]: 63: Hoare triple {29351#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,846 INFO L273 TraceCheckUtils]: 64: Hoare triple {29351#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {29351#false} is VALID [2018-11-23 12:47:17,846 INFO L273 TraceCheckUtils]: 65: Hoare triple {29351#false} ~skip~0 := 0; {29351#false} is VALID [2018-11-23 12:47:17,846 INFO L273 TraceCheckUtils]: 66: Hoare triple {29351#false} assume !false; {29351#false} is VALID [2018-11-23 12:47:17,846 INFO L273 TraceCheckUtils]: 67: Hoare triple {29351#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,846 INFO L273 TraceCheckUtils]: 68: Hoare triple {29351#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,847 INFO L273 TraceCheckUtils]: 69: Hoare triple {29351#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,847 INFO L273 TraceCheckUtils]: 70: Hoare triple {29351#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,847 INFO L273 TraceCheckUtils]: 71: Hoare triple {29351#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,847 INFO L273 TraceCheckUtils]: 72: Hoare triple {29351#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,847 INFO L273 TraceCheckUtils]: 73: Hoare triple {29351#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,848 INFO L273 TraceCheckUtils]: 74: Hoare triple {29351#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,848 INFO L273 TraceCheckUtils]: 75: Hoare triple {29351#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,848 INFO L273 TraceCheckUtils]: 76: Hoare triple {29351#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,848 INFO L273 TraceCheckUtils]: 77: Hoare triple {29351#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,848 INFO L273 TraceCheckUtils]: 78: Hoare triple {29351#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,849 INFO L273 TraceCheckUtils]: 79: Hoare triple {29351#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,849 INFO L273 TraceCheckUtils]: 80: Hoare triple {29351#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,849 INFO L273 TraceCheckUtils]: 81: Hoare triple {29351#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,849 INFO L273 TraceCheckUtils]: 82: Hoare triple {29351#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,849 INFO L273 TraceCheckUtils]: 83: Hoare triple {29351#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,850 INFO L273 TraceCheckUtils]: 84: Hoare triple {29351#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,850 INFO L273 TraceCheckUtils]: 85: Hoare triple {29351#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,850 INFO L273 TraceCheckUtils]: 86: Hoare triple {29351#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,850 INFO L273 TraceCheckUtils]: 87: Hoare triple {29351#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,850 INFO L273 TraceCheckUtils]: 88: Hoare triple {29351#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,850 INFO L273 TraceCheckUtils]: 89: Hoare triple {29351#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,850 INFO L273 TraceCheckUtils]: 90: Hoare triple {29351#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,850 INFO L273 TraceCheckUtils]: 91: Hoare triple {29351#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,851 INFO L273 TraceCheckUtils]: 92: Hoare triple {29351#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,851 INFO L273 TraceCheckUtils]: 93: Hoare triple {29351#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,851 INFO L273 TraceCheckUtils]: 94: Hoare triple {29351#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,851 INFO L273 TraceCheckUtils]: 95: Hoare triple {29351#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,851 INFO L273 TraceCheckUtils]: 96: Hoare triple {29351#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,851 INFO L273 TraceCheckUtils]: 97: Hoare triple {29351#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,851 INFO L273 TraceCheckUtils]: 98: Hoare triple {29351#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,851 INFO L273 TraceCheckUtils]: 99: Hoare triple {29351#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {29351#false} is VALID [2018-11-23 12:47:17,852 INFO L273 TraceCheckUtils]: 100: Hoare triple {29351#false} assume 8672 == #t~mem51;havoc #t~mem51; {29351#false} is VALID [2018-11-23 12:47:17,852 INFO L273 TraceCheckUtils]: 101: Hoare triple {29351#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {29351#false} is VALID [2018-11-23 12:47:17,852 INFO L273 TraceCheckUtils]: 102: Hoare triple {29351#false} assume 4 == ~blastFlag~0; {29351#false} is VALID [2018-11-23 12:47:17,852 INFO L273 TraceCheckUtils]: 103: Hoare triple {29351#false} assume !false; {29351#false} is VALID [2018-11-23 12:47:17,859 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 61 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:17,859 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:17,859 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:17,859 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 12:47:17,859 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:17,859 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:17,952 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 94 edges. 94 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:17,952 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:17,953 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:17,953 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:17,953 INFO L87 Difference]: Start difference. First operand 263 states and 400 transitions. Second operand 4 states. [2018-11-23 12:47:19,237 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:19,237 INFO L93 Difference]: Finished difference Result 533 states and 813 transitions. [2018-11-23 12:47:19,237 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:19,237 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 12:47:19,237 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:19,237 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:19,239 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 467 transitions. [2018-11-23 12:47:19,239 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:19,241 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 467 transitions. [2018-11-23 12:47:19,241 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 467 transitions. [2018-11-23 12:47:19,705 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 467 edges. 467 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:19,712 INFO L225 Difference]: With dead ends: 533 [2018-11-23 12:47:19,712 INFO L226 Difference]: Without dead ends: 295 [2018-11-23 12:47:19,713 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:19,714 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 295 states. [2018-11-23 12:47:19,782 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 295 to 263. [2018-11-23 12:47:19,782 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:19,782 INFO L82 GeneralOperation]: Start isEquivalent. First operand 295 states. Second operand 263 states. [2018-11-23 12:47:19,783 INFO L74 IsIncluded]: Start isIncluded. First operand 295 states. Second operand 263 states. [2018-11-23 12:47:19,783 INFO L87 Difference]: Start difference. First operand 295 states. Second operand 263 states. [2018-11-23 12:47:19,788 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:19,789 INFO L93 Difference]: Finished difference Result 295 states and 440 transitions. [2018-11-23 12:47:19,789 INFO L276 IsEmpty]: Start isEmpty. Operand 295 states and 440 transitions. [2018-11-23 12:47:19,789 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:19,789 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:19,789 INFO L74 IsIncluded]: Start isIncluded. First operand 263 states. Second operand 295 states. [2018-11-23 12:47:19,789 INFO L87 Difference]: Start difference. First operand 263 states. Second operand 295 states. [2018-11-23 12:47:19,795 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:19,796 INFO L93 Difference]: Finished difference Result 295 states and 440 transitions. [2018-11-23 12:47:19,796 INFO L276 IsEmpty]: Start isEmpty. Operand 295 states and 440 transitions. [2018-11-23 12:47:19,796 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:19,797 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:19,797 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:19,797 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:19,797 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 12:47:19,803 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 399 transitions. [2018-11-23 12:47:19,803 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 399 transitions. Word has length 104 [2018-11-23 12:47:19,803 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:19,803 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 399 transitions. [2018-11-23 12:47:19,803 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:19,804 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 399 transitions. [2018-11-23 12:47:19,804 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 12:47:19,804 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:19,805 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:19,805 INFO L423 AbstractCegarLoop]: === Iteration 28 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:19,805 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:19,805 INFO L82 PathProgramCache]: Analyzing trace with hash 512669652, now seen corresponding path program 1 times [2018-11-23 12:47:19,805 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:19,806 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:19,806 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:19,807 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:19,807 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:19,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:20,342 INFO L256 TraceCheckUtils]: 0: Hoare triple {30861#true} call ULTIMATE.init(); {30861#true} is VALID [2018-11-23 12:47:20,342 INFO L273 TraceCheckUtils]: 1: Hoare triple {30861#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,342 INFO L273 TraceCheckUtils]: 2: Hoare triple {30861#true} assume true; {30861#true} is VALID [2018-11-23 12:47:20,343 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {30861#true} {30861#true} #607#return; {30861#true} is VALID [2018-11-23 12:47:20,343 INFO L256 TraceCheckUtils]: 4: Hoare triple {30861#true} call #t~ret139 := main(); {30861#true} is VALID [2018-11-23 12:47:20,343 INFO L273 TraceCheckUtils]: 5: Hoare triple {30861#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,343 INFO L256 TraceCheckUtils]: 6: Hoare triple {30861#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {30861#true} is VALID [2018-11-23 12:47:20,343 INFO L273 TraceCheckUtils]: 7: Hoare triple {30861#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,343 INFO L273 TraceCheckUtils]: 8: Hoare triple {30861#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {30861#true} is VALID [2018-11-23 12:47:20,344 INFO L273 TraceCheckUtils]: 9: Hoare triple {30861#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {30861#true} is VALID [2018-11-23 12:47:20,344 INFO L273 TraceCheckUtils]: 10: Hoare triple {30861#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {30861#true} is VALID [2018-11-23 12:47:20,344 INFO L273 TraceCheckUtils]: 11: Hoare triple {30861#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,344 INFO L273 TraceCheckUtils]: 12: Hoare triple {30861#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {30861#true} is VALID [2018-11-23 12:47:20,344 INFO L273 TraceCheckUtils]: 13: Hoare triple {30861#true} assume !false; {30861#true} is VALID [2018-11-23 12:47:20,344 INFO L273 TraceCheckUtils]: 14: Hoare triple {30861#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,344 INFO L273 TraceCheckUtils]: 15: Hoare triple {30861#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,344 INFO L273 TraceCheckUtils]: 16: Hoare triple {30861#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,344 INFO L273 TraceCheckUtils]: 17: Hoare triple {30861#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,345 INFO L273 TraceCheckUtils]: 18: Hoare triple {30861#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,345 INFO L273 TraceCheckUtils]: 19: Hoare triple {30861#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,345 INFO L273 TraceCheckUtils]: 20: Hoare triple {30861#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,345 INFO L273 TraceCheckUtils]: 21: Hoare triple {30861#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,345 INFO L273 TraceCheckUtils]: 22: Hoare triple {30861#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,345 INFO L273 TraceCheckUtils]: 23: Hoare triple {30861#true} assume 8464 == #t~mem27;havoc #t~mem27; {30861#true} is VALID [2018-11-23 12:47:20,345 INFO L273 TraceCheckUtils]: 24: Hoare triple {30861#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {30861#true} is VALID [2018-11-23 12:47:20,345 INFO L273 TraceCheckUtils]: 25: Hoare triple {30861#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {30861#true} is VALID [2018-11-23 12:47:20,345 INFO L273 TraceCheckUtils]: 26: Hoare triple {30861#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,346 INFO L273 TraceCheckUtils]: 27: Hoare triple {30861#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,346 INFO L273 TraceCheckUtils]: 28: Hoare triple {30861#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {30861#true} is VALID [2018-11-23 12:47:20,346 INFO L273 TraceCheckUtils]: 29: Hoare triple {30861#true} ~skip~0 := 0; {30861#true} is VALID [2018-11-23 12:47:20,346 INFO L273 TraceCheckUtils]: 30: Hoare triple {30861#true} assume !false; {30861#true} is VALID [2018-11-23 12:47:20,346 INFO L273 TraceCheckUtils]: 31: Hoare triple {30861#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,346 INFO L273 TraceCheckUtils]: 32: Hoare triple {30861#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,346 INFO L273 TraceCheckUtils]: 33: Hoare triple {30861#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,346 INFO L273 TraceCheckUtils]: 34: Hoare triple {30861#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,347 INFO L273 TraceCheckUtils]: 35: Hoare triple {30861#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,347 INFO L273 TraceCheckUtils]: 36: Hoare triple {30861#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,347 INFO L273 TraceCheckUtils]: 37: Hoare triple {30861#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,347 INFO L273 TraceCheckUtils]: 38: Hoare triple {30861#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,347 INFO L273 TraceCheckUtils]: 39: Hoare triple {30861#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,347 INFO L273 TraceCheckUtils]: 40: Hoare triple {30861#true} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,347 INFO L273 TraceCheckUtils]: 41: Hoare triple {30861#true} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,347 INFO L273 TraceCheckUtils]: 42: Hoare triple {30861#true} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,347 INFO L273 TraceCheckUtils]: 43: Hoare triple {30861#true} assume 8496 == #t~mem30;havoc #t~mem30; {30861#true} is VALID [2018-11-23 12:47:20,348 INFO L273 TraceCheckUtils]: 44: Hoare triple {30861#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {30861#true} is VALID [2018-11-23 12:47:20,348 INFO L273 TraceCheckUtils]: 45: Hoare triple {30861#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {30861#true} is VALID [2018-11-23 12:47:20,348 INFO L273 TraceCheckUtils]: 46: Hoare triple {30861#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {30861#true} is VALID [2018-11-23 12:47:20,349 INFO L273 TraceCheckUtils]: 47: Hoare triple {30861#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:20,349 INFO L273 TraceCheckUtils]: 48: Hoare triple {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:20,350 INFO L273 TraceCheckUtils]: 49: Hoare triple {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:20,350 INFO L273 TraceCheckUtils]: 50: Hoare triple {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:20,350 INFO L273 TraceCheckUtils]: 51: Hoare triple {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:20,351 INFO L273 TraceCheckUtils]: 52: Hoare triple {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:20,351 INFO L273 TraceCheckUtils]: 53: Hoare triple {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:20,351 INFO L273 TraceCheckUtils]: 54: Hoare triple {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:20,352 INFO L273 TraceCheckUtils]: 55: Hoare triple {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:20,352 INFO L273 TraceCheckUtils]: 56: Hoare triple {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:20,353 INFO L273 TraceCheckUtils]: 57: Hoare triple {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:20,353 INFO L273 TraceCheckUtils]: 58: Hoare triple {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:20,354 INFO L273 TraceCheckUtils]: 59: Hoare triple {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:20,354 INFO L273 TraceCheckUtils]: 60: Hoare triple {30863#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {30864#(= 8512 |ssl3_accept_#t~mem26|)} is VALID [2018-11-23 12:47:20,355 INFO L273 TraceCheckUtils]: 61: Hoare triple {30864#(= 8512 |ssl3_accept_#t~mem26|)} assume 8482 == #t~mem26;havoc #t~mem26; {30862#false} is VALID [2018-11-23 12:47:20,355 INFO L273 TraceCheckUtils]: 62: Hoare triple {30862#false} call write~int(3, ~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,355 INFO L273 TraceCheckUtils]: 63: Hoare triple {30862#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,355 INFO L273 TraceCheckUtils]: 64: Hoare triple {30862#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {30862#false} is VALID [2018-11-23 12:47:20,356 INFO L273 TraceCheckUtils]: 65: Hoare triple {30862#false} ~skip~0 := 0; {30862#false} is VALID [2018-11-23 12:47:20,356 INFO L273 TraceCheckUtils]: 66: Hoare triple {30862#false} assume !false; {30862#false} is VALID [2018-11-23 12:47:20,356 INFO L273 TraceCheckUtils]: 67: Hoare triple {30862#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,356 INFO L273 TraceCheckUtils]: 68: Hoare triple {30862#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,356 INFO L273 TraceCheckUtils]: 69: Hoare triple {30862#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,357 INFO L273 TraceCheckUtils]: 70: Hoare triple {30862#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,357 INFO L273 TraceCheckUtils]: 71: Hoare triple {30862#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,357 INFO L273 TraceCheckUtils]: 72: Hoare triple {30862#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,357 INFO L273 TraceCheckUtils]: 73: Hoare triple {30862#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,357 INFO L273 TraceCheckUtils]: 74: Hoare triple {30862#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,358 INFO L273 TraceCheckUtils]: 75: Hoare triple {30862#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,358 INFO L273 TraceCheckUtils]: 76: Hoare triple {30862#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,358 INFO L273 TraceCheckUtils]: 77: Hoare triple {30862#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,358 INFO L273 TraceCheckUtils]: 78: Hoare triple {30862#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,358 INFO L273 TraceCheckUtils]: 79: Hoare triple {30862#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,358 INFO L273 TraceCheckUtils]: 80: Hoare triple {30862#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,358 INFO L273 TraceCheckUtils]: 81: Hoare triple {30862#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,358 INFO L273 TraceCheckUtils]: 82: Hoare triple {30862#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,358 INFO L273 TraceCheckUtils]: 83: Hoare triple {30862#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,359 INFO L273 TraceCheckUtils]: 84: Hoare triple {30862#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,359 INFO L273 TraceCheckUtils]: 85: Hoare triple {30862#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,359 INFO L273 TraceCheckUtils]: 86: Hoare triple {30862#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,359 INFO L273 TraceCheckUtils]: 87: Hoare triple {30862#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,359 INFO L273 TraceCheckUtils]: 88: Hoare triple {30862#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,359 INFO L273 TraceCheckUtils]: 89: Hoare triple {30862#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,359 INFO L273 TraceCheckUtils]: 90: Hoare triple {30862#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,359 INFO L273 TraceCheckUtils]: 91: Hoare triple {30862#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,359 INFO L273 TraceCheckUtils]: 92: Hoare triple {30862#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,360 INFO L273 TraceCheckUtils]: 93: Hoare triple {30862#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,360 INFO L273 TraceCheckUtils]: 94: Hoare triple {30862#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,360 INFO L273 TraceCheckUtils]: 95: Hoare triple {30862#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,360 INFO L273 TraceCheckUtils]: 96: Hoare triple {30862#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,360 INFO L273 TraceCheckUtils]: 97: Hoare triple {30862#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,360 INFO L273 TraceCheckUtils]: 98: Hoare triple {30862#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,360 INFO L273 TraceCheckUtils]: 99: Hoare triple {30862#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {30862#false} is VALID [2018-11-23 12:47:20,360 INFO L273 TraceCheckUtils]: 100: Hoare triple {30862#false} assume 8672 == #t~mem51;havoc #t~mem51; {30862#false} is VALID [2018-11-23 12:47:20,361 INFO L273 TraceCheckUtils]: 101: Hoare triple {30862#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {30862#false} is VALID [2018-11-23 12:47:20,361 INFO L273 TraceCheckUtils]: 102: Hoare triple {30862#false} assume 4 == ~blastFlag~0; {30862#false} is VALID [2018-11-23 12:47:20,361 INFO L273 TraceCheckUtils]: 103: Hoare triple {30862#false} assume !false; {30862#false} is VALID [2018-11-23 12:47:20,368 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:20,368 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:20,368 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:20,368 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 12:47:20,368 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:20,369 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:20,455 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 94 edges. 94 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:20,455 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:20,455 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:20,455 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:20,456 INFO L87 Difference]: Start difference. First operand 263 states and 399 transitions. Second operand 4 states. [2018-11-23 12:47:21,807 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:21,807 INFO L93 Difference]: Finished difference Result 532 states and 810 transitions. [2018-11-23 12:47:21,807 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:21,808 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 12:47:21,808 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:21,808 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:21,810 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 465 transitions. [2018-11-23 12:47:21,810 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:21,813 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 465 transitions. [2018-11-23 12:47:21,813 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 465 transitions. [2018-11-23 12:47:22,270 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 465 edges. 465 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:22,277 INFO L225 Difference]: With dead ends: 532 [2018-11-23 12:47:22,277 INFO L226 Difference]: Without dead ends: 294 [2018-11-23 12:47:22,278 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:22,278 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2018-11-23 12:47:22,374 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 263. [2018-11-23 12:47:22,375 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:22,375 INFO L82 GeneralOperation]: Start isEquivalent. First operand 294 states. Second operand 263 states. [2018-11-23 12:47:22,375 INFO L74 IsIncluded]: Start isIncluded. First operand 294 states. Second operand 263 states. [2018-11-23 12:47:22,375 INFO L87 Difference]: Start difference. First operand 294 states. Second operand 263 states. [2018-11-23 12:47:22,381 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:22,381 INFO L93 Difference]: Finished difference Result 294 states and 438 transitions. [2018-11-23 12:47:22,381 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 438 transitions. [2018-11-23 12:47:22,381 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:22,382 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:22,382 INFO L74 IsIncluded]: Start isIncluded. First operand 263 states. Second operand 294 states. [2018-11-23 12:47:22,382 INFO L87 Difference]: Start difference. First operand 263 states. Second operand 294 states. [2018-11-23 12:47:22,387 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:22,387 INFO L93 Difference]: Finished difference Result 294 states and 438 transitions. [2018-11-23 12:47:22,387 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 438 transitions. [2018-11-23 12:47:22,387 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:22,388 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:22,388 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:22,388 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:22,388 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 12:47:22,393 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 398 transitions. [2018-11-23 12:47:22,393 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 398 transitions. Word has length 104 [2018-11-23 12:47:22,394 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:22,394 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 398 transitions. [2018-11-23 12:47:22,394 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:22,394 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 398 transitions. [2018-11-23 12:47:22,395 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2018-11-23 12:47:22,395 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:22,395 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:22,395 INFO L423 AbstractCegarLoop]: === Iteration 29 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:22,395 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:22,396 INFO L82 PathProgramCache]: Analyzing trace with hash -624176389, now seen corresponding path program 1 times [2018-11-23 12:47:22,396 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:22,396 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:22,397 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:22,397 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:22,397 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:22,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:22,769 INFO L256 TraceCheckUtils]: 0: Hoare triple {32368#true} call ULTIMATE.init(); {32368#true} is VALID [2018-11-23 12:47:22,770 INFO L273 TraceCheckUtils]: 1: Hoare triple {32368#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,770 INFO L273 TraceCheckUtils]: 2: Hoare triple {32368#true} assume true; {32368#true} is VALID [2018-11-23 12:47:22,770 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {32368#true} {32368#true} #607#return; {32368#true} is VALID [2018-11-23 12:47:22,770 INFO L256 TraceCheckUtils]: 4: Hoare triple {32368#true} call #t~ret139 := main(); {32368#true} is VALID [2018-11-23 12:47:22,770 INFO L273 TraceCheckUtils]: 5: Hoare triple {32368#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,771 INFO L256 TraceCheckUtils]: 6: Hoare triple {32368#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {32368#true} is VALID [2018-11-23 12:47:22,771 INFO L273 TraceCheckUtils]: 7: Hoare triple {32368#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,771 INFO L273 TraceCheckUtils]: 8: Hoare triple {32368#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {32368#true} is VALID [2018-11-23 12:47:22,771 INFO L273 TraceCheckUtils]: 9: Hoare triple {32368#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {32368#true} is VALID [2018-11-23 12:47:22,771 INFO L273 TraceCheckUtils]: 10: Hoare triple {32368#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {32368#true} is VALID [2018-11-23 12:47:22,771 INFO L273 TraceCheckUtils]: 11: Hoare triple {32368#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,772 INFO L273 TraceCheckUtils]: 12: Hoare triple {32368#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {32368#true} is VALID [2018-11-23 12:47:22,772 INFO L273 TraceCheckUtils]: 13: Hoare triple {32368#true} assume !false; {32368#true} is VALID [2018-11-23 12:47:22,772 INFO L273 TraceCheckUtils]: 14: Hoare triple {32368#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,772 INFO L273 TraceCheckUtils]: 15: Hoare triple {32368#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,772 INFO L273 TraceCheckUtils]: 16: Hoare triple {32368#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,772 INFO L273 TraceCheckUtils]: 17: Hoare triple {32368#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,772 INFO L273 TraceCheckUtils]: 18: Hoare triple {32368#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,772 INFO L273 TraceCheckUtils]: 19: Hoare triple {32368#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,772 INFO L273 TraceCheckUtils]: 20: Hoare triple {32368#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,773 INFO L273 TraceCheckUtils]: 21: Hoare triple {32368#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,773 INFO L273 TraceCheckUtils]: 22: Hoare triple {32368#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,773 INFO L273 TraceCheckUtils]: 23: Hoare triple {32368#true} assume 8464 == #t~mem27;havoc #t~mem27; {32368#true} is VALID [2018-11-23 12:47:22,773 INFO L273 TraceCheckUtils]: 24: Hoare triple {32368#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {32368#true} is VALID [2018-11-23 12:47:22,773 INFO L273 TraceCheckUtils]: 25: Hoare triple {32368#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {32368#true} is VALID [2018-11-23 12:47:22,773 INFO L273 TraceCheckUtils]: 26: Hoare triple {32368#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,773 INFO L273 TraceCheckUtils]: 27: Hoare triple {32368#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,773 INFO L273 TraceCheckUtils]: 28: Hoare triple {32368#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {32368#true} is VALID [2018-11-23 12:47:22,774 INFO L273 TraceCheckUtils]: 29: Hoare triple {32368#true} ~skip~0 := 0; {32368#true} is VALID [2018-11-23 12:47:22,774 INFO L273 TraceCheckUtils]: 30: Hoare triple {32368#true} assume !false; {32368#true} is VALID [2018-11-23 12:47:22,774 INFO L273 TraceCheckUtils]: 31: Hoare triple {32368#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,774 INFO L273 TraceCheckUtils]: 32: Hoare triple {32368#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,774 INFO L273 TraceCheckUtils]: 33: Hoare triple {32368#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,774 INFO L273 TraceCheckUtils]: 34: Hoare triple {32368#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,774 INFO L273 TraceCheckUtils]: 35: Hoare triple {32368#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,774 INFO L273 TraceCheckUtils]: 36: Hoare triple {32368#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,774 INFO L273 TraceCheckUtils]: 37: Hoare triple {32368#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,775 INFO L273 TraceCheckUtils]: 38: Hoare triple {32368#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,775 INFO L273 TraceCheckUtils]: 39: Hoare triple {32368#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,775 INFO L273 TraceCheckUtils]: 40: Hoare triple {32368#true} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,775 INFO L273 TraceCheckUtils]: 41: Hoare triple {32368#true} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,775 INFO L273 TraceCheckUtils]: 42: Hoare triple {32368#true} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,775 INFO L273 TraceCheckUtils]: 43: Hoare triple {32368#true} assume 8496 == #t~mem30;havoc #t~mem30; {32368#true} is VALID [2018-11-23 12:47:22,775 INFO L273 TraceCheckUtils]: 44: Hoare triple {32368#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {32368#true} is VALID [2018-11-23 12:47:22,775 INFO L273 TraceCheckUtils]: 45: Hoare triple {32368#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {32368#true} is VALID [2018-11-23 12:47:22,775 INFO L273 TraceCheckUtils]: 46: Hoare triple {32368#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {32368#true} is VALID [2018-11-23 12:47:22,777 INFO L273 TraceCheckUtils]: 47: Hoare triple {32368#true} assume 0 != #t~mem68;havoc #t~mem68;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {32370#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:47:22,777 INFO L273 TraceCheckUtils]: 48: Hoare triple {32370#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {32370#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:47:22,778 INFO L273 TraceCheckUtils]: 49: Hoare triple {32370#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {32370#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:47:22,778 INFO L273 TraceCheckUtils]: 50: Hoare triple {32370#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {32370#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:47:22,778 INFO L273 TraceCheckUtils]: 51: Hoare triple {32370#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} ~skip~0 := 0; {32370#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:47:22,779 INFO L273 TraceCheckUtils]: 52: Hoare triple {32370#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} assume !false; {32370#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:47:22,779 INFO L273 TraceCheckUtils]: 53: Hoare triple {32370#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {32370#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:47:22,780 INFO L273 TraceCheckUtils]: 54: Hoare triple {32370#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {32371#(= |ssl3_accept_#t~mem20| 8656)} is VALID [2018-11-23 12:47:22,780 INFO L273 TraceCheckUtils]: 55: Hoare triple {32371#(= |ssl3_accept_#t~mem20| 8656)} assume 16384 == #t~mem20;havoc #t~mem20; {32369#false} is VALID [2018-11-23 12:47:22,781 INFO L273 TraceCheckUtils]: 56: Hoare triple {32369#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,781 INFO L273 TraceCheckUtils]: 57: Hoare triple {32369#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {32369#false} is VALID [2018-11-23 12:47:22,781 INFO L273 TraceCheckUtils]: 58: Hoare triple {32369#false} call #t~mem54 := read~int(~s.base, ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,781 INFO L273 TraceCheckUtils]: 59: Hoare triple {32369#false} assume !(3 != #t~mem54 / 256);havoc #t~mem54;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,781 INFO L273 TraceCheckUtils]: 60: Hoare triple {32369#false} assume !(0 == (#t~mem55.base + #t~mem55.offset) % 4294967296);havoc #t~mem55.base, #t~mem55.offset; {32369#false} is VALID [2018-11-23 12:47:22,781 INFO L273 TraceCheckUtils]: 61: Hoare triple {32369#false} assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~tmp___4~0 := #t~nondet57;havoc #t~nondet57; {32369#false} is VALID [2018-11-23 12:47:22,782 INFO L273 TraceCheckUtils]: 62: Hoare triple {32369#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem58 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,782 INFO L273 TraceCheckUtils]: 63: Hoare triple {32369#false} assume 12292 != #t~mem58;havoc #t~mem58;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~tmp___5~0 := #t~nondet59;havoc #t~nondet59; {32369#false} is VALID [2018-11-23 12:47:22,782 INFO L273 TraceCheckUtils]: 64: Hoare triple {32369#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem61 := read~int(#t~mem60.base, 72 + #t~mem60.offset, 4);call write~int(1 + #t~mem61, #t~mem60.base, 72 + #t~mem60.offset, 4);havoc #t~mem60.base, #t~mem60.offset;havoc #t~mem61; {32369#false} is VALID [2018-11-23 12:47:22,782 INFO L273 TraceCheckUtils]: 65: Hoare triple {32369#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,782 INFO L273 TraceCheckUtils]: 66: Hoare triple {32369#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {32369#false} is VALID [2018-11-23 12:47:22,783 INFO L273 TraceCheckUtils]: 67: Hoare triple {32369#false} ~skip~0 := 0; {32369#false} is VALID [2018-11-23 12:47:22,783 INFO L273 TraceCheckUtils]: 68: Hoare triple {32369#false} assume !false; {32369#false} is VALID [2018-11-23 12:47:22,783 INFO L273 TraceCheckUtils]: 69: Hoare triple {32369#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,783 INFO L273 TraceCheckUtils]: 70: Hoare triple {32369#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,783 INFO L273 TraceCheckUtils]: 71: Hoare triple {32369#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,784 INFO L273 TraceCheckUtils]: 72: Hoare triple {32369#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,784 INFO L273 TraceCheckUtils]: 73: Hoare triple {32369#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,784 INFO L273 TraceCheckUtils]: 74: Hoare triple {32369#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,784 INFO L273 TraceCheckUtils]: 75: Hoare triple {32369#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,784 INFO L273 TraceCheckUtils]: 76: Hoare triple {32369#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,784 INFO L273 TraceCheckUtils]: 77: Hoare triple {32369#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,784 INFO L273 TraceCheckUtils]: 78: Hoare triple {32369#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,785 INFO L273 TraceCheckUtils]: 79: Hoare triple {32369#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,785 INFO L273 TraceCheckUtils]: 80: Hoare triple {32369#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,785 INFO L273 TraceCheckUtils]: 81: Hoare triple {32369#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,785 INFO L273 TraceCheckUtils]: 82: Hoare triple {32369#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,785 INFO L273 TraceCheckUtils]: 83: Hoare triple {32369#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,785 INFO L273 TraceCheckUtils]: 84: Hoare triple {32369#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,785 INFO L273 TraceCheckUtils]: 85: Hoare triple {32369#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,785 INFO L273 TraceCheckUtils]: 86: Hoare triple {32369#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,786 INFO L273 TraceCheckUtils]: 87: Hoare triple {32369#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,786 INFO L273 TraceCheckUtils]: 88: Hoare triple {32369#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,786 INFO L273 TraceCheckUtils]: 89: Hoare triple {32369#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,786 INFO L273 TraceCheckUtils]: 90: Hoare triple {32369#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,786 INFO L273 TraceCheckUtils]: 91: Hoare triple {32369#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,786 INFO L273 TraceCheckUtils]: 92: Hoare triple {32369#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,786 INFO L273 TraceCheckUtils]: 93: Hoare triple {32369#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,786 INFO L273 TraceCheckUtils]: 94: Hoare triple {32369#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,786 INFO L273 TraceCheckUtils]: 95: Hoare triple {32369#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,787 INFO L273 TraceCheckUtils]: 96: Hoare triple {32369#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,787 INFO L273 TraceCheckUtils]: 97: Hoare triple {32369#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,787 INFO L273 TraceCheckUtils]: 98: Hoare triple {32369#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,787 INFO L273 TraceCheckUtils]: 99: Hoare triple {32369#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,787 INFO L273 TraceCheckUtils]: 100: Hoare triple {32369#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,787 INFO L273 TraceCheckUtils]: 101: Hoare triple {32369#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {32369#false} is VALID [2018-11-23 12:47:22,787 INFO L273 TraceCheckUtils]: 102: Hoare triple {32369#false} assume 8672 == #t~mem51;havoc #t~mem51; {32369#false} is VALID [2018-11-23 12:47:22,787 INFO L273 TraceCheckUtils]: 103: Hoare triple {32369#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {32369#false} is VALID [2018-11-23 12:47:22,787 INFO L273 TraceCheckUtils]: 104: Hoare triple {32369#false} assume 4 == ~blastFlag~0; {32369#false} is VALID [2018-11-23 12:47:22,788 INFO L273 TraceCheckUtils]: 105: Hoare triple {32369#false} assume !false; {32369#false} is VALID [2018-11-23 12:47:22,793 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:22,793 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:22,793 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:22,794 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 106 [2018-11-23 12:47:22,794 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:22,794 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:22,883 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 96 edges. 96 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:22,883 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:22,883 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:22,883 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:22,884 INFO L87 Difference]: Start difference. First operand 263 states and 398 transitions. Second operand 4 states. [2018-11-23 12:47:24,161 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:24,161 INFO L93 Difference]: Finished difference Result 561 states and 847 transitions. [2018-11-23 12:47:24,161 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:24,161 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 106 [2018-11-23 12:47:24,162 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:24,162 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:24,164 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 538 transitions. [2018-11-23 12:47:24,164 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:24,166 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 538 transitions. [2018-11-23 12:47:24,166 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 538 transitions. [2018-11-23 12:47:24,690 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 538 edges. 538 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:24,697 INFO L225 Difference]: With dead ends: 561 [2018-11-23 12:47:24,698 INFO L226 Difference]: Without dead ends: 323 [2018-11-23 12:47:24,698 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:24,699 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 323 states. [2018-11-23 12:47:24,837 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 323 to 263. [2018-11-23 12:47:24,837 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:24,837 INFO L82 GeneralOperation]: Start isEquivalent. First operand 323 states. Second operand 263 states. [2018-11-23 12:47:24,838 INFO L74 IsIncluded]: Start isIncluded. First operand 323 states. Second operand 263 states. [2018-11-23 12:47:24,838 INFO L87 Difference]: Start difference. First operand 323 states. Second operand 263 states. [2018-11-23 12:47:24,846 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:24,847 INFO L93 Difference]: Finished difference Result 323 states and 476 transitions. [2018-11-23 12:47:24,847 INFO L276 IsEmpty]: Start isEmpty. Operand 323 states and 476 transitions. [2018-11-23 12:47:24,847 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:24,848 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:24,848 INFO L74 IsIncluded]: Start isIncluded. First operand 263 states. Second operand 323 states. [2018-11-23 12:47:24,848 INFO L87 Difference]: Start difference. First operand 263 states. Second operand 323 states. [2018-11-23 12:47:24,855 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:24,856 INFO L93 Difference]: Finished difference Result 323 states and 476 transitions. [2018-11-23 12:47:24,856 INFO L276 IsEmpty]: Start isEmpty. Operand 323 states and 476 transitions. [2018-11-23 12:47:24,857 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:24,857 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:24,857 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:24,857 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:24,858 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 12:47:24,863 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 397 transitions. [2018-11-23 12:47:24,864 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 397 transitions. Word has length 106 [2018-11-23 12:47:24,864 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:24,864 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 397 transitions. [2018-11-23 12:47:24,864 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:24,864 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 397 transitions. [2018-11-23 12:47:24,865 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2018-11-23 12:47:24,865 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:24,865 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:24,865 INFO L423 AbstractCegarLoop]: === Iteration 30 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:24,866 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:24,866 INFO L82 PathProgramCache]: Analyzing trace with hash -63476611, now seen corresponding path program 1 times [2018-11-23 12:47:24,866 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:24,866 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:24,867 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:24,867 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:24,867 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:24,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:25,096 INFO L256 TraceCheckUtils]: 0: Hoare triple {33973#true} call ULTIMATE.init(); {33973#true} is VALID [2018-11-23 12:47:25,096 INFO L273 TraceCheckUtils]: 1: Hoare triple {33973#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,097 INFO L273 TraceCheckUtils]: 2: Hoare triple {33973#true} assume true; {33973#true} is VALID [2018-11-23 12:47:25,097 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {33973#true} {33973#true} #607#return; {33973#true} is VALID [2018-11-23 12:47:25,097 INFO L256 TraceCheckUtils]: 4: Hoare triple {33973#true} call #t~ret139 := main(); {33973#true} is VALID [2018-11-23 12:47:25,097 INFO L273 TraceCheckUtils]: 5: Hoare triple {33973#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,097 INFO L256 TraceCheckUtils]: 6: Hoare triple {33973#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {33973#true} is VALID [2018-11-23 12:47:25,098 INFO L273 TraceCheckUtils]: 7: Hoare triple {33973#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,098 INFO L273 TraceCheckUtils]: 8: Hoare triple {33973#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {33973#true} is VALID [2018-11-23 12:47:25,098 INFO L273 TraceCheckUtils]: 9: Hoare triple {33973#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {33973#true} is VALID [2018-11-23 12:47:25,098 INFO L273 TraceCheckUtils]: 10: Hoare triple {33973#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {33973#true} is VALID [2018-11-23 12:47:25,098 INFO L273 TraceCheckUtils]: 11: Hoare triple {33973#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,099 INFO L273 TraceCheckUtils]: 12: Hoare triple {33973#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {33973#true} is VALID [2018-11-23 12:47:25,099 INFO L273 TraceCheckUtils]: 13: Hoare triple {33973#true} assume !false; {33973#true} is VALID [2018-11-23 12:47:25,099 INFO L273 TraceCheckUtils]: 14: Hoare triple {33973#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,099 INFO L273 TraceCheckUtils]: 15: Hoare triple {33973#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,099 INFO L273 TraceCheckUtils]: 16: Hoare triple {33973#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,100 INFO L273 TraceCheckUtils]: 17: Hoare triple {33973#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,100 INFO L273 TraceCheckUtils]: 18: Hoare triple {33973#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,100 INFO L273 TraceCheckUtils]: 19: Hoare triple {33973#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,100 INFO L273 TraceCheckUtils]: 20: Hoare triple {33973#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,101 INFO L273 TraceCheckUtils]: 21: Hoare triple {33973#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,101 INFO L273 TraceCheckUtils]: 22: Hoare triple {33973#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,101 INFO L273 TraceCheckUtils]: 23: Hoare triple {33973#true} assume 8464 == #t~mem27;havoc #t~mem27; {33973#true} is VALID [2018-11-23 12:47:25,101 INFO L273 TraceCheckUtils]: 24: Hoare triple {33973#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {33973#true} is VALID [2018-11-23 12:47:25,101 INFO L273 TraceCheckUtils]: 25: Hoare triple {33973#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {33973#true} is VALID [2018-11-23 12:47:25,101 INFO L273 TraceCheckUtils]: 26: Hoare triple {33973#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,101 INFO L273 TraceCheckUtils]: 27: Hoare triple {33973#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,101 INFO L273 TraceCheckUtils]: 28: Hoare triple {33973#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {33973#true} is VALID [2018-11-23 12:47:25,101 INFO L273 TraceCheckUtils]: 29: Hoare triple {33973#true} ~skip~0 := 0; {33973#true} is VALID [2018-11-23 12:47:25,102 INFO L273 TraceCheckUtils]: 30: Hoare triple {33973#true} assume !false; {33973#true} is VALID [2018-11-23 12:47:25,102 INFO L273 TraceCheckUtils]: 31: Hoare triple {33973#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,102 INFO L273 TraceCheckUtils]: 32: Hoare triple {33973#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,102 INFO L273 TraceCheckUtils]: 33: Hoare triple {33973#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,102 INFO L273 TraceCheckUtils]: 34: Hoare triple {33973#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,102 INFO L273 TraceCheckUtils]: 35: Hoare triple {33973#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,102 INFO L273 TraceCheckUtils]: 36: Hoare triple {33973#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,102 INFO L273 TraceCheckUtils]: 37: Hoare triple {33973#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,103 INFO L273 TraceCheckUtils]: 38: Hoare triple {33973#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,103 INFO L273 TraceCheckUtils]: 39: Hoare triple {33973#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,103 INFO L273 TraceCheckUtils]: 40: Hoare triple {33973#true} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,103 INFO L273 TraceCheckUtils]: 41: Hoare triple {33973#true} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,103 INFO L273 TraceCheckUtils]: 42: Hoare triple {33973#true} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,103 INFO L273 TraceCheckUtils]: 43: Hoare triple {33973#true} assume 8496 == #t~mem30;havoc #t~mem30; {33973#true} is VALID [2018-11-23 12:47:25,103 INFO L273 TraceCheckUtils]: 44: Hoare triple {33973#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {33973#true} is VALID [2018-11-23 12:47:25,103 INFO L273 TraceCheckUtils]: 45: Hoare triple {33973#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {33973#true} is VALID [2018-11-23 12:47:25,103 INFO L273 TraceCheckUtils]: 46: Hoare triple {33973#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {33973#true} is VALID [2018-11-23 12:47:25,104 INFO L273 TraceCheckUtils]: 47: Hoare triple {33973#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {33975#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:47:25,105 INFO L273 TraceCheckUtils]: 48: Hoare triple {33975#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {33975#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:47:25,105 INFO L273 TraceCheckUtils]: 49: Hoare triple {33975#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {33975#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:47:25,106 INFO L273 TraceCheckUtils]: 50: Hoare triple {33975#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {33975#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:47:25,106 INFO L273 TraceCheckUtils]: 51: Hoare triple {33975#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} ~skip~0 := 0; {33975#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:47:25,106 INFO L273 TraceCheckUtils]: 52: Hoare triple {33975#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} assume !false; {33975#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:47:25,107 INFO L273 TraceCheckUtils]: 53: Hoare triple {33975#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {33975#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:47:25,108 INFO L273 TraceCheckUtils]: 54: Hoare triple {33975#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {33976#(= |ssl3_accept_#t~mem20| 8512)} is VALID [2018-11-23 12:47:25,108 INFO L273 TraceCheckUtils]: 55: Hoare triple {33976#(= |ssl3_accept_#t~mem20| 8512)} assume 16384 == #t~mem20;havoc #t~mem20; {33974#false} is VALID [2018-11-23 12:47:25,108 INFO L273 TraceCheckUtils]: 56: Hoare triple {33974#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,109 INFO L273 TraceCheckUtils]: 57: Hoare triple {33974#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {33974#false} is VALID [2018-11-23 12:47:25,109 INFO L273 TraceCheckUtils]: 58: Hoare triple {33974#false} call #t~mem54 := read~int(~s.base, ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,109 INFO L273 TraceCheckUtils]: 59: Hoare triple {33974#false} assume !(3 != #t~mem54 / 256);havoc #t~mem54;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,109 INFO L273 TraceCheckUtils]: 60: Hoare triple {33974#false} assume !(0 == (#t~mem55.base + #t~mem55.offset) % 4294967296);havoc #t~mem55.base, #t~mem55.offset; {33974#false} is VALID [2018-11-23 12:47:25,109 INFO L273 TraceCheckUtils]: 61: Hoare triple {33974#false} assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~tmp___4~0 := #t~nondet57;havoc #t~nondet57; {33974#false} is VALID [2018-11-23 12:47:25,110 INFO L273 TraceCheckUtils]: 62: Hoare triple {33974#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem58 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,110 INFO L273 TraceCheckUtils]: 63: Hoare triple {33974#false} assume 12292 != #t~mem58;havoc #t~mem58;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~tmp___5~0 := #t~nondet59;havoc #t~nondet59; {33974#false} is VALID [2018-11-23 12:47:25,110 INFO L273 TraceCheckUtils]: 64: Hoare triple {33974#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem61 := read~int(#t~mem60.base, 72 + #t~mem60.offset, 4);call write~int(1 + #t~mem61, #t~mem60.base, 72 + #t~mem60.offset, 4);havoc #t~mem60.base, #t~mem60.offset;havoc #t~mem61; {33974#false} is VALID [2018-11-23 12:47:25,110 INFO L273 TraceCheckUtils]: 65: Hoare triple {33974#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,110 INFO L273 TraceCheckUtils]: 66: Hoare triple {33974#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {33974#false} is VALID [2018-11-23 12:47:25,111 INFO L273 TraceCheckUtils]: 67: Hoare triple {33974#false} ~skip~0 := 0; {33974#false} is VALID [2018-11-23 12:47:25,111 INFO L273 TraceCheckUtils]: 68: Hoare triple {33974#false} assume !false; {33974#false} is VALID [2018-11-23 12:47:25,111 INFO L273 TraceCheckUtils]: 69: Hoare triple {33974#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,111 INFO L273 TraceCheckUtils]: 70: Hoare triple {33974#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,111 INFO L273 TraceCheckUtils]: 71: Hoare triple {33974#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,112 INFO L273 TraceCheckUtils]: 72: Hoare triple {33974#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,112 INFO L273 TraceCheckUtils]: 73: Hoare triple {33974#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,112 INFO L273 TraceCheckUtils]: 74: Hoare triple {33974#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,112 INFO L273 TraceCheckUtils]: 75: Hoare triple {33974#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,112 INFO L273 TraceCheckUtils]: 76: Hoare triple {33974#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,112 INFO L273 TraceCheckUtils]: 77: Hoare triple {33974#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,112 INFO L273 TraceCheckUtils]: 78: Hoare triple {33974#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,112 INFO L273 TraceCheckUtils]: 79: Hoare triple {33974#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,112 INFO L273 TraceCheckUtils]: 80: Hoare triple {33974#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,113 INFO L273 TraceCheckUtils]: 81: Hoare triple {33974#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,113 INFO L273 TraceCheckUtils]: 82: Hoare triple {33974#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,113 INFO L273 TraceCheckUtils]: 83: Hoare triple {33974#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,113 INFO L273 TraceCheckUtils]: 84: Hoare triple {33974#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,113 INFO L273 TraceCheckUtils]: 85: Hoare triple {33974#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,113 INFO L273 TraceCheckUtils]: 86: Hoare triple {33974#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,113 INFO L273 TraceCheckUtils]: 87: Hoare triple {33974#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,113 INFO L273 TraceCheckUtils]: 88: Hoare triple {33974#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,114 INFO L273 TraceCheckUtils]: 89: Hoare triple {33974#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,114 INFO L273 TraceCheckUtils]: 90: Hoare triple {33974#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,114 INFO L273 TraceCheckUtils]: 91: Hoare triple {33974#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,114 INFO L273 TraceCheckUtils]: 92: Hoare triple {33974#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,114 INFO L273 TraceCheckUtils]: 93: Hoare triple {33974#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,114 INFO L273 TraceCheckUtils]: 94: Hoare triple {33974#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,114 INFO L273 TraceCheckUtils]: 95: Hoare triple {33974#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,114 INFO L273 TraceCheckUtils]: 96: Hoare triple {33974#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,114 INFO L273 TraceCheckUtils]: 97: Hoare triple {33974#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,115 INFO L273 TraceCheckUtils]: 98: Hoare triple {33974#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,115 INFO L273 TraceCheckUtils]: 99: Hoare triple {33974#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,115 INFO L273 TraceCheckUtils]: 100: Hoare triple {33974#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,115 INFO L273 TraceCheckUtils]: 101: Hoare triple {33974#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {33974#false} is VALID [2018-11-23 12:47:25,115 INFO L273 TraceCheckUtils]: 102: Hoare triple {33974#false} assume 8672 == #t~mem51;havoc #t~mem51; {33974#false} is VALID [2018-11-23 12:47:25,115 INFO L273 TraceCheckUtils]: 103: Hoare triple {33974#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {33974#false} is VALID [2018-11-23 12:47:25,115 INFO L273 TraceCheckUtils]: 104: Hoare triple {33974#false} assume 4 == ~blastFlag~0; {33974#false} is VALID [2018-11-23 12:47:25,115 INFO L273 TraceCheckUtils]: 105: Hoare triple {33974#false} assume !false; {33974#false} is VALID [2018-11-23 12:47:25,121 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:25,121 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:25,121 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:25,121 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 106 [2018-11-23 12:47:25,121 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:25,121 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:25,215 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 96 edges. 96 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:25,215 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:25,215 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:25,216 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:25,216 INFO L87 Difference]: Start difference. First operand 263 states and 397 transitions. Second operand 4 states. [2018-11-23 12:47:26,477 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:26,477 INFO L93 Difference]: Finished difference Result 532 states and 806 transitions. [2018-11-23 12:47:26,477 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:26,477 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 106 [2018-11-23 12:47:26,478 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:26,478 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:26,479 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 464 transitions. [2018-11-23 12:47:26,480 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:26,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 464 transitions. [2018-11-23 12:47:26,482 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 464 transitions. [2018-11-23 12:47:26,925 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 464 edges. 464 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:26,932 INFO L225 Difference]: With dead ends: 532 [2018-11-23 12:47:26,932 INFO L226 Difference]: Without dead ends: 294 [2018-11-23 12:47:26,932 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:26,933 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2018-11-23 12:47:26,978 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 263. [2018-11-23 12:47:26,978 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:26,978 INFO L82 GeneralOperation]: Start isEquivalent. First operand 294 states. Second operand 263 states. [2018-11-23 12:47:26,978 INFO L74 IsIncluded]: Start isIncluded. First operand 294 states. Second operand 263 states. [2018-11-23 12:47:26,979 INFO L87 Difference]: Start difference. First operand 294 states. Second operand 263 states. [2018-11-23 12:47:26,984 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:26,985 INFO L93 Difference]: Finished difference Result 294 states and 436 transitions. [2018-11-23 12:47:26,985 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 436 transitions. [2018-11-23 12:47:26,985 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:26,985 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:26,985 INFO L74 IsIncluded]: Start isIncluded. First operand 263 states. Second operand 294 states. [2018-11-23 12:47:26,985 INFO L87 Difference]: Start difference. First operand 263 states. Second operand 294 states. [2018-11-23 12:47:26,990 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:26,990 INFO L93 Difference]: Finished difference Result 294 states and 436 transitions. [2018-11-23 12:47:26,990 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 436 transitions. [2018-11-23 12:47:26,991 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:26,991 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:26,991 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:26,991 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:26,991 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 12:47:26,995 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 396 transitions. [2018-11-23 12:47:26,995 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 396 transitions. Word has length 106 [2018-11-23 12:47:26,995 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:26,995 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 396 transitions. [2018-11-23 12:47:26,996 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:26,996 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 396 transitions. [2018-11-23 12:47:26,996 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2018-11-23 12:47:26,996 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:26,997 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:26,997 INFO L423 AbstractCegarLoop]: === Iteration 31 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:26,997 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:26,997 INFO L82 PathProgramCache]: Analyzing trace with hash -1010963588, now seen corresponding path program 1 times [2018-11-23 12:47:26,997 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:26,997 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:26,998 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:26,998 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:26,998 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:27,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:27,201 INFO L256 TraceCheckUtils]: 0: Hoare triple {35480#true} call ULTIMATE.init(); {35480#true} is VALID [2018-11-23 12:47:27,201 INFO L273 TraceCheckUtils]: 1: Hoare triple {35480#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,202 INFO L273 TraceCheckUtils]: 2: Hoare triple {35480#true} assume true; {35480#true} is VALID [2018-11-23 12:47:27,202 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {35480#true} {35480#true} #607#return; {35480#true} is VALID [2018-11-23 12:47:27,202 INFO L256 TraceCheckUtils]: 4: Hoare triple {35480#true} call #t~ret139 := main(); {35480#true} is VALID [2018-11-23 12:47:27,202 INFO L273 TraceCheckUtils]: 5: Hoare triple {35480#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,203 INFO L256 TraceCheckUtils]: 6: Hoare triple {35480#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {35480#true} is VALID [2018-11-23 12:47:27,203 INFO L273 TraceCheckUtils]: 7: Hoare triple {35480#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,203 INFO L273 TraceCheckUtils]: 8: Hoare triple {35480#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {35480#true} is VALID [2018-11-23 12:47:27,203 INFO L273 TraceCheckUtils]: 9: Hoare triple {35480#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {35480#true} is VALID [2018-11-23 12:47:27,203 INFO L273 TraceCheckUtils]: 10: Hoare triple {35480#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {35480#true} is VALID [2018-11-23 12:47:27,204 INFO L273 TraceCheckUtils]: 11: Hoare triple {35480#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,204 INFO L273 TraceCheckUtils]: 12: Hoare triple {35480#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {35480#true} is VALID [2018-11-23 12:47:27,204 INFO L273 TraceCheckUtils]: 13: Hoare triple {35480#true} assume !false; {35480#true} is VALID [2018-11-23 12:47:27,204 INFO L273 TraceCheckUtils]: 14: Hoare triple {35480#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,204 INFO L273 TraceCheckUtils]: 15: Hoare triple {35480#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,204 INFO L273 TraceCheckUtils]: 16: Hoare triple {35480#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,204 INFO L273 TraceCheckUtils]: 17: Hoare triple {35480#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,204 INFO L273 TraceCheckUtils]: 18: Hoare triple {35480#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,204 INFO L273 TraceCheckUtils]: 19: Hoare triple {35480#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,205 INFO L273 TraceCheckUtils]: 20: Hoare triple {35480#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,205 INFO L273 TraceCheckUtils]: 21: Hoare triple {35480#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,205 INFO L273 TraceCheckUtils]: 22: Hoare triple {35480#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,205 INFO L273 TraceCheckUtils]: 23: Hoare triple {35480#true} assume 8464 == #t~mem27;havoc #t~mem27; {35480#true} is VALID [2018-11-23 12:47:27,205 INFO L273 TraceCheckUtils]: 24: Hoare triple {35480#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {35480#true} is VALID [2018-11-23 12:47:27,205 INFO L273 TraceCheckUtils]: 25: Hoare triple {35480#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {35480#true} is VALID [2018-11-23 12:47:27,205 INFO L273 TraceCheckUtils]: 26: Hoare triple {35480#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,205 INFO L273 TraceCheckUtils]: 27: Hoare triple {35480#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,206 INFO L273 TraceCheckUtils]: 28: Hoare triple {35480#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {35480#true} is VALID [2018-11-23 12:47:27,206 INFO L273 TraceCheckUtils]: 29: Hoare triple {35480#true} ~skip~0 := 0; {35480#true} is VALID [2018-11-23 12:47:27,206 INFO L273 TraceCheckUtils]: 30: Hoare triple {35480#true} assume !false; {35480#true} is VALID [2018-11-23 12:47:27,206 INFO L273 TraceCheckUtils]: 31: Hoare triple {35480#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,206 INFO L273 TraceCheckUtils]: 32: Hoare triple {35480#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,206 INFO L273 TraceCheckUtils]: 33: Hoare triple {35480#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,206 INFO L273 TraceCheckUtils]: 34: Hoare triple {35480#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,206 INFO L273 TraceCheckUtils]: 35: Hoare triple {35480#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,206 INFO L273 TraceCheckUtils]: 36: Hoare triple {35480#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,207 INFO L273 TraceCheckUtils]: 37: Hoare triple {35480#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,207 INFO L273 TraceCheckUtils]: 38: Hoare triple {35480#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,207 INFO L273 TraceCheckUtils]: 39: Hoare triple {35480#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,207 INFO L273 TraceCheckUtils]: 40: Hoare triple {35480#true} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,207 INFO L273 TraceCheckUtils]: 41: Hoare triple {35480#true} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,207 INFO L273 TraceCheckUtils]: 42: Hoare triple {35480#true} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,207 INFO L273 TraceCheckUtils]: 43: Hoare triple {35480#true} assume 8496 == #t~mem30;havoc #t~mem30; {35480#true} is VALID [2018-11-23 12:47:27,207 INFO L273 TraceCheckUtils]: 44: Hoare triple {35480#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {35480#true} is VALID [2018-11-23 12:47:27,208 INFO L273 TraceCheckUtils]: 45: Hoare triple {35480#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {35480#true} is VALID [2018-11-23 12:47:27,208 INFO L273 TraceCheckUtils]: 46: Hoare triple {35480#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {35480#true} is VALID [2018-11-23 12:47:27,208 INFO L273 TraceCheckUtils]: 47: Hoare triple {35480#true} assume 0 != #t~mem68;havoc #t~mem68;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {35482#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:27,209 INFO L273 TraceCheckUtils]: 48: Hoare triple {35482#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {35482#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:27,210 INFO L273 TraceCheckUtils]: 49: Hoare triple {35482#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {35482#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:27,210 INFO L273 TraceCheckUtils]: 50: Hoare triple {35482#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {35482#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:27,210 INFO L273 TraceCheckUtils]: 51: Hoare triple {35482#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {35482#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:27,210 INFO L273 TraceCheckUtils]: 52: Hoare triple {35482#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {35482#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:27,211 INFO L273 TraceCheckUtils]: 53: Hoare triple {35482#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {35482#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:27,211 INFO L273 TraceCheckUtils]: 54: Hoare triple {35482#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {35482#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:27,212 INFO L273 TraceCheckUtils]: 55: Hoare triple {35482#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {35483#(= 8656 |ssl3_accept_#t~mem21|)} is VALID [2018-11-23 12:47:27,213 INFO L273 TraceCheckUtils]: 56: Hoare triple {35483#(= 8656 |ssl3_accept_#t~mem21|)} assume 8192 == #t~mem21;havoc #t~mem21; {35481#false} is VALID [2018-11-23 12:47:27,213 INFO L273 TraceCheckUtils]: 57: Hoare triple {35481#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,213 INFO L273 TraceCheckUtils]: 58: Hoare triple {35481#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {35481#false} is VALID [2018-11-23 12:47:27,213 INFO L273 TraceCheckUtils]: 59: Hoare triple {35481#false} call #t~mem54 := read~int(~s.base, ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,214 INFO L273 TraceCheckUtils]: 60: Hoare triple {35481#false} assume !(3 != #t~mem54 / 256);havoc #t~mem54;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,214 INFO L273 TraceCheckUtils]: 61: Hoare triple {35481#false} assume !(0 == (#t~mem55.base + #t~mem55.offset) % 4294967296);havoc #t~mem55.base, #t~mem55.offset; {35481#false} is VALID [2018-11-23 12:47:27,214 INFO L273 TraceCheckUtils]: 62: Hoare triple {35481#false} assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~tmp___4~0 := #t~nondet57;havoc #t~nondet57; {35481#false} is VALID [2018-11-23 12:47:27,214 INFO L273 TraceCheckUtils]: 63: Hoare triple {35481#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem58 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,214 INFO L273 TraceCheckUtils]: 64: Hoare triple {35481#false} assume 12292 != #t~mem58;havoc #t~mem58;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~tmp___5~0 := #t~nondet59;havoc #t~nondet59; {35481#false} is VALID [2018-11-23 12:47:27,214 INFO L273 TraceCheckUtils]: 65: Hoare triple {35481#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem61 := read~int(#t~mem60.base, 72 + #t~mem60.offset, 4);call write~int(1 + #t~mem61, #t~mem60.base, 72 + #t~mem60.offset, 4);havoc #t~mem60.base, #t~mem60.offset;havoc #t~mem61; {35481#false} is VALID [2018-11-23 12:47:27,215 INFO L273 TraceCheckUtils]: 66: Hoare triple {35481#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,215 INFO L273 TraceCheckUtils]: 67: Hoare triple {35481#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {35481#false} is VALID [2018-11-23 12:47:27,215 INFO L273 TraceCheckUtils]: 68: Hoare triple {35481#false} ~skip~0 := 0; {35481#false} is VALID [2018-11-23 12:47:27,215 INFO L273 TraceCheckUtils]: 69: Hoare triple {35481#false} assume !false; {35481#false} is VALID [2018-11-23 12:47:27,215 INFO L273 TraceCheckUtils]: 70: Hoare triple {35481#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,216 INFO L273 TraceCheckUtils]: 71: Hoare triple {35481#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,216 INFO L273 TraceCheckUtils]: 72: Hoare triple {35481#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,216 INFO L273 TraceCheckUtils]: 73: Hoare triple {35481#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,216 INFO L273 TraceCheckUtils]: 74: Hoare triple {35481#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,216 INFO L273 TraceCheckUtils]: 75: Hoare triple {35481#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,216 INFO L273 TraceCheckUtils]: 76: Hoare triple {35481#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,217 INFO L273 TraceCheckUtils]: 77: Hoare triple {35481#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,217 INFO L273 TraceCheckUtils]: 78: Hoare triple {35481#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,217 INFO L273 TraceCheckUtils]: 79: Hoare triple {35481#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,217 INFO L273 TraceCheckUtils]: 80: Hoare triple {35481#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,217 INFO L273 TraceCheckUtils]: 81: Hoare triple {35481#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,218 INFO L273 TraceCheckUtils]: 82: Hoare triple {35481#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,218 INFO L273 TraceCheckUtils]: 83: Hoare triple {35481#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,218 INFO L273 TraceCheckUtils]: 84: Hoare triple {35481#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,218 INFO L273 TraceCheckUtils]: 85: Hoare triple {35481#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,218 INFO L273 TraceCheckUtils]: 86: Hoare triple {35481#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,218 INFO L273 TraceCheckUtils]: 87: Hoare triple {35481#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,218 INFO L273 TraceCheckUtils]: 88: Hoare triple {35481#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,218 INFO L273 TraceCheckUtils]: 89: Hoare triple {35481#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,219 INFO L273 TraceCheckUtils]: 90: Hoare triple {35481#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,219 INFO L273 TraceCheckUtils]: 91: Hoare triple {35481#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,219 INFO L273 TraceCheckUtils]: 92: Hoare triple {35481#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,219 INFO L273 TraceCheckUtils]: 93: Hoare triple {35481#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,219 INFO L273 TraceCheckUtils]: 94: Hoare triple {35481#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,219 INFO L273 TraceCheckUtils]: 95: Hoare triple {35481#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,219 INFO L273 TraceCheckUtils]: 96: Hoare triple {35481#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,219 INFO L273 TraceCheckUtils]: 97: Hoare triple {35481#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,219 INFO L273 TraceCheckUtils]: 98: Hoare triple {35481#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,220 INFO L273 TraceCheckUtils]: 99: Hoare triple {35481#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,220 INFO L273 TraceCheckUtils]: 100: Hoare triple {35481#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,220 INFO L273 TraceCheckUtils]: 101: Hoare triple {35481#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,220 INFO L273 TraceCheckUtils]: 102: Hoare triple {35481#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {35481#false} is VALID [2018-11-23 12:47:27,220 INFO L273 TraceCheckUtils]: 103: Hoare triple {35481#false} assume 8672 == #t~mem51;havoc #t~mem51; {35481#false} is VALID [2018-11-23 12:47:27,220 INFO L273 TraceCheckUtils]: 104: Hoare triple {35481#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {35481#false} is VALID [2018-11-23 12:47:27,220 INFO L273 TraceCheckUtils]: 105: Hoare triple {35481#false} assume 4 == ~blastFlag~0; {35481#false} is VALID [2018-11-23 12:47:27,220 INFO L273 TraceCheckUtils]: 106: Hoare triple {35481#false} assume !false; {35481#false} is VALID [2018-11-23 12:47:27,225 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:27,226 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:27,226 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:27,226 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 107 [2018-11-23 12:47:27,226 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:27,226 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:27,315 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 97 edges. 97 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:27,316 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:27,316 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:27,316 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:27,316 INFO L87 Difference]: Start difference. First operand 263 states and 396 transitions. Second operand 4 states. [2018-11-23 12:47:28,605 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:28,605 INFO L93 Difference]: Finished difference Result 561 states and 843 transitions. [2018-11-23 12:47:28,605 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:28,605 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 107 [2018-11-23 12:47:28,606 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:28,606 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:28,608 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 537 transitions. [2018-11-23 12:47:28,608 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:28,610 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 537 transitions. [2018-11-23 12:47:28,610 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 537 transitions. [2018-11-23 12:47:29,210 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 537 edges. 537 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:29,218 INFO L225 Difference]: With dead ends: 561 [2018-11-23 12:47:29,219 INFO L226 Difference]: Without dead ends: 323 [2018-11-23 12:47:29,219 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:29,220 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 323 states. [2018-11-23 12:47:29,300 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 323 to 263. [2018-11-23 12:47:29,300 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:29,300 INFO L82 GeneralOperation]: Start isEquivalent. First operand 323 states. Second operand 263 states. [2018-11-23 12:47:29,300 INFO L74 IsIncluded]: Start isIncluded. First operand 323 states. Second operand 263 states. [2018-11-23 12:47:29,301 INFO L87 Difference]: Start difference. First operand 323 states. Second operand 263 states. [2018-11-23 12:47:29,306 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:29,307 INFO L93 Difference]: Finished difference Result 323 states and 474 transitions. [2018-11-23 12:47:29,307 INFO L276 IsEmpty]: Start isEmpty. Operand 323 states and 474 transitions. [2018-11-23 12:47:29,307 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:29,307 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:29,307 INFO L74 IsIncluded]: Start isIncluded. First operand 263 states. Second operand 323 states. [2018-11-23 12:47:29,308 INFO L87 Difference]: Start difference. First operand 263 states. Second operand 323 states. [2018-11-23 12:47:29,313 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:29,313 INFO L93 Difference]: Finished difference Result 323 states and 474 transitions. [2018-11-23 12:47:29,313 INFO L276 IsEmpty]: Start isEmpty. Operand 323 states and 474 transitions. [2018-11-23 12:47:29,314 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:29,314 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:29,314 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:29,314 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:29,314 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 12:47:29,320 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 395 transitions. [2018-11-23 12:47:29,320 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 395 transitions. Word has length 107 [2018-11-23 12:47:29,320 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:29,320 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 395 transitions. [2018-11-23 12:47:29,321 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:29,321 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 395 transitions. [2018-11-23 12:47:29,321 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2018-11-23 12:47:29,322 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:29,322 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:29,322 INFO L423 AbstractCegarLoop]: === Iteration 32 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:29,322 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:29,322 INFO L82 PathProgramCache]: Analyzing trace with hash -809139654, now seen corresponding path program 1 times [2018-11-23 12:47:29,323 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:29,323 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:29,323 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:29,324 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:29,324 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:29,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:29,892 INFO L256 TraceCheckUtils]: 0: Hoare triple {37085#true} call ULTIMATE.init(); {37085#true} is VALID [2018-11-23 12:47:29,893 INFO L273 TraceCheckUtils]: 1: Hoare triple {37085#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,893 INFO L273 TraceCheckUtils]: 2: Hoare triple {37085#true} assume true; {37085#true} is VALID [2018-11-23 12:47:29,893 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {37085#true} {37085#true} #607#return; {37085#true} is VALID [2018-11-23 12:47:29,893 INFO L256 TraceCheckUtils]: 4: Hoare triple {37085#true} call #t~ret139 := main(); {37085#true} is VALID [2018-11-23 12:47:29,893 INFO L273 TraceCheckUtils]: 5: Hoare triple {37085#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,893 INFO L256 TraceCheckUtils]: 6: Hoare triple {37085#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {37085#true} is VALID [2018-11-23 12:47:29,893 INFO L273 TraceCheckUtils]: 7: Hoare triple {37085#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,894 INFO L273 TraceCheckUtils]: 8: Hoare triple {37085#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {37085#true} is VALID [2018-11-23 12:47:29,894 INFO L273 TraceCheckUtils]: 9: Hoare triple {37085#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {37085#true} is VALID [2018-11-23 12:47:29,894 INFO L273 TraceCheckUtils]: 10: Hoare triple {37085#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {37085#true} is VALID [2018-11-23 12:47:29,894 INFO L273 TraceCheckUtils]: 11: Hoare triple {37085#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,894 INFO L273 TraceCheckUtils]: 12: Hoare triple {37085#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {37085#true} is VALID [2018-11-23 12:47:29,894 INFO L273 TraceCheckUtils]: 13: Hoare triple {37085#true} assume !false; {37085#true} is VALID [2018-11-23 12:47:29,894 INFO L273 TraceCheckUtils]: 14: Hoare triple {37085#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,894 INFO L273 TraceCheckUtils]: 15: Hoare triple {37085#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,895 INFO L273 TraceCheckUtils]: 16: Hoare triple {37085#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,895 INFO L273 TraceCheckUtils]: 17: Hoare triple {37085#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,895 INFO L273 TraceCheckUtils]: 18: Hoare triple {37085#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,895 INFO L273 TraceCheckUtils]: 19: Hoare triple {37085#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,895 INFO L273 TraceCheckUtils]: 20: Hoare triple {37085#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,896 INFO L273 TraceCheckUtils]: 21: Hoare triple {37085#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,896 INFO L273 TraceCheckUtils]: 22: Hoare triple {37085#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,896 INFO L273 TraceCheckUtils]: 23: Hoare triple {37085#true} assume 8464 == #t~mem27;havoc #t~mem27; {37085#true} is VALID [2018-11-23 12:47:29,896 INFO L273 TraceCheckUtils]: 24: Hoare triple {37085#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {37085#true} is VALID [2018-11-23 12:47:29,896 INFO L273 TraceCheckUtils]: 25: Hoare triple {37085#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {37085#true} is VALID [2018-11-23 12:47:29,896 INFO L273 TraceCheckUtils]: 26: Hoare triple {37085#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,896 INFO L273 TraceCheckUtils]: 27: Hoare triple {37085#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,896 INFO L273 TraceCheckUtils]: 28: Hoare triple {37085#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {37085#true} is VALID [2018-11-23 12:47:29,897 INFO L273 TraceCheckUtils]: 29: Hoare triple {37085#true} ~skip~0 := 0; {37085#true} is VALID [2018-11-23 12:47:29,897 INFO L273 TraceCheckUtils]: 30: Hoare triple {37085#true} assume !false; {37085#true} is VALID [2018-11-23 12:47:29,897 INFO L273 TraceCheckUtils]: 31: Hoare triple {37085#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,897 INFO L273 TraceCheckUtils]: 32: Hoare triple {37085#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,897 INFO L273 TraceCheckUtils]: 33: Hoare triple {37085#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,897 INFO L273 TraceCheckUtils]: 34: Hoare triple {37085#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,897 INFO L273 TraceCheckUtils]: 35: Hoare triple {37085#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,897 INFO L273 TraceCheckUtils]: 36: Hoare triple {37085#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,897 INFO L273 TraceCheckUtils]: 37: Hoare triple {37085#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,898 INFO L273 TraceCheckUtils]: 38: Hoare triple {37085#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,898 INFO L273 TraceCheckUtils]: 39: Hoare triple {37085#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,898 INFO L273 TraceCheckUtils]: 40: Hoare triple {37085#true} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,898 INFO L273 TraceCheckUtils]: 41: Hoare triple {37085#true} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,898 INFO L273 TraceCheckUtils]: 42: Hoare triple {37085#true} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,898 INFO L273 TraceCheckUtils]: 43: Hoare triple {37085#true} assume 8496 == #t~mem30;havoc #t~mem30; {37085#true} is VALID [2018-11-23 12:47:29,899 INFO L273 TraceCheckUtils]: 44: Hoare triple {37085#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {37085#true} is VALID [2018-11-23 12:47:29,899 INFO L273 TraceCheckUtils]: 45: Hoare triple {37085#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {37085#true} is VALID [2018-11-23 12:47:29,899 INFO L273 TraceCheckUtils]: 46: Hoare triple {37085#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {37085#true} is VALID [2018-11-23 12:47:29,902 INFO L273 TraceCheckUtils]: 47: Hoare triple {37085#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {37087#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:29,903 INFO L273 TraceCheckUtils]: 48: Hoare triple {37087#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {37087#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:29,907 INFO L273 TraceCheckUtils]: 49: Hoare triple {37087#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {37087#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:29,907 INFO L273 TraceCheckUtils]: 50: Hoare triple {37087#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {37087#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:29,907 INFO L273 TraceCheckUtils]: 51: Hoare triple {37087#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {37087#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:29,908 INFO L273 TraceCheckUtils]: 52: Hoare triple {37087#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {37087#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:29,909 INFO L273 TraceCheckUtils]: 53: Hoare triple {37087#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {37087#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:29,909 INFO L273 TraceCheckUtils]: 54: Hoare triple {37087#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {37087#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:29,911 INFO L273 TraceCheckUtils]: 55: Hoare triple {37087#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {37088#(= 8512 |ssl3_accept_#t~mem21|)} is VALID [2018-11-23 12:47:29,911 INFO L273 TraceCheckUtils]: 56: Hoare triple {37088#(= 8512 |ssl3_accept_#t~mem21|)} assume 8192 == #t~mem21;havoc #t~mem21; {37086#false} is VALID [2018-11-23 12:47:29,911 INFO L273 TraceCheckUtils]: 57: Hoare triple {37086#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,911 INFO L273 TraceCheckUtils]: 58: Hoare triple {37086#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {37086#false} is VALID [2018-11-23 12:47:29,911 INFO L273 TraceCheckUtils]: 59: Hoare triple {37086#false} call #t~mem54 := read~int(~s.base, ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,911 INFO L273 TraceCheckUtils]: 60: Hoare triple {37086#false} assume !(3 != #t~mem54 / 256);havoc #t~mem54;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,912 INFO L273 TraceCheckUtils]: 61: Hoare triple {37086#false} assume !(0 == (#t~mem55.base + #t~mem55.offset) % 4294967296);havoc #t~mem55.base, #t~mem55.offset; {37086#false} is VALID [2018-11-23 12:47:29,912 INFO L273 TraceCheckUtils]: 62: Hoare triple {37086#false} assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~tmp___4~0 := #t~nondet57;havoc #t~nondet57; {37086#false} is VALID [2018-11-23 12:47:29,912 INFO L273 TraceCheckUtils]: 63: Hoare triple {37086#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem58 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,912 INFO L273 TraceCheckUtils]: 64: Hoare triple {37086#false} assume 12292 != #t~mem58;havoc #t~mem58;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~tmp___5~0 := #t~nondet59;havoc #t~nondet59; {37086#false} is VALID [2018-11-23 12:47:29,912 INFO L273 TraceCheckUtils]: 65: Hoare triple {37086#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem61 := read~int(#t~mem60.base, 72 + #t~mem60.offset, 4);call write~int(1 + #t~mem61, #t~mem60.base, 72 + #t~mem60.offset, 4);havoc #t~mem60.base, #t~mem60.offset;havoc #t~mem61; {37086#false} is VALID [2018-11-23 12:47:29,912 INFO L273 TraceCheckUtils]: 66: Hoare triple {37086#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,912 INFO L273 TraceCheckUtils]: 67: Hoare triple {37086#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {37086#false} is VALID [2018-11-23 12:47:29,912 INFO L273 TraceCheckUtils]: 68: Hoare triple {37086#false} ~skip~0 := 0; {37086#false} is VALID [2018-11-23 12:47:29,913 INFO L273 TraceCheckUtils]: 69: Hoare triple {37086#false} assume !false; {37086#false} is VALID [2018-11-23 12:47:29,913 INFO L273 TraceCheckUtils]: 70: Hoare triple {37086#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,913 INFO L273 TraceCheckUtils]: 71: Hoare triple {37086#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,913 INFO L273 TraceCheckUtils]: 72: Hoare triple {37086#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,913 INFO L273 TraceCheckUtils]: 73: Hoare triple {37086#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,913 INFO L273 TraceCheckUtils]: 74: Hoare triple {37086#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,913 INFO L273 TraceCheckUtils]: 75: Hoare triple {37086#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,913 INFO L273 TraceCheckUtils]: 76: Hoare triple {37086#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,913 INFO L273 TraceCheckUtils]: 77: Hoare triple {37086#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,915 INFO L273 TraceCheckUtils]: 78: Hoare triple {37086#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,915 INFO L273 TraceCheckUtils]: 79: Hoare triple {37086#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,915 INFO L273 TraceCheckUtils]: 80: Hoare triple {37086#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,915 INFO L273 TraceCheckUtils]: 81: Hoare triple {37086#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,915 INFO L273 TraceCheckUtils]: 82: Hoare triple {37086#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,915 INFO L273 TraceCheckUtils]: 83: Hoare triple {37086#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,916 INFO L273 TraceCheckUtils]: 84: Hoare triple {37086#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,916 INFO L273 TraceCheckUtils]: 85: Hoare triple {37086#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,916 INFO L273 TraceCheckUtils]: 86: Hoare triple {37086#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,916 INFO L273 TraceCheckUtils]: 87: Hoare triple {37086#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,916 INFO L273 TraceCheckUtils]: 88: Hoare triple {37086#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,916 INFO L273 TraceCheckUtils]: 89: Hoare triple {37086#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,916 INFO L273 TraceCheckUtils]: 90: Hoare triple {37086#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,916 INFO L273 TraceCheckUtils]: 91: Hoare triple {37086#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,917 INFO L273 TraceCheckUtils]: 92: Hoare triple {37086#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,917 INFO L273 TraceCheckUtils]: 93: Hoare triple {37086#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,917 INFO L273 TraceCheckUtils]: 94: Hoare triple {37086#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,917 INFO L273 TraceCheckUtils]: 95: Hoare triple {37086#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,917 INFO L273 TraceCheckUtils]: 96: Hoare triple {37086#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,917 INFO L273 TraceCheckUtils]: 97: Hoare triple {37086#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,917 INFO L273 TraceCheckUtils]: 98: Hoare triple {37086#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,917 INFO L273 TraceCheckUtils]: 99: Hoare triple {37086#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,917 INFO L273 TraceCheckUtils]: 100: Hoare triple {37086#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,918 INFO L273 TraceCheckUtils]: 101: Hoare triple {37086#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,918 INFO L273 TraceCheckUtils]: 102: Hoare triple {37086#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {37086#false} is VALID [2018-11-23 12:47:29,918 INFO L273 TraceCheckUtils]: 103: Hoare triple {37086#false} assume 8672 == #t~mem51;havoc #t~mem51; {37086#false} is VALID [2018-11-23 12:47:29,918 INFO L273 TraceCheckUtils]: 104: Hoare triple {37086#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {37086#false} is VALID [2018-11-23 12:47:29,918 INFO L273 TraceCheckUtils]: 105: Hoare triple {37086#false} assume 4 == ~blastFlag~0; {37086#false} is VALID [2018-11-23 12:47:29,918 INFO L273 TraceCheckUtils]: 106: Hoare triple {37086#false} assume !false; {37086#false} is VALID [2018-11-23 12:47:29,924 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:29,924 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:29,924 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:29,925 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 107 [2018-11-23 12:47:29,925 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:29,925 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:30,014 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 97 edges. 97 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:30,014 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:30,014 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:30,014 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:30,015 INFO L87 Difference]: Start difference. First operand 263 states and 395 transitions. Second operand 4 states. [2018-11-23 12:47:31,233 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:31,234 INFO L93 Difference]: Finished difference Result 532 states and 802 transitions. [2018-11-23 12:47:31,234 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:31,234 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 107 [2018-11-23 12:47:31,234 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:31,234 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:31,236 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 463 transitions. [2018-11-23 12:47:31,236 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:31,238 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 463 transitions. [2018-11-23 12:47:31,238 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 463 transitions. [2018-11-23 12:47:31,681 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 463 edges. 463 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:31,687 INFO L225 Difference]: With dead ends: 532 [2018-11-23 12:47:31,687 INFO L226 Difference]: Without dead ends: 294 [2018-11-23 12:47:31,688 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:31,689 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2018-11-23 12:47:31,773 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 263. [2018-11-23 12:47:31,774 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:31,774 INFO L82 GeneralOperation]: Start isEquivalent. First operand 294 states. Second operand 263 states. [2018-11-23 12:47:31,774 INFO L74 IsIncluded]: Start isIncluded. First operand 294 states. Second operand 263 states. [2018-11-23 12:47:31,774 INFO L87 Difference]: Start difference. First operand 294 states. Second operand 263 states. [2018-11-23 12:47:31,780 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:31,780 INFO L93 Difference]: Finished difference Result 294 states and 434 transitions. [2018-11-23 12:47:31,780 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 434 transitions. [2018-11-23 12:47:31,781 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:31,781 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:31,781 INFO L74 IsIncluded]: Start isIncluded. First operand 263 states. Second operand 294 states. [2018-11-23 12:47:31,781 INFO L87 Difference]: Start difference. First operand 263 states. Second operand 294 states. [2018-11-23 12:47:31,786 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:31,786 INFO L93 Difference]: Finished difference Result 294 states and 434 transitions. [2018-11-23 12:47:31,786 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 434 transitions. [2018-11-23 12:47:31,786 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:31,786 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:31,787 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:31,787 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:31,787 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 12:47:31,791 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 394 transitions. [2018-11-23 12:47:31,791 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 394 transitions. Word has length 107 [2018-11-23 12:47:31,791 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:31,791 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 394 transitions. [2018-11-23 12:47:31,791 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:31,791 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 394 transitions. [2018-11-23 12:47:31,792 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2018-11-23 12:47:31,792 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:31,792 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:31,792 INFO L423 AbstractCegarLoop]: === Iteration 33 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:31,792 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:31,793 INFO L82 PathProgramCache]: Analyzing trace with hash 1254520800, now seen corresponding path program 1 times [2018-11-23 12:47:31,793 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:31,793 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:31,794 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:31,794 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:31,794 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:31,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:31,934 INFO L256 TraceCheckUtils]: 0: Hoare triple {38592#true} call ULTIMATE.init(); {38592#true} is VALID [2018-11-23 12:47:31,934 INFO L273 TraceCheckUtils]: 1: Hoare triple {38592#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,934 INFO L273 TraceCheckUtils]: 2: Hoare triple {38592#true} assume true; {38592#true} is VALID [2018-11-23 12:47:31,934 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {38592#true} {38592#true} #607#return; {38592#true} is VALID [2018-11-23 12:47:31,935 INFO L256 TraceCheckUtils]: 4: Hoare triple {38592#true} call #t~ret139 := main(); {38592#true} is VALID [2018-11-23 12:47:31,935 INFO L273 TraceCheckUtils]: 5: Hoare triple {38592#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,935 INFO L256 TraceCheckUtils]: 6: Hoare triple {38592#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {38592#true} is VALID [2018-11-23 12:47:31,935 INFO L273 TraceCheckUtils]: 7: Hoare triple {38592#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,935 INFO L273 TraceCheckUtils]: 8: Hoare triple {38592#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {38592#true} is VALID [2018-11-23 12:47:31,936 INFO L273 TraceCheckUtils]: 9: Hoare triple {38592#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {38592#true} is VALID [2018-11-23 12:47:31,936 INFO L273 TraceCheckUtils]: 10: Hoare triple {38592#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {38592#true} is VALID [2018-11-23 12:47:31,936 INFO L273 TraceCheckUtils]: 11: Hoare triple {38592#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,936 INFO L273 TraceCheckUtils]: 12: Hoare triple {38592#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {38592#true} is VALID [2018-11-23 12:47:31,936 INFO L273 TraceCheckUtils]: 13: Hoare triple {38592#true} assume !false; {38592#true} is VALID [2018-11-23 12:47:31,936 INFO L273 TraceCheckUtils]: 14: Hoare triple {38592#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,937 INFO L273 TraceCheckUtils]: 15: Hoare triple {38592#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,937 INFO L273 TraceCheckUtils]: 16: Hoare triple {38592#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,937 INFO L273 TraceCheckUtils]: 17: Hoare triple {38592#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,937 INFO L273 TraceCheckUtils]: 18: Hoare triple {38592#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,937 INFO L273 TraceCheckUtils]: 19: Hoare triple {38592#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,937 INFO L273 TraceCheckUtils]: 20: Hoare triple {38592#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,938 INFO L273 TraceCheckUtils]: 21: Hoare triple {38592#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,938 INFO L273 TraceCheckUtils]: 22: Hoare triple {38592#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,938 INFO L273 TraceCheckUtils]: 23: Hoare triple {38592#true} assume 8464 == #t~mem27;havoc #t~mem27; {38592#true} is VALID [2018-11-23 12:47:31,938 INFO L273 TraceCheckUtils]: 24: Hoare triple {38592#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {38592#true} is VALID [2018-11-23 12:47:31,938 INFO L273 TraceCheckUtils]: 25: Hoare triple {38592#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {38592#true} is VALID [2018-11-23 12:47:31,939 INFO L273 TraceCheckUtils]: 26: Hoare triple {38592#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,939 INFO L273 TraceCheckUtils]: 27: Hoare triple {38592#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,939 INFO L273 TraceCheckUtils]: 28: Hoare triple {38592#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {38592#true} is VALID [2018-11-23 12:47:31,939 INFO L273 TraceCheckUtils]: 29: Hoare triple {38592#true} ~skip~0 := 0; {38592#true} is VALID [2018-11-23 12:47:31,939 INFO L273 TraceCheckUtils]: 30: Hoare triple {38592#true} assume !false; {38592#true} is VALID [2018-11-23 12:47:31,939 INFO L273 TraceCheckUtils]: 31: Hoare triple {38592#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,940 INFO L273 TraceCheckUtils]: 32: Hoare triple {38592#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,940 INFO L273 TraceCheckUtils]: 33: Hoare triple {38592#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,940 INFO L273 TraceCheckUtils]: 34: Hoare triple {38592#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,940 INFO L273 TraceCheckUtils]: 35: Hoare triple {38592#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,940 INFO L273 TraceCheckUtils]: 36: Hoare triple {38592#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,940 INFO L273 TraceCheckUtils]: 37: Hoare triple {38592#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,941 INFO L273 TraceCheckUtils]: 38: Hoare triple {38592#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,941 INFO L273 TraceCheckUtils]: 39: Hoare triple {38592#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,941 INFO L273 TraceCheckUtils]: 40: Hoare triple {38592#true} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,941 INFO L273 TraceCheckUtils]: 41: Hoare triple {38592#true} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,941 INFO L273 TraceCheckUtils]: 42: Hoare triple {38592#true} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,941 INFO L273 TraceCheckUtils]: 43: Hoare triple {38592#true} assume 8496 == #t~mem30;havoc #t~mem30; {38592#true} is VALID [2018-11-23 12:47:31,942 INFO L273 TraceCheckUtils]: 44: Hoare triple {38592#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {38592#true} is VALID [2018-11-23 12:47:31,942 INFO L273 TraceCheckUtils]: 45: Hoare triple {38592#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {38592#true} is VALID [2018-11-23 12:47:31,942 INFO L273 TraceCheckUtils]: 46: Hoare triple {38592#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {38592#true} is VALID [2018-11-23 12:47:31,957 INFO L273 TraceCheckUtils]: 47: Hoare triple {38592#true} assume 0 != #t~mem68;havoc #t~mem68;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {38594#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:31,971 INFO L273 TraceCheckUtils]: 48: Hoare triple {38594#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {38594#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:31,975 INFO L273 TraceCheckUtils]: 49: Hoare triple {38594#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {38594#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:31,975 INFO L273 TraceCheckUtils]: 50: Hoare triple {38594#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {38594#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:31,977 INFO L273 TraceCheckUtils]: 51: Hoare triple {38594#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {38594#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:31,977 INFO L273 TraceCheckUtils]: 52: Hoare triple {38594#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {38594#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:31,979 INFO L273 TraceCheckUtils]: 53: Hoare triple {38594#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {38594#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:31,979 INFO L273 TraceCheckUtils]: 54: Hoare triple {38594#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {38594#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:31,981 INFO L273 TraceCheckUtils]: 55: Hoare triple {38594#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {38594#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:31,981 INFO L273 TraceCheckUtils]: 56: Hoare triple {38594#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {38595#(= 8656 |ssl3_accept_#t~mem22|)} is VALID [2018-11-23 12:47:31,983 INFO L273 TraceCheckUtils]: 57: Hoare triple {38595#(= 8656 |ssl3_accept_#t~mem22|)} assume 24576 == #t~mem22;havoc #t~mem22; {38593#false} is VALID [2018-11-23 12:47:31,983 INFO L273 TraceCheckUtils]: 58: Hoare triple {38593#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,983 INFO L273 TraceCheckUtils]: 59: Hoare triple {38593#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {38593#false} is VALID [2018-11-23 12:47:31,983 INFO L273 TraceCheckUtils]: 60: Hoare triple {38593#false} call #t~mem54 := read~int(~s.base, ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,983 INFO L273 TraceCheckUtils]: 61: Hoare triple {38593#false} assume !(3 != #t~mem54 / 256);havoc #t~mem54;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,983 INFO L273 TraceCheckUtils]: 62: Hoare triple {38593#false} assume !(0 == (#t~mem55.base + #t~mem55.offset) % 4294967296);havoc #t~mem55.base, #t~mem55.offset; {38593#false} is VALID [2018-11-23 12:47:31,983 INFO L273 TraceCheckUtils]: 63: Hoare triple {38593#false} assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~tmp___4~0 := #t~nondet57;havoc #t~nondet57; {38593#false} is VALID [2018-11-23 12:47:31,983 INFO L273 TraceCheckUtils]: 64: Hoare triple {38593#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem58 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,984 INFO L273 TraceCheckUtils]: 65: Hoare triple {38593#false} assume 12292 != #t~mem58;havoc #t~mem58;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~tmp___5~0 := #t~nondet59;havoc #t~nondet59; {38593#false} is VALID [2018-11-23 12:47:31,984 INFO L273 TraceCheckUtils]: 66: Hoare triple {38593#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem61 := read~int(#t~mem60.base, 72 + #t~mem60.offset, 4);call write~int(1 + #t~mem61, #t~mem60.base, 72 + #t~mem60.offset, 4);havoc #t~mem60.base, #t~mem60.offset;havoc #t~mem61; {38593#false} is VALID [2018-11-23 12:47:31,984 INFO L273 TraceCheckUtils]: 67: Hoare triple {38593#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,984 INFO L273 TraceCheckUtils]: 68: Hoare triple {38593#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {38593#false} is VALID [2018-11-23 12:47:31,984 INFO L273 TraceCheckUtils]: 69: Hoare triple {38593#false} ~skip~0 := 0; {38593#false} is VALID [2018-11-23 12:47:31,984 INFO L273 TraceCheckUtils]: 70: Hoare triple {38593#false} assume !false; {38593#false} is VALID [2018-11-23 12:47:31,984 INFO L273 TraceCheckUtils]: 71: Hoare triple {38593#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,984 INFO L273 TraceCheckUtils]: 72: Hoare triple {38593#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,985 INFO L273 TraceCheckUtils]: 73: Hoare triple {38593#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,985 INFO L273 TraceCheckUtils]: 74: Hoare triple {38593#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,985 INFO L273 TraceCheckUtils]: 75: Hoare triple {38593#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,985 INFO L273 TraceCheckUtils]: 76: Hoare triple {38593#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,985 INFO L273 TraceCheckUtils]: 77: Hoare triple {38593#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,985 INFO L273 TraceCheckUtils]: 78: Hoare triple {38593#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,985 INFO L273 TraceCheckUtils]: 79: Hoare triple {38593#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,985 INFO L273 TraceCheckUtils]: 80: Hoare triple {38593#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,985 INFO L273 TraceCheckUtils]: 81: Hoare triple {38593#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,986 INFO L273 TraceCheckUtils]: 82: Hoare triple {38593#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,986 INFO L273 TraceCheckUtils]: 83: Hoare triple {38593#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,986 INFO L273 TraceCheckUtils]: 84: Hoare triple {38593#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,986 INFO L273 TraceCheckUtils]: 85: Hoare triple {38593#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,986 INFO L273 TraceCheckUtils]: 86: Hoare triple {38593#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,986 INFO L273 TraceCheckUtils]: 87: Hoare triple {38593#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,986 INFO L273 TraceCheckUtils]: 88: Hoare triple {38593#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,986 INFO L273 TraceCheckUtils]: 89: Hoare triple {38593#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,986 INFO L273 TraceCheckUtils]: 90: Hoare triple {38593#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,987 INFO L273 TraceCheckUtils]: 91: Hoare triple {38593#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,987 INFO L273 TraceCheckUtils]: 92: Hoare triple {38593#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,987 INFO L273 TraceCheckUtils]: 93: Hoare triple {38593#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,987 INFO L273 TraceCheckUtils]: 94: Hoare triple {38593#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,987 INFO L273 TraceCheckUtils]: 95: Hoare triple {38593#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,987 INFO L273 TraceCheckUtils]: 96: Hoare triple {38593#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,987 INFO L273 TraceCheckUtils]: 97: Hoare triple {38593#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,987 INFO L273 TraceCheckUtils]: 98: Hoare triple {38593#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,987 INFO L273 TraceCheckUtils]: 99: Hoare triple {38593#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,988 INFO L273 TraceCheckUtils]: 100: Hoare triple {38593#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,988 INFO L273 TraceCheckUtils]: 101: Hoare triple {38593#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,988 INFO L273 TraceCheckUtils]: 102: Hoare triple {38593#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,988 INFO L273 TraceCheckUtils]: 103: Hoare triple {38593#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {38593#false} is VALID [2018-11-23 12:47:31,988 INFO L273 TraceCheckUtils]: 104: Hoare triple {38593#false} assume 8672 == #t~mem51;havoc #t~mem51; {38593#false} is VALID [2018-11-23 12:47:31,988 INFO L273 TraceCheckUtils]: 105: Hoare triple {38593#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {38593#false} is VALID [2018-11-23 12:47:31,988 INFO L273 TraceCheckUtils]: 106: Hoare triple {38593#false} assume 4 == ~blastFlag~0; {38593#false} is VALID [2018-11-23 12:47:31,988 INFO L273 TraceCheckUtils]: 107: Hoare triple {38593#false} assume !false; {38593#false} is VALID [2018-11-23 12:47:31,995 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 52 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:31,995 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:31,995 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:31,995 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 108 [2018-11-23 12:47:31,996 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:31,996 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:32,083 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 98 edges. 98 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:32,084 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:32,084 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:32,084 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:32,084 INFO L87 Difference]: Start difference. First operand 263 states and 394 transitions. Second operand 4 states. [2018-11-23 12:47:33,368 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:33,368 INFO L93 Difference]: Finished difference Result 561 states and 839 transitions. [2018-11-23 12:47:33,368 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:33,368 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 108 [2018-11-23 12:47:33,368 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:33,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:33,371 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 536 transitions. [2018-11-23 12:47:33,371 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:33,374 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 536 transitions. [2018-11-23 12:47:33,374 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 536 transitions. [2018-11-23 12:47:33,896 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 536 edges. 536 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:33,903 INFO L225 Difference]: With dead ends: 561 [2018-11-23 12:47:33,903 INFO L226 Difference]: Without dead ends: 323 [2018-11-23 12:47:33,904 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:33,904 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 323 states. [2018-11-23 12:47:33,976 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 323 to 263. [2018-11-23 12:47:33,977 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:33,977 INFO L82 GeneralOperation]: Start isEquivalent. First operand 323 states. Second operand 263 states. [2018-11-23 12:47:33,977 INFO L74 IsIncluded]: Start isIncluded. First operand 323 states. Second operand 263 states. [2018-11-23 12:47:33,977 INFO L87 Difference]: Start difference. First operand 323 states. Second operand 263 states. [2018-11-23 12:47:33,984 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:33,984 INFO L93 Difference]: Finished difference Result 323 states and 472 transitions. [2018-11-23 12:47:33,984 INFO L276 IsEmpty]: Start isEmpty. Operand 323 states and 472 transitions. [2018-11-23 12:47:33,984 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:33,985 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:33,985 INFO L74 IsIncluded]: Start isIncluded. First operand 263 states. Second operand 323 states. [2018-11-23 12:47:33,985 INFO L87 Difference]: Start difference. First operand 263 states. Second operand 323 states. [2018-11-23 12:47:33,990 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:33,990 INFO L93 Difference]: Finished difference Result 323 states and 472 transitions. [2018-11-23 12:47:33,990 INFO L276 IsEmpty]: Start isEmpty. Operand 323 states and 472 transitions. [2018-11-23 12:47:33,991 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:33,991 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:33,991 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:33,991 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:33,991 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 12:47:33,996 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 393 transitions. [2018-11-23 12:47:33,996 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 393 transitions. Word has length 108 [2018-11-23 12:47:33,997 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:33,997 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 393 transitions. [2018-11-23 12:47:33,997 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:33,997 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 393 transitions. [2018-11-23 12:47:33,998 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2018-11-23 12:47:33,998 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:33,998 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:33,998 INFO L423 AbstractCegarLoop]: === Iteration 34 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:33,999 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:33,999 INFO L82 PathProgramCache]: Analyzing trace with hash -1078871838, now seen corresponding path program 1 times [2018-11-23 12:47:33,999 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:33,999 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:34,000 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:34,000 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:34,000 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:34,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:34,229 INFO L256 TraceCheckUtils]: 0: Hoare triple {40197#true} call ULTIMATE.init(); {40197#true} is VALID [2018-11-23 12:47:34,229 INFO L273 TraceCheckUtils]: 1: Hoare triple {40197#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,229 INFO L273 TraceCheckUtils]: 2: Hoare triple {40197#true} assume true; {40197#true} is VALID [2018-11-23 12:47:34,230 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {40197#true} {40197#true} #607#return; {40197#true} is VALID [2018-11-23 12:47:34,230 INFO L256 TraceCheckUtils]: 4: Hoare triple {40197#true} call #t~ret139 := main(); {40197#true} is VALID [2018-11-23 12:47:34,230 INFO L273 TraceCheckUtils]: 5: Hoare triple {40197#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,230 INFO L256 TraceCheckUtils]: 6: Hoare triple {40197#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {40197#true} is VALID [2018-11-23 12:47:34,230 INFO L273 TraceCheckUtils]: 7: Hoare triple {40197#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,231 INFO L273 TraceCheckUtils]: 8: Hoare triple {40197#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {40197#true} is VALID [2018-11-23 12:47:34,231 INFO L273 TraceCheckUtils]: 9: Hoare triple {40197#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {40197#true} is VALID [2018-11-23 12:47:34,231 INFO L273 TraceCheckUtils]: 10: Hoare triple {40197#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {40197#true} is VALID [2018-11-23 12:47:34,231 INFO L273 TraceCheckUtils]: 11: Hoare triple {40197#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,231 INFO L273 TraceCheckUtils]: 12: Hoare triple {40197#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {40197#true} is VALID [2018-11-23 12:47:34,232 INFO L273 TraceCheckUtils]: 13: Hoare triple {40197#true} assume !false; {40197#true} is VALID [2018-11-23 12:47:34,232 INFO L273 TraceCheckUtils]: 14: Hoare triple {40197#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,232 INFO L273 TraceCheckUtils]: 15: Hoare triple {40197#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,232 INFO L273 TraceCheckUtils]: 16: Hoare triple {40197#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,232 INFO L273 TraceCheckUtils]: 17: Hoare triple {40197#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,232 INFO L273 TraceCheckUtils]: 18: Hoare triple {40197#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,232 INFO L273 TraceCheckUtils]: 19: Hoare triple {40197#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,232 INFO L273 TraceCheckUtils]: 20: Hoare triple {40197#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,233 INFO L273 TraceCheckUtils]: 21: Hoare triple {40197#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,233 INFO L273 TraceCheckUtils]: 22: Hoare triple {40197#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,233 INFO L273 TraceCheckUtils]: 23: Hoare triple {40197#true} assume 8464 == #t~mem27;havoc #t~mem27; {40197#true} is VALID [2018-11-23 12:47:34,233 INFO L273 TraceCheckUtils]: 24: Hoare triple {40197#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {40197#true} is VALID [2018-11-23 12:47:34,233 INFO L273 TraceCheckUtils]: 25: Hoare triple {40197#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {40197#true} is VALID [2018-11-23 12:47:34,233 INFO L273 TraceCheckUtils]: 26: Hoare triple {40197#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,233 INFO L273 TraceCheckUtils]: 27: Hoare triple {40197#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,233 INFO L273 TraceCheckUtils]: 28: Hoare triple {40197#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {40197#true} is VALID [2018-11-23 12:47:34,234 INFO L273 TraceCheckUtils]: 29: Hoare triple {40197#true} ~skip~0 := 0; {40197#true} is VALID [2018-11-23 12:47:34,234 INFO L273 TraceCheckUtils]: 30: Hoare triple {40197#true} assume !false; {40197#true} is VALID [2018-11-23 12:47:34,234 INFO L273 TraceCheckUtils]: 31: Hoare triple {40197#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,234 INFO L273 TraceCheckUtils]: 32: Hoare triple {40197#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,234 INFO L273 TraceCheckUtils]: 33: Hoare triple {40197#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,234 INFO L273 TraceCheckUtils]: 34: Hoare triple {40197#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,234 INFO L273 TraceCheckUtils]: 35: Hoare triple {40197#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,234 INFO L273 TraceCheckUtils]: 36: Hoare triple {40197#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,234 INFO L273 TraceCheckUtils]: 37: Hoare triple {40197#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,235 INFO L273 TraceCheckUtils]: 38: Hoare triple {40197#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,235 INFO L273 TraceCheckUtils]: 39: Hoare triple {40197#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,235 INFO L273 TraceCheckUtils]: 40: Hoare triple {40197#true} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,235 INFO L273 TraceCheckUtils]: 41: Hoare triple {40197#true} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,235 INFO L273 TraceCheckUtils]: 42: Hoare triple {40197#true} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,235 INFO L273 TraceCheckUtils]: 43: Hoare triple {40197#true} assume 8496 == #t~mem30;havoc #t~mem30; {40197#true} is VALID [2018-11-23 12:47:34,235 INFO L273 TraceCheckUtils]: 44: Hoare triple {40197#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {40197#true} is VALID [2018-11-23 12:47:34,235 INFO L273 TraceCheckUtils]: 45: Hoare triple {40197#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {40197#true} is VALID [2018-11-23 12:47:34,235 INFO L273 TraceCheckUtils]: 46: Hoare triple {40197#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {40197#true} is VALID [2018-11-23 12:47:34,236 INFO L273 TraceCheckUtils]: 47: Hoare triple {40197#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {40199#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:34,237 INFO L273 TraceCheckUtils]: 48: Hoare triple {40199#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {40199#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:34,237 INFO L273 TraceCheckUtils]: 49: Hoare triple {40199#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {40199#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:34,238 INFO L273 TraceCheckUtils]: 50: Hoare triple {40199#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {40199#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:34,238 INFO L273 TraceCheckUtils]: 51: Hoare triple {40199#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {40199#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:34,238 INFO L273 TraceCheckUtils]: 52: Hoare triple {40199#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {40199#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:34,239 INFO L273 TraceCheckUtils]: 53: Hoare triple {40199#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {40199#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:34,239 INFO L273 TraceCheckUtils]: 54: Hoare triple {40199#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {40199#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:34,239 INFO L273 TraceCheckUtils]: 55: Hoare triple {40199#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {40199#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:34,240 INFO L273 TraceCheckUtils]: 56: Hoare triple {40199#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {40200#(= 8512 |ssl3_accept_#t~mem22|)} is VALID [2018-11-23 12:47:34,241 INFO L273 TraceCheckUtils]: 57: Hoare triple {40200#(= 8512 |ssl3_accept_#t~mem22|)} assume 24576 == #t~mem22;havoc #t~mem22; {40198#false} is VALID [2018-11-23 12:47:34,241 INFO L273 TraceCheckUtils]: 58: Hoare triple {40198#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,241 INFO L273 TraceCheckUtils]: 59: Hoare triple {40198#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {40198#false} is VALID [2018-11-23 12:47:34,241 INFO L273 TraceCheckUtils]: 60: Hoare triple {40198#false} call #t~mem54 := read~int(~s.base, ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,241 INFO L273 TraceCheckUtils]: 61: Hoare triple {40198#false} assume !(3 != #t~mem54 / 256);havoc #t~mem54;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,242 INFO L273 TraceCheckUtils]: 62: Hoare triple {40198#false} assume !(0 == (#t~mem55.base + #t~mem55.offset) % 4294967296);havoc #t~mem55.base, #t~mem55.offset; {40198#false} is VALID [2018-11-23 12:47:34,242 INFO L273 TraceCheckUtils]: 63: Hoare triple {40198#false} assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~tmp___4~0 := #t~nondet57;havoc #t~nondet57; {40198#false} is VALID [2018-11-23 12:47:34,242 INFO L273 TraceCheckUtils]: 64: Hoare triple {40198#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem58 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,242 INFO L273 TraceCheckUtils]: 65: Hoare triple {40198#false} assume 12292 != #t~mem58;havoc #t~mem58;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~tmp___5~0 := #t~nondet59;havoc #t~nondet59; {40198#false} is VALID [2018-11-23 12:47:34,242 INFO L273 TraceCheckUtils]: 66: Hoare triple {40198#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem61 := read~int(#t~mem60.base, 72 + #t~mem60.offset, 4);call write~int(1 + #t~mem61, #t~mem60.base, 72 + #t~mem60.offset, 4);havoc #t~mem60.base, #t~mem60.offset;havoc #t~mem61; {40198#false} is VALID [2018-11-23 12:47:34,243 INFO L273 TraceCheckUtils]: 67: Hoare triple {40198#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,243 INFO L273 TraceCheckUtils]: 68: Hoare triple {40198#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {40198#false} is VALID [2018-11-23 12:47:34,243 INFO L273 TraceCheckUtils]: 69: Hoare triple {40198#false} ~skip~0 := 0; {40198#false} is VALID [2018-11-23 12:47:34,243 INFO L273 TraceCheckUtils]: 70: Hoare triple {40198#false} assume !false; {40198#false} is VALID [2018-11-23 12:47:34,243 INFO L273 TraceCheckUtils]: 71: Hoare triple {40198#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,244 INFO L273 TraceCheckUtils]: 72: Hoare triple {40198#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,244 INFO L273 TraceCheckUtils]: 73: Hoare triple {40198#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,244 INFO L273 TraceCheckUtils]: 74: Hoare triple {40198#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,244 INFO L273 TraceCheckUtils]: 75: Hoare triple {40198#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,244 INFO L273 TraceCheckUtils]: 76: Hoare triple {40198#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,245 INFO L273 TraceCheckUtils]: 77: Hoare triple {40198#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,245 INFO L273 TraceCheckUtils]: 78: Hoare triple {40198#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,245 INFO L273 TraceCheckUtils]: 79: Hoare triple {40198#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,245 INFO L273 TraceCheckUtils]: 80: Hoare triple {40198#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,245 INFO L273 TraceCheckUtils]: 81: Hoare triple {40198#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,245 INFO L273 TraceCheckUtils]: 82: Hoare triple {40198#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,245 INFO L273 TraceCheckUtils]: 83: Hoare triple {40198#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,246 INFO L273 TraceCheckUtils]: 84: Hoare triple {40198#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,246 INFO L273 TraceCheckUtils]: 85: Hoare triple {40198#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,246 INFO L273 TraceCheckUtils]: 86: Hoare triple {40198#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,246 INFO L273 TraceCheckUtils]: 87: Hoare triple {40198#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,246 INFO L273 TraceCheckUtils]: 88: Hoare triple {40198#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,246 INFO L273 TraceCheckUtils]: 89: Hoare triple {40198#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,246 INFO L273 TraceCheckUtils]: 90: Hoare triple {40198#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,247 INFO L273 TraceCheckUtils]: 91: Hoare triple {40198#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,247 INFO L273 TraceCheckUtils]: 92: Hoare triple {40198#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,247 INFO L273 TraceCheckUtils]: 93: Hoare triple {40198#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,247 INFO L273 TraceCheckUtils]: 94: Hoare triple {40198#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,247 INFO L273 TraceCheckUtils]: 95: Hoare triple {40198#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,247 INFO L273 TraceCheckUtils]: 96: Hoare triple {40198#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,248 INFO L273 TraceCheckUtils]: 97: Hoare triple {40198#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,248 INFO L273 TraceCheckUtils]: 98: Hoare triple {40198#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,248 INFO L273 TraceCheckUtils]: 99: Hoare triple {40198#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,248 INFO L273 TraceCheckUtils]: 100: Hoare triple {40198#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,248 INFO L273 TraceCheckUtils]: 101: Hoare triple {40198#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,248 INFO L273 TraceCheckUtils]: 102: Hoare triple {40198#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,248 INFO L273 TraceCheckUtils]: 103: Hoare triple {40198#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {40198#false} is VALID [2018-11-23 12:47:34,249 INFO L273 TraceCheckUtils]: 104: Hoare triple {40198#false} assume 8672 == #t~mem51;havoc #t~mem51; {40198#false} is VALID [2018-11-23 12:47:34,249 INFO L273 TraceCheckUtils]: 105: Hoare triple {40198#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {40198#false} is VALID [2018-11-23 12:47:34,249 INFO L273 TraceCheckUtils]: 106: Hoare triple {40198#false} assume 4 == ~blastFlag~0; {40198#false} is VALID [2018-11-23 12:47:34,249 INFO L273 TraceCheckUtils]: 107: Hoare triple {40198#false} assume !false; {40198#false} is VALID [2018-11-23 12:47:34,254 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 52 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:34,255 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:34,255 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:34,255 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 108 [2018-11-23 12:47:34,255 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:34,255 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:34,346 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 98 edges. 98 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:34,346 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:34,346 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:34,347 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:34,347 INFO L87 Difference]: Start difference. First operand 263 states and 393 transitions. Second operand 4 states. [2018-11-23 12:47:35,475 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:35,475 INFO L93 Difference]: Finished difference Result 532 states and 798 transitions. [2018-11-23 12:47:35,475 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:35,475 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 108 [2018-11-23 12:47:35,475 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:35,475 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:35,477 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 462 transitions. [2018-11-23 12:47:35,477 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:35,479 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 462 transitions. [2018-11-23 12:47:35,479 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 462 transitions. [2018-11-23 12:47:35,927 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 462 edges. 462 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:35,934 INFO L225 Difference]: With dead ends: 532 [2018-11-23 12:47:35,934 INFO L226 Difference]: Without dead ends: 294 [2018-11-23 12:47:35,935 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:35,935 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2018-11-23 12:47:36,054 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 263. [2018-11-23 12:47:36,054 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:36,054 INFO L82 GeneralOperation]: Start isEquivalent. First operand 294 states. Second operand 263 states. [2018-11-23 12:47:36,054 INFO L74 IsIncluded]: Start isIncluded. First operand 294 states. Second operand 263 states. [2018-11-23 12:47:36,054 INFO L87 Difference]: Start difference. First operand 294 states. Second operand 263 states. [2018-11-23 12:47:36,059 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:36,060 INFO L93 Difference]: Finished difference Result 294 states and 432 transitions. [2018-11-23 12:47:36,060 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 432 transitions. [2018-11-23 12:47:36,060 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:36,060 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:36,060 INFO L74 IsIncluded]: Start isIncluded. First operand 263 states. Second operand 294 states. [2018-11-23 12:47:36,060 INFO L87 Difference]: Start difference. First operand 263 states. Second operand 294 states. [2018-11-23 12:47:36,065 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:36,066 INFO L93 Difference]: Finished difference Result 294 states and 432 transitions. [2018-11-23 12:47:36,066 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 432 transitions. [2018-11-23 12:47:36,066 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:36,066 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:36,066 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:36,066 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:36,066 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 12:47:36,070 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 392 transitions. [2018-11-23 12:47:36,071 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 392 transitions. Word has length 108 [2018-11-23 12:47:36,071 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:36,071 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 392 transitions. [2018-11-23 12:47:36,071 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:36,071 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 392 transitions. [2018-11-23 12:47:36,071 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2018-11-23 12:47:36,072 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:36,072 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:36,072 INFO L423 AbstractCegarLoop]: === Iteration 35 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:36,072 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:36,072 INFO L82 PathProgramCache]: Analyzing trace with hash -158921535, now seen corresponding path program 1 times [2018-11-23 12:47:36,072 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:36,072 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:36,073 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:36,073 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:36,073 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:36,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:36,306 INFO L256 TraceCheckUtils]: 0: Hoare triple {41704#true} call ULTIMATE.init(); {41704#true} is VALID [2018-11-23 12:47:36,306 INFO L273 TraceCheckUtils]: 1: Hoare triple {41704#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,306 INFO L273 TraceCheckUtils]: 2: Hoare triple {41704#true} assume true; {41704#true} is VALID [2018-11-23 12:47:36,306 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {41704#true} {41704#true} #607#return; {41704#true} is VALID [2018-11-23 12:47:36,306 INFO L256 TraceCheckUtils]: 4: Hoare triple {41704#true} call #t~ret139 := main(); {41704#true} is VALID [2018-11-23 12:47:36,307 INFO L273 TraceCheckUtils]: 5: Hoare triple {41704#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,307 INFO L256 TraceCheckUtils]: 6: Hoare triple {41704#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {41704#true} is VALID [2018-11-23 12:47:36,307 INFO L273 TraceCheckUtils]: 7: Hoare triple {41704#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,307 INFO L273 TraceCheckUtils]: 8: Hoare triple {41704#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {41704#true} is VALID [2018-11-23 12:47:36,307 INFO L273 TraceCheckUtils]: 9: Hoare triple {41704#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {41704#true} is VALID [2018-11-23 12:47:36,307 INFO L273 TraceCheckUtils]: 10: Hoare triple {41704#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {41704#true} is VALID [2018-11-23 12:47:36,307 INFO L273 TraceCheckUtils]: 11: Hoare triple {41704#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,307 INFO L273 TraceCheckUtils]: 12: Hoare triple {41704#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {41704#true} is VALID [2018-11-23 12:47:36,307 INFO L273 TraceCheckUtils]: 13: Hoare triple {41704#true} assume !false; {41704#true} is VALID [2018-11-23 12:47:36,308 INFO L273 TraceCheckUtils]: 14: Hoare triple {41704#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,308 INFO L273 TraceCheckUtils]: 15: Hoare triple {41704#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,308 INFO L273 TraceCheckUtils]: 16: Hoare triple {41704#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,308 INFO L273 TraceCheckUtils]: 17: Hoare triple {41704#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,308 INFO L273 TraceCheckUtils]: 18: Hoare triple {41704#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,308 INFO L273 TraceCheckUtils]: 19: Hoare triple {41704#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,308 INFO L273 TraceCheckUtils]: 20: Hoare triple {41704#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,308 INFO L273 TraceCheckUtils]: 21: Hoare triple {41704#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,309 INFO L273 TraceCheckUtils]: 22: Hoare triple {41704#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,309 INFO L273 TraceCheckUtils]: 23: Hoare triple {41704#true} assume 8464 == #t~mem27;havoc #t~mem27; {41704#true} is VALID [2018-11-23 12:47:36,309 INFO L273 TraceCheckUtils]: 24: Hoare triple {41704#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {41704#true} is VALID [2018-11-23 12:47:36,309 INFO L273 TraceCheckUtils]: 25: Hoare triple {41704#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {41704#true} is VALID [2018-11-23 12:47:36,309 INFO L273 TraceCheckUtils]: 26: Hoare triple {41704#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,309 INFO L273 TraceCheckUtils]: 27: Hoare triple {41704#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,310 INFO L273 TraceCheckUtils]: 28: Hoare triple {41704#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {41704#true} is VALID [2018-11-23 12:47:36,310 INFO L273 TraceCheckUtils]: 29: Hoare triple {41704#true} ~skip~0 := 0; {41704#true} is VALID [2018-11-23 12:47:36,310 INFO L273 TraceCheckUtils]: 30: Hoare triple {41704#true} assume !false; {41704#true} is VALID [2018-11-23 12:47:36,310 INFO L273 TraceCheckUtils]: 31: Hoare triple {41704#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,310 INFO L273 TraceCheckUtils]: 32: Hoare triple {41704#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,310 INFO L273 TraceCheckUtils]: 33: Hoare triple {41704#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,311 INFO L273 TraceCheckUtils]: 34: Hoare triple {41704#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,311 INFO L273 TraceCheckUtils]: 35: Hoare triple {41704#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,311 INFO L273 TraceCheckUtils]: 36: Hoare triple {41704#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,311 INFO L273 TraceCheckUtils]: 37: Hoare triple {41704#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,311 INFO L273 TraceCheckUtils]: 38: Hoare triple {41704#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,311 INFO L273 TraceCheckUtils]: 39: Hoare triple {41704#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,311 INFO L273 TraceCheckUtils]: 40: Hoare triple {41704#true} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,311 INFO L273 TraceCheckUtils]: 41: Hoare triple {41704#true} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,312 INFO L273 TraceCheckUtils]: 42: Hoare triple {41704#true} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,312 INFO L273 TraceCheckUtils]: 43: Hoare triple {41704#true} assume 8496 == #t~mem30;havoc #t~mem30; {41704#true} is VALID [2018-11-23 12:47:36,312 INFO L273 TraceCheckUtils]: 44: Hoare triple {41704#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {41704#true} is VALID [2018-11-23 12:47:36,312 INFO L273 TraceCheckUtils]: 45: Hoare triple {41704#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {41704#true} is VALID [2018-11-23 12:47:36,312 INFO L273 TraceCheckUtils]: 46: Hoare triple {41704#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {41704#true} is VALID [2018-11-23 12:47:36,313 INFO L273 TraceCheckUtils]: 47: Hoare triple {41704#true} assume 0 != #t~mem68;havoc #t~mem68;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {41706#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,314 INFO L273 TraceCheckUtils]: 48: Hoare triple {41706#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {41706#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,315 INFO L273 TraceCheckUtils]: 49: Hoare triple {41706#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {41706#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,316 INFO L273 TraceCheckUtils]: 50: Hoare triple {41706#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {41706#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,316 INFO L273 TraceCheckUtils]: 51: Hoare triple {41706#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {41706#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,318 INFO L273 TraceCheckUtils]: 52: Hoare triple {41706#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {41706#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,318 INFO L273 TraceCheckUtils]: 53: Hoare triple {41706#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {41706#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,320 INFO L273 TraceCheckUtils]: 54: Hoare triple {41706#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {41706#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,320 INFO L273 TraceCheckUtils]: 55: Hoare triple {41706#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {41706#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,322 INFO L273 TraceCheckUtils]: 56: Hoare triple {41706#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {41706#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,325 INFO L273 TraceCheckUtils]: 57: Hoare triple {41706#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {41707#(= 8656 |ssl3_accept_#t~mem23|)} is VALID [2018-11-23 12:47:36,328 INFO L273 TraceCheckUtils]: 58: Hoare triple {41707#(= 8656 |ssl3_accept_#t~mem23|)} assume 8195 == #t~mem23;havoc #t~mem23; {41705#false} is VALID [2018-11-23 12:47:36,328 INFO L273 TraceCheckUtils]: 59: Hoare triple {41705#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,328 INFO L273 TraceCheckUtils]: 60: Hoare triple {41705#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {41705#false} is VALID [2018-11-23 12:47:36,328 INFO L273 TraceCheckUtils]: 61: Hoare triple {41705#false} call #t~mem54 := read~int(~s.base, ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,328 INFO L273 TraceCheckUtils]: 62: Hoare triple {41705#false} assume !(3 != #t~mem54 / 256);havoc #t~mem54;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,328 INFO L273 TraceCheckUtils]: 63: Hoare triple {41705#false} assume !(0 == (#t~mem55.base + #t~mem55.offset) % 4294967296);havoc #t~mem55.base, #t~mem55.offset; {41705#false} is VALID [2018-11-23 12:47:36,328 INFO L273 TraceCheckUtils]: 64: Hoare triple {41705#false} assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~tmp___4~0 := #t~nondet57;havoc #t~nondet57; {41705#false} is VALID [2018-11-23 12:47:36,328 INFO L273 TraceCheckUtils]: 65: Hoare triple {41705#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem58 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,329 INFO L273 TraceCheckUtils]: 66: Hoare triple {41705#false} assume 12292 != #t~mem58;havoc #t~mem58;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~tmp___5~0 := #t~nondet59;havoc #t~nondet59; {41705#false} is VALID [2018-11-23 12:47:36,329 INFO L273 TraceCheckUtils]: 67: Hoare triple {41705#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem61 := read~int(#t~mem60.base, 72 + #t~mem60.offset, 4);call write~int(1 + #t~mem61, #t~mem60.base, 72 + #t~mem60.offset, 4);havoc #t~mem60.base, #t~mem60.offset;havoc #t~mem61; {41705#false} is VALID [2018-11-23 12:47:36,329 INFO L273 TraceCheckUtils]: 68: Hoare triple {41705#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,329 INFO L273 TraceCheckUtils]: 69: Hoare triple {41705#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {41705#false} is VALID [2018-11-23 12:47:36,329 INFO L273 TraceCheckUtils]: 70: Hoare triple {41705#false} ~skip~0 := 0; {41705#false} is VALID [2018-11-23 12:47:36,329 INFO L273 TraceCheckUtils]: 71: Hoare triple {41705#false} assume !false; {41705#false} is VALID [2018-11-23 12:47:36,330 INFO L273 TraceCheckUtils]: 72: Hoare triple {41705#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,330 INFO L273 TraceCheckUtils]: 73: Hoare triple {41705#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,330 INFO L273 TraceCheckUtils]: 74: Hoare triple {41705#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,330 INFO L273 TraceCheckUtils]: 75: Hoare triple {41705#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,330 INFO L273 TraceCheckUtils]: 76: Hoare triple {41705#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,330 INFO L273 TraceCheckUtils]: 77: Hoare triple {41705#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,331 INFO L273 TraceCheckUtils]: 78: Hoare triple {41705#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,331 INFO L273 TraceCheckUtils]: 79: Hoare triple {41705#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,331 INFO L273 TraceCheckUtils]: 80: Hoare triple {41705#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,331 INFO L273 TraceCheckUtils]: 81: Hoare triple {41705#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,331 INFO L273 TraceCheckUtils]: 82: Hoare triple {41705#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,331 INFO L273 TraceCheckUtils]: 83: Hoare triple {41705#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,332 INFO L273 TraceCheckUtils]: 84: Hoare triple {41705#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,332 INFO L273 TraceCheckUtils]: 85: Hoare triple {41705#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,332 INFO L273 TraceCheckUtils]: 86: Hoare triple {41705#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,332 INFO L273 TraceCheckUtils]: 87: Hoare triple {41705#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,332 INFO L273 TraceCheckUtils]: 88: Hoare triple {41705#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,332 INFO L273 TraceCheckUtils]: 89: Hoare triple {41705#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,332 INFO L273 TraceCheckUtils]: 90: Hoare triple {41705#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,332 INFO L273 TraceCheckUtils]: 91: Hoare triple {41705#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,332 INFO L273 TraceCheckUtils]: 92: Hoare triple {41705#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,333 INFO L273 TraceCheckUtils]: 93: Hoare triple {41705#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,333 INFO L273 TraceCheckUtils]: 94: Hoare triple {41705#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,333 INFO L273 TraceCheckUtils]: 95: Hoare triple {41705#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,333 INFO L273 TraceCheckUtils]: 96: Hoare triple {41705#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,333 INFO L273 TraceCheckUtils]: 97: Hoare triple {41705#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,333 INFO L273 TraceCheckUtils]: 98: Hoare triple {41705#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,333 INFO L273 TraceCheckUtils]: 99: Hoare triple {41705#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,333 INFO L273 TraceCheckUtils]: 100: Hoare triple {41705#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,334 INFO L273 TraceCheckUtils]: 101: Hoare triple {41705#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,334 INFO L273 TraceCheckUtils]: 102: Hoare triple {41705#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,334 INFO L273 TraceCheckUtils]: 103: Hoare triple {41705#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,334 INFO L273 TraceCheckUtils]: 104: Hoare triple {41705#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {41705#false} is VALID [2018-11-23 12:47:36,334 INFO L273 TraceCheckUtils]: 105: Hoare triple {41705#false} assume 8672 == #t~mem51;havoc #t~mem51; {41705#false} is VALID [2018-11-23 12:47:36,334 INFO L273 TraceCheckUtils]: 106: Hoare triple {41705#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {41705#false} is VALID [2018-11-23 12:47:36,334 INFO L273 TraceCheckUtils]: 107: Hoare triple {41705#false} assume 4 == ~blastFlag~0; {41705#false} is VALID [2018-11-23 12:47:36,334 INFO L273 TraceCheckUtils]: 108: Hoare triple {41705#false} assume !false; {41705#false} is VALID [2018-11-23 12:47:36,341 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:36,341 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:36,341 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:36,341 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 109 [2018-11-23 12:47:36,342 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:36,342 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:36,490 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 99 edges. 99 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:36,490 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:36,490 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:36,490 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:36,491 INFO L87 Difference]: Start difference. First operand 263 states and 392 transitions. Second operand 4 states. [2018-11-23 12:47:37,740 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:37,740 INFO L93 Difference]: Finished difference Result 551 states and 822 transitions. [2018-11-23 12:47:37,740 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:37,741 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 109 [2018-11-23 12:47:37,741 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:37,741 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:37,743 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 533 transitions. [2018-11-23 12:47:37,743 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:37,772 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 533 transitions. [2018-11-23 12:47:37,772 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 533 transitions. [2018-11-23 12:47:38,312 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 533 edges. 533 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:38,318 INFO L225 Difference]: With dead ends: 551 [2018-11-23 12:47:38,319 INFO L226 Difference]: Without dead ends: 313 [2018-11-23 12:47:38,319 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:38,319 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 313 states. [2018-11-23 12:47:38,385 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 313 to 263. [2018-11-23 12:47:38,386 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:38,386 INFO L82 GeneralOperation]: Start isEquivalent. First operand 313 states. Second operand 263 states. [2018-11-23 12:47:38,386 INFO L74 IsIncluded]: Start isIncluded. First operand 313 states. Second operand 263 states. [2018-11-23 12:47:38,386 INFO L87 Difference]: Start difference. First operand 313 states. Second operand 263 states. [2018-11-23 12:47:38,393 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:38,393 INFO L93 Difference]: Finished difference Result 313 states and 457 transitions. [2018-11-23 12:47:38,393 INFO L276 IsEmpty]: Start isEmpty. Operand 313 states and 457 transitions. [2018-11-23 12:47:38,393 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:38,394 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:38,394 INFO L74 IsIncluded]: Start isIncluded. First operand 263 states. Second operand 313 states. [2018-11-23 12:47:38,394 INFO L87 Difference]: Start difference. First operand 263 states. Second operand 313 states. [2018-11-23 12:47:38,399 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:38,399 INFO L93 Difference]: Finished difference Result 313 states and 457 transitions. [2018-11-23 12:47:38,399 INFO L276 IsEmpty]: Start isEmpty. Operand 313 states and 457 transitions. [2018-11-23 12:47:38,399 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:38,399 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:38,399 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:38,400 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:38,400 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 12:47:38,403 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 391 transitions. [2018-11-23 12:47:38,403 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 391 transitions. Word has length 109 [2018-11-23 12:47:38,403 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:38,403 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 391 transitions. [2018-11-23 12:47:38,403 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:38,403 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 391 transitions. [2018-11-23 12:47:38,404 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2018-11-23 12:47:38,404 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:38,404 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:38,404 INFO L423 AbstractCegarLoop]: === Iteration 36 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:38,404 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:38,405 INFO L82 PathProgramCache]: Analyzing trace with hash 520350719, now seen corresponding path program 1 times [2018-11-23 12:47:38,405 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:38,405 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:38,406 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:38,406 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:38,406 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:38,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:38,602 INFO L256 TraceCheckUtils]: 0: Hoare triple {43278#true} call ULTIMATE.init(); {43278#true} is VALID [2018-11-23 12:47:38,602 INFO L273 TraceCheckUtils]: 1: Hoare triple {43278#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,603 INFO L273 TraceCheckUtils]: 2: Hoare triple {43278#true} assume true; {43278#true} is VALID [2018-11-23 12:47:38,603 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {43278#true} {43278#true} #607#return; {43278#true} is VALID [2018-11-23 12:47:38,603 INFO L256 TraceCheckUtils]: 4: Hoare triple {43278#true} call #t~ret139 := main(); {43278#true} is VALID [2018-11-23 12:47:38,604 INFO L273 TraceCheckUtils]: 5: Hoare triple {43278#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,604 INFO L256 TraceCheckUtils]: 6: Hoare triple {43278#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {43278#true} is VALID [2018-11-23 12:47:38,604 INFO L273 TraceCheckUtils]: 7: Hoare triple {43278#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,604 INFO L273 TraceCheckUtils]: 8: Hoare triple {43278#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {43278#true} is VALID [2018-11-23 12:47:38,604 INFO L273 TraceCheckUtils]: 9: Hoare triple {43278#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {43278#true} is VALID [2018-11-23 12:47:38,605 INFO L273 TraceCheckUtils]: 10: Hoare triple {43278#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {43278#true} is VALID [2018-11-23 12:47:38,605 INFO L273 TraceCheckUtils]: 11: Hoare triple {43278#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,605 INFO L273 TraceCheckUtils]: 12: Hoare triple {43278#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {43278#true} is VALID [2018-11-23 12:47:38,605 INFO L273 TraceCheckUtils]: 13: Hoare triple {43278#true} assume !false; {43278#true} is VALID [2018-11-23 12:47:38,605 INFO L273 TraceCheckUtils]: 14: Hoare triple {43278#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,606 INFO L273 TraceCheckUtils]: 15: Hoare triple {43278#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,606 INFO L273 TraceCheckUtils]: 16: Hoare triple {43278#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,606 INFO L273 TraceCheckUtils]: 17: Hoare triple {43278#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,606 INFO L273 TraceCheckUtils]: 18: Hoare triple {43278#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,606 INFO L273 TraceCheckUtils]: 19: Hoare triple {43278#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,606 INFO L273 TraceCheckUtils]: 20: Hoare triple {43278#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,607 INFO L273 TraceCheckUtils]: 21: Hoare triple {43278#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,607 INFO L273 TraceCheckUtils]: 22: Hoare triple {43278#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,607 INFO L273 TraceCheckUtils]: 23: Hoare triple {43278#true} assume 8464 == #t~mem27;havoc #t~mem27; {43278#true} is VALID [2018-11-23 12:47:38,607 INFO L273 TraceCheckUtils]: 24: Hoare triple {43278#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {43278#true} is VALID [2018-11-23 12:47:38,607 INFO L273 TraceCheckUtils]: 25: Hoare triple {43278#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {43278#true} is VALID [2018-11-23 12:47:38,607 INFO L273 TraceCheckUtils]: 26: Hoare triple {43278#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,607 INFO L273 TraceCheckUtils]: 27: Hoare triple {43278#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,607 INFO L273 TraceCheckUtils]: 28: Hoare triple {43278#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {43278#true} is VALID [2018-11-23 12:47:38,607 INFO L273 TraceCheckUtils]: 29: Hoare triple {43278#true} ~skip~0 := 0; {43278#true} is VALID [2018-11-23 12:47:38,608 INFO L273 TraceCheckUtils]: 30: Hoare triple {43278#true} assume !false; {43278#true} is VALID [2018-11-23 12:47:38,608 INFO L273 TraceCheckUtils]: 31: Hoare triple {43278#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,608 INFO L273 TraceCheckUtils]: 32: Hoare triple {43278#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,608 INFO L273 TraceCheckUtils]: 33: Hoare triple {43278#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,608 INFO L273 TraceCheckUtils]: 34: Hoare triple {43278#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,608 INFO L273 TraceCheckUtils]: 35: Hoare triple {43278#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,608 INFO L273 TraceCheckUtils]: 36: Hoare triple {43278#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,608 INFO L273 TraceCheckUtils]: 37: Hoare triple {43278#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,609 INFO L273 TraceCheckUtils]: 38: Hoare triple {43278#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,609 INFO L273 TraceCheckUtils]: 39: Hoare triple {43278#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,609 INFO L273 TraceCheckUtils]: 40: Hoare triple {43278#true} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,609 INFO L273 TraceCheckUtils]: 41: Hoare triple {43278#true} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,609 INFO L273 TraceCheckUtils]: 42: Hoare triple {43278#true} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,609 INFO L273 TraceCheckUtils]: 43: Hoare triple {43278#true} assume 8496 == #t~mem30;havoc #t~mem30; {43278#true} is VALID [2018-11-23 12:47:38,609 INFO L273 TraceCheckUtils]: 44: Hoare triple {43278#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {43278#true} is VALID [2018-11-23 12:47:38,609 INFO L273 TraceCheckUtils]: 45: Hoare triple {43278#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {43278#true} is VALID [2018-11-23 12:47:38,609 INFO L273 TraceCheckUtils]: 46: Hoare triple {43278#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {43278#true} is VALID [2018-11-23 12:47:38,610 INFO L273 TraceCheckUtils]: 47: Hoare triple {43278#true} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {43280#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:38,611 INFO L273 TraceCheckUtils]: 48: Hoare triple {43280#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {43280#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:38,611 INFO L273 TraceCheckUtils]: 49: Hoare triple {43280#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {43280#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:38,612 INFO L273 TraceCheckUtils]: 50: Hoare triple {43280#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {43280#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:38,612 INFO L273 TraceCheckUtils]: 51: Hoare triple {43280#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {43280#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:38,613 INFO L273 TraceCheckUtils]: 52: Hoare triple {43280#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {43280#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:38,613 INFO L273 TraceCheckUtils]: 53: Hoare triple {43280#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {43280#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:38,614 INFO L273 TraceCheckUtils]: 54: Hoare triple {43280#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {43280#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:38,614 INFO L273 TraceCheckUtils]: 55: Hoare triple {43280#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {43280#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:38,615 INFO L273 TraceCheckUtils]: 56: Hoare triple {43280#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {43280#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:38,616 INFO L273 TraceCheckUtils]: 57: Hoare triple {43280#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {43281#(= 8512 |ssl3_accept_#t~mem23|)} is VALID [2018-11-23 12:47:38,616 INFO L273 TraceCheckUtils]: 58: Hoare triple {43281#(= 8512 |ssl3_accept_#t~mem23|)} assume 8195 == #t~mem23;havoc #t~mem23; {43279#false} is VALID [2018-11-23 12:47:38,616 INFO L273 TraceCheckUtils]: 59: Hoare triple {43279#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,617 INFO L273 TraceCheckUtils]: 60: Hoare triple {43279#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {43279#false} is VALID [2018-11-23 12:47:38,617 INFO L273 TraceCheckUtils]: 61: Hoare triple {43279#false} call #t~mem54 := read~int(~s.base, ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,617 INFO L273 TraceCheckUtils]: 62: Hoare triple {43279#false} assume !(3 != #t~mem54 / 256);havoc #t~mem54;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem55.base, #t~mem55.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,617 INFO L273 TraceCheckUtils]: 63: Hoare triple {43279#false} assume !(0 == (#t~mem55.base + #t~mem55.offset) % 4294967296);havoc #t~mem55.base, #t~mem55.offset; {43279#false} is VALID [2018-11-23 12:47:38,617 INFO L273 TraceCheckUtils]: 64: Hoare triple {43279#false} assume -2147483648 <= #t~nondet57 && #t~nondet57 <= 2147483647;~tmp___4~0 := #t~nondet57;havoc #t~nondet57; {43279#false} is VALID [2018-11-23 12:47:38,618 INFO L273 TraceCheckUtils]: 65: Hoare triple {43279#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem58 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,618 INFO L273 TraceCheckUtils]: 66: Hoare triple {43279#false} assume 12292 != #t~mem58;havoc #t~mem58;assume -2147483648 <= #t~nondet59 && #t~nondet59 <= 2147483647;~tmp___5~0 := #t~nondet59;havoc #t~nondet59; {43279#false} is VALID [2018-11-23 12:47:38,618 INFO L273 TraceCheckUtils]: 67: Hoare triple {43279#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem61 := read~int(#t~mem60.base, 72 + #t~mem60.offset, 4);call write~int(1 + #t~mem61, #t~mem60.base, 72 + #t~mem60.offset, 4);havoc #t~mem60.base, #t~mem60.offset;havoc #t~mem61; {43279#false} is VALID [2018-11-23 12:47:38,618 INFO L273 TraceCheckUtils]: 68: Hoare triple {43279#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,618 INFO L273 TraceCheckUtils]: 69: Hoare triple {43279#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {43279#false} is VALID [2018-11-23 12:47:38,619 INFO L273 TraceCheckUtils]: 70: Hoare triple {43279#false} ~skip~0 := 0; {43279#false} is VALID [2018-11-23 12:47:38,619 INFO L273 TraceCheckUtils]: 71: Hoare triple {43279#false} assume !false; {43279#false} is VALID [2018-11-23 12:47:38,619 INFO L273 TraceCheckUtils]: 72: Hoare triple {43279#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,619 INFO L273 TraceCheckUtils]: 73: Hoare triple {43279#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,619 INFO L273 TraceCheckUtils]: 74: Hoare triple {43279#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,619 INFO L273 TraceCheckUtils]: 75: Hoare triple {43279#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,619 INFO L273 TraceCheckUtils]: 76: Hoare triple {43279#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,620 INFO L273 TraceCheckUtils]: 77: Hoare triple {43279#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,620 INFO L273 TraceCheckUtils]: 78: Hoare triple {43279#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,620 INFO L273 TraceCheckUtils]: 79: Hoare triple {43279#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,620 INFO L273 TraceCheckUtils]: 80: Hoare triple {43279#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,620 INFO L273 TraceCheckUtils]: 81: Hoare triple {43279#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,620 INFO L273 TraceCheckUtils]: 82: Hoare triple {43279#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,620 INFO L273 TraceCheckUtils]: 83: Hoare triple {43279#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,620 INFO L273 TraceCheckUtils]: 84: Hoare triple {43279#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,621 INFO L273 TraceCheckUtils]: 85: Hoare triple {43279#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,621 INFO L273 TraceCheckUtils]: 86: Hoare triple {43279#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,621 INFO L273 TraceCheckUtils]: 87: Hoare triple {43279#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,621 INFO L273 TraceCheckUtils]: 88: Hoare triple {43279#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,621 INFO L273 TraceCheckUtils]: 89: Hoare triple {43279#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,621 INFO L273 TraceCheckUtils]: 90: Hoare triple {43279#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,621 INFO L273 TraceCheckUtils]: 91: Hoare triple {43279#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,621 INFO L273 TraceCheckUtils]: 92: Hoare triple {43279#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,621 INFO L273 TraceCheckUtils]: 93: Hoare triple {43279#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,622 INFO L273 TraceCheckUtils]: 94: Hoare triple {43279#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,622 INFO L273 TraceCheckUtils]: 95: Hoare triple {43279#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,622 INFO L273 TraceCheckUtils]: 96: Hoare triple {43279#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,622 INFO L273 TraceCheckUtils]: 97: Hoare triple {43279#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,622 INFO L273 TraceCheckUtils]: 98: Hoare triple {43279#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,622 INFO L273 TraceCheckUtils]: 99: Hoare triple {43279#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,622 INFO L273 TraceCheckUtils]: 100: Hoare triple {43279#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,622 INFO L273 TraceCheckUtils]: 101: Hoare triple {43279#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,622 INFO L273 TraceCheckUtils]: 102: Hoare triple {43279#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,623 INFO L273 TraceCheckUtils]: 103: Hoare triple {43279#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,623 INFO L273 TraceCheckUtils]: 104: Hoare triple {43279#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {43279#false} is VALID [2018-11-23 12:47:38,623 INFO L273 TraceCheckUtils]: 105: Hoare triple {43279#false} assume 8672 == #t~mem51;havoc #t~mem51; {43279#false} is VALID [2018-11-23 12:47:38,623 INFO L273 TraceCheckUtils]: 106: Hoare triple {43279#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {43279#false} is VALID [2018-11-23 12:47:38,623 INFO L273 TraceCheckUtils]: 107: Hoare triple {43279#false} assume 4 == ~blastFlag~0; {43279#false} is VALID [2018-11-23 12:47:38,623 INFO L273 TraceCheckUtils]: 108: Hoare triple {43279#false} assume !false; {43279#false} is VALID [2018-11-23 12:47:38,630 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:38,630 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:38,630 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:38,630 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 109 [2018-11-23 12:47:38,630 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:38,630 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:38,726 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 99 edges. 99 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:38,726 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:38,727 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:38,727 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:38,727 INFO L87 Difference]: Start difference. First operand 263 states and 391 transitions. Second operand 4 states. [2018-11-23 12:47:39,870 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:39,870 INFO L93 Difference]: Finished difference Result 522 states and 781 transitions. [2018-11-23 12:47:39,870 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:39,870 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 109 [2018-11-23 12:47:39,870 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:39,870 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:39,873 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 459 transitions. [2018-11-23 12:47:39,873 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:39,876 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 459 transitions. [2018-11-23 12:47:39,876 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 459 transitions. [2018-11-23 12:47:40,306 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 459 edges. 459 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:40,312 INFO L225 Difference]: With dead ends: 522 [2018-11-23 12:47:40,312 INFO L226 Difference]: Without dead ends: 284 [2018-11-23 12:47:40,313 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:40,313 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 284 states. [2018-11-23 12:47:40,368 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 284 to 263. [2018-11-23 12:47:40,368 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:40,368 INFO L82 GeneralOperation]: Start isEquivalent. First operand 284 states. Second operand 263 states. [2018-11-23 12:47:40,368 INFO L74 IsIncluded]: Start isIncluded. First operand 284 states. Second operand 263 states. [2018-11-23 12:47:40,368 INFO L87 Difference]: Start difference. First operand 284 states. Second operand 263 states. [2018-11-23 12:47:40,374 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:40,374 INFO L93 Difference]: Finished difference Result 284 states and 417 transitions. [2018-11-23 12:47:40,374 INFO L276 IsEmpty]: Start isEmpty. Operand 284 states and 417 transitions. [2018-11-23 12:47:40,374 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:40,374 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:40,374 INFO L74 IsIncluded]: Start isIncluded. First operand 263 states. Second operand 284 states. [2018-11-23 12:47:40,374 INFO L87 Difference]: Start difference. First operand 263 states. Second operand 284 states. [2018-11-23 12:47:40,379 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:40,379 INFO L93 Difference]: Finished difference Result 284 states and 417 transitions. [2018-11-23 12:47:40,379 INFO L276 IsEmpty]: Start isEmpty. Operand 284 states and 417 transitions. [2018-11-23 12:47:40,379 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:40,379 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:40,380 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:40,380 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:40,380 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 12:47:40,384 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 390 transitions. [2018-11-23 12:47:40,384 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 390 transitions. Word has length 109 [2018-11-23 12:47:40,384 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:40,384 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 390 transitions. [2018-11-23 12:47:40,384 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:40,384 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 390 transitions. [2018-11-23 12:47:40,385 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2018-11-23 12:47:40,385 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:40,385 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:40,385 INFO L423 AbstractCegarLoop]: === Iteration 37 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:40,385 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:40,385 INFO L82 PathProgramCache]: Analyzing trace with hash 813684885, now seen corresponding path program 1 times [2018-11-23 12:47:40,386 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:40,386 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:40,387 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:40,387 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:40,387 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:40,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:40,556 INFO L256 TraceCheckUtils]: 0: Hoare triple {44754#true} call ULTIMATE.init(); {44754#true} is VALID [2018-11-23 12:47:40,556 INFO L273 TraceCheckUtils]: 1: Hoare triple {44754#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,556 INFO L273 TraceCheckUtils]: 2: Hoare triple {44754#true} assume true; {44754#true} is VALID [2018-11-23 12:47:40,557 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {44754#true} {44754#true} #607#return; {44754#true} is VALID [2018-11-23 12:47:40,557 INFO L256 TraceCheckUtils]: 4: Hoare triple {44754#true} call #t~ret139 := main(); {44754#true} is VALID [2018-11-23 12:47:40,557 INFO L273 TraceCheckUtils]: 5: Hoare triple {44754#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,558 INFO L256 TraceCheckUtils]: 6: Hoare triple {44754#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {44754#true} is VALID [2018-11-23 12:47:40,558 INFO L273 TraceCheckUtils]: 7: Hoare triple {44754#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,558 INFO L273 TraceCheckUtils]: 8: Hoare triple {44754#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {44754#true} is VALID [2018-11-23 12:47:40,558 INFO L273 TraceCheckUtils]: 9: Hoare triple {44754#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {44754#true} is VALID [2018-11-23 12:47:40,558 INFO L273 TraceCheckUtils]: 10: Hoare triple {44754#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {44754#true} is VALID [2018-11-23 12:47:40,559 INFO L273 TraceCheckUtils]: 11: Hoare triple {44754#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,559 INFO L273 TraceCheckUtils]: 12: Hoare triple {44754#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {44754#true} is VALID [2018-11-23 12:47:40,559 INFO L273 TraceCheckUtils]: 13: Hoare triple {44754#true} assume !false; {44754#true} is VALID [2018-11-23 12:47:40,559 INFO L273 TraceCheckUtils]: 14: Hoare triple {44754#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,559 INFO L273 TraceCheckUtils]: 15: Hoare triple {44754#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,559 INFO L273 TraceCheckUtils]: 16: Hoare triple {44754#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,560 INFO L273 TraceCheckUtils]: 17: Hoare triple {44754#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,560 INFO L273 TraceCheckUtils]: 18: Hoare triple {44754#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,560 INFO L273 TraceCheckUtils]: 19: Hoare triple {44754#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,560 INFO L273 TraceCheckUtils]: 20: Hoare triple {44754#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,560 INFO L273 TraceCheckUtils]: 21: Hoare triple {44754#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,560 INFO L273 TraceCheckUtils]: 22: Hoare triple {44754#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,561 INFO L273 TraceCheckUtils]: 23: Hoare triple {44754#true} assume 8464 == #t~mem27;havoc #t~mem27; {44754#true} is VALID [2018-11-23 12:47:40,561 INFO L273 TraceCheckUtils]: 24: Hoare triple {44754#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {44754#true} is VALID [2018-11-23 12:47:40,561 INFO L273 TraceCheckUtils]: 25: Hoare triple {44754#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {44754#true} is VALID [2018-11-23 12:47:40,561 INFO L273 TraceCheckUtils]: 26: Hoare triple {44754#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,561 INFO L273 TraceCheckUtils]: 27: Hoare triple {44754#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,561 INFO L273 TraceCheckUtils]: 28: Hoare triple {44754#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {44754#true} is VALID [2018-11-23 12:47:40,562 INFO L273 TraceCheckUtils]: 29: Hoare triple {44754#true} ~skip~0 := 0; {44754#true} is VALID [2018-11-23 12:47:40,562 INFO L273 TraceCheckUtils]: 30: Hoare triple {44754#true} assume !false; {44754#true} is VALID [2018-11-23 12:47:40,562 INFO L273 TraceCheckUtils]: 31: Hoare triple {44754#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,562 INFO L273 TraceCheckUtils]: 32: Hoare triple {44754#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,562 INFO L273 TraceCheckUtils]: 33: Hoare triple {44754#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,563 INFO L273 TraceCheckUtils]: 34: Hoare triple {44754#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,563 INFO L273 TraceCheckUtils]: 35: Hoare triple {44754#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,563 INFO L273 TraceCheckUtils]: 36: Hoare triple {44754#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,563 INFO L273 TraceCheckUtils]: 37: Hoare triple {44754#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,563 INFO L273 TraceCheckUtils]: 38: Hoare triple {44754#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,564 INFO L273 TraceCheckUtils]: 39: Hoare triple {44754#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,564 INFO L273 TraceCheckUtils]: 40: Hoare triple {44754#true} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,564 INFO L273 TraceCheckUtils]: 41: Hoare triple {44754#true} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,564 INFO L273 TraceCheckUtils]: 42: Hoare triple {44754#true} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,564 INFO L273 TraceCheckUtils]: 43: Hoare triple {44754#true} assume 8496 == #t~mem30;havoc #t~mem30; {44754#true} is VALID [2018-11-23 12:47:40,564 INFO L273 TraceCheckUtils]: 44: Hoare triple {44754#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {44754#true} is VALID [2018-11-23 12:47:40,565 INFO L273 TraceCheckUtils]: 45: Hoare triple {44754#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {44754#true} is VALID [2018-11-23 12:47:40,565 INFO L273 TraceCheckUtils]: 46: Hoare triple {44754#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {44754#true} is VALID [2018-11-23 12:47:40,567 INFO L273 TraceCheckUtils]: 47: Hoare triple {44754#true} assume 0 != #t~mem68;havoc #t~mem68;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:40,568 INFO L273 TraceCheckUtils]: 48: Hoare triple {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:40,568 INFO L273 TraceCheckUtils]: 49: Hoare triple {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:40,568 INFO L273 TraceCheckUtils]: 50: Hoare triple {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:40,569 INFO L273 TraceCheckUtils]: 51: Hoare triple {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:40,569 INFO L273 TraceCheckUtils]: 52: Hoare triple {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:40,569 INFO L273 TraceCheckUtils]: 53: Hoare triple {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:40,570 INFO L273 TraceCheckUtils]: 54: Hoare triple {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:40,570 INFO L273 TraceCheckUtils]: 55: Hoare triple {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:40,571 INFO L273 TraceCheckUtils]: 56: Hoare triple {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:40,571 INFO L273 TraceCheckUtils]: 57: Hoare triple {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:40,572 INFO L273 TraceCheckUtils]: 58: Hoare triple {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:40,572 INFO L273 TraceCheckUtils]: 59: Hoare triple {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:40,573 INFO L273 TraceCheckUtils]: 60: Hoare triple {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:40,573 INFO L273 TraceCheckUtils]: 61: Hoare triple {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:40,574 INFO L273 TraceCheckUtils]: 62: Hoare triple {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:40,574 INFO L273 TraceCheckUtils]: 63: Hoare triple {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:40,575 INFO L273 TraceCheckUtils]: 64: Hoare triple {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:40,575 INFO L273 TraceCheckUtils]: 65: Hoare triple {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:40,576 INFO L273 TraceCheckUtils]: 66: Hoare triple {44756#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {44757#(= 8656 |ssl3_accept_#t~mem32|)} is VALID [2018-11-23 12:47:40,577 INFO L273 TraceCheckUtils]: 67: Hoare triple {44757#(= 8656 |ssl3_accept_#t~mem32|)} assume 8512 == #t~mem32;havoc #t~mem32; {44755#false} is VALID [2018-11-23 12:47:40,577 INFO L273 TraceCheckUtils]: 68: Hoare triple {44755#false} call #t~mem69.base, #t~mem69.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem70.base, #t~mem70.offset := read~$Pointer$(#t~mem69.base, 836 + #t~mem69.offset, 4);call #t~mem71 := read~int(#t~mem70.base, 12 + #t~mem70.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,577 INFO L273 TraceCheckUtils]: 69: Hoare triple {44755#false} assume 0 != ~bitwiseAnd(#t~mem71, 256) % 4294967296;havoc #t~mem69.base, #t~mem69.offset;havoc #t~mem70.base, #t~mem70.offset;havoc #t~mem71;~skip~0 := 1; {44755#false} is VALID [2018-11-23 12:47:40,578 INFO L273 TraceCheckUtils]: 70: Hoare triple {44755#false} call write~int(8528, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,578 INFO L273 TraceCheckUtils]: 71: Hoare triple {44755#false} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,578 INFO L273 TraceCheckUtils]: 72: Hoare triple {44755#false} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {44755#false} is VALID [2018-11-23 12:47:40,578 INFO L273 TraceCheckUtils]: 73: Hoare triple {44755#false} ~skip~0 := 0; {44755#false} is VALID [2018-11-23 12:47:40,578 INFO L273 TraceCheckUtils]: 74: Hoare triple {44755#false} assume !false; {44755#false} is VALID [2018-11-23 12:47:40,579 INFO L273 TraceCheckUtils]: 75: Hoare triple {44755#false} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,579 INFO L273 TraceCheckUtils]: 76: Hoare triple {44755#false} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,579 INFO L273 TraceCheckUtils]: 77: Hoare triple {44755#false} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,579 INFO L273 TraceCheckUtils]: 78: Hoare triple {44755#false} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,579 INFO L273 TraceCheckUtils]: 79: Hoare triple {44755#false} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,580 INFO L273 TraceCheckUtils]: 80: Hoare triple {44755#false} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,580 INFO L273 TraceCheckUtils]: 81: Hoare triple {44755#false} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,580 INFO L273 TraceCheckUtils]: 82: Hoare triple {44755#false} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,580 INFO L273 TraceCheckUtils]: 83: Hoare triple {44755#false} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,580 INFO L273 TraceCheckUtils]: 84: Hoare triple {44755#false} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,580 INFO L273 TraceCheckUtils]: 85: Hoare triple {44755#false} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,580 INFO L273 TraceCheckUtils]: 86: Hoare triple {44755#false} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,581 INFO L273 TraceCheckUtils]: 87: Hoare triple {44755#false} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,581 INFO L273 TraceCheckUtils]: 88: Hoare triple {44755#false} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,581 INFO L273 TraceCheckUtils]: 89: Hoare triple {44755#false} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,581 INFO L273 TraceCheckUtils]: 90: Hoare triple {44755#false} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,581 INFO L273 TraceCheckUtils]: 91: Hoare triple {44755#false} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,581 INFO L273 TraceCheckUtils]: 92: Hoare triple {44755#false} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,581 INFO L273 TraceCheckUtils]: 93: Hoare triple {44755#false} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,581 INFO L273 TraceCheckUtils]: 94: Hoare triple {44755#false} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,581 INFO L273 TraceCheckUtils]: 95: Hoare triple {44755#false} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,582 INFO L273 TraceCheckUtils]: 96: Hoare triple {44755#false} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,582 INFO L273 TraceCheckUtils]: 97: Hoare triple {44755#false} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,582 INFO L273 TraceCheckUtils]: 98: Hoare triple {44755#false} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,582 INFO L273 TraceCheckUtils]: 99: Hoare triple {44755#false} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,582 INFO L273 TraceCheckUtils]: 100: Hoare triple {44755#false} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,582 INFO L273 TraceCheckUtils]: 101: Hoare triple {44755#false} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,582 INFO L273 TraceCheckUtils]: 102: Hoare triple {44755#false} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,582 INFO L273 TraceCheckUtils]: 103: Hoare triple {44755#false} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,583 INFO L273 TraceCheckUtils]: 104: Hoare triple {44755#false} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,583 INFO L273 TraceCheckUtils]: 105: Hoare triple {44755#false} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,583 INFO L273 TraceCheckUtils]: 106: Hoare triple {44755#false} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,583 INFO L273 TraceCheckUtils]: 107: Hoare triple {44755#false} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {44755#false} is VALID [2018-11-23 12:47:40,583 INFO L273 TraceCheckUtils]: 108: Hoare triple {44755#false} assume 8672 == #t~mem51;havoc #t~mem51; {44755#false} is VALID [2018-11-23 12:47:40,583 INFO L273 TraceCheckUtils]: 109: Hoare triple {44755#false} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {44755#false} is VALID [2018-11-23 12:47:40,583 INFO L273 TraceCheckUtils]: 110: Hoare triple {44755#false} assume 4 == ~blastFlag~0; {44755#false} is VALID [2018-11-23 12:47:40,583 INFO L273 TraceCheckUtils]: 111: Hoare triple {44755#false} assume !false; {44755#false} is VALID [2018-11-23 12:47:40,592 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 75 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:40,593 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:40,593 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:40,593 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 112 [2018-11-23 12:47:40,594 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:40,594 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:40,699 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 102 edges. 102 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:40,699 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:40,699 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:40,699 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:40,700 INFO L87 Difference]: Start difference. First operand 263 states and 390 transitions. Second operand 4 states. [2018-11-23 12:47:42,215 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:42,216 INFO L93 Difference]: Finished difference Result 551 states and 818 transitions. [2018-11-23 12:47:42,216 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:42,216 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 112 [2018-11-23 12:47:42,216 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:42,216 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:42,218 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 532 transitions. [2018-11-23 12:47:42,218 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:42,220 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 532 transitions. [2018-11-23 12:47:42,220 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 532 transitions. [2018-11-23 12:47:42,742 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 532 edges. 532 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:42,750 INFO L225 Difference]: With dead ends: 551 [2018-11-23 12:47:42,750 INFO L226 Difference]: Without dead ends: 313 [2018-11-23 12:47:42,751 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:42,751 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 313 states. [2018-11-23 12:47:42,795 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 313 to 263. [2018-11-23 12:47:42,796 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:42,796 INFO L82 GeneralOperation]: Start isEquivalent. First operand 313 states. Second operand 263 states. [2018-11-23 12:47:42,796 INFO L74 IsIncluded]: Start isIncluded. First operand 313 states. Second operand 263 states. [2018-11-23 12:47:42,796 INFO L87 Difference]: Start difference. First operand 313 states. Second operand 263 states. [2018-11-23 12:47:42,802 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:42,803 INFO L93 Difference]: Finished difference Result 313 states and 455 transitions. [2018-11-23 12:47:42,803 INFO L276 IsEmpty]: Start isEmpty. Operand 313 states and 455 transitions. [2018-11-23 12:47:42,803 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:42,803 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:42,803 INFO L74 IsIncluded]: Start isIncluded. First operand 263 states. Second operand 313 states. [2018-11-23 12:47:42,803 INFO L87 Difference]: Start difference. First operand 263 states. Second operand 313 states. [2018-11-23 12:47:42,808 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:42,809 INFO L93 Difference]: Finished difference Result 313 states and 455 transitions. [2018-11-23 12:47:42,809 INFO L276 IsEmpty]: Start isEmpty. Operand 313 states and 455 transitions. [2018-11-23 12:47:42,809 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:42,809 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:42,809 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:42,809 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:42,809 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 12:47:42,813 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 389 transitions. [2018-11-23 12:47:42,813 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 389 transitions. Word has length 112 [2018-11-23 12:47:42,814 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:42,814 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 389 transitions. [2018-11-23 12:47:42,814 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:42,814 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 389 transitions. [2018-11-23 12:47:42,814 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2018-11-23 12:47:42,815 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:42,815 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:42,815 INFO L423 AbstractCegarLoop]: === Iteration 38 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:42,815 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:42,815 INFO L82 PathProgramCache]: Analyzing trace with hash -872494953, now seen corresponding path program 1 times [2018-11-23 12:47:42,815 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:42,816 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:42,816 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:42,817 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:42,817 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:42,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:42,955 INFO L256 TraceCheckUtils]: 0: Hoare triple {46328#true} call ULTIMATE.init(); {46328#true} is VALID [2018-11-23 12:47:42,955 INFO L273 TraceCheckUtils]: 1: Hoare triple {46328#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,955 INFO L273 TraceCheckUtils]: 2: Hoare triple {46328#true} assume true; {46328#true} is VALID [2018-11-23 12:47:42,955 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {46328#true} {46328#true} #607#return; {46328#true} is VALID [2018-11-23 12:47:42,955 INFO L256 TraceCheckUtils]: 4: Hoare triple {46328#true} call #t~ret139 := main(); {46328#true} is VALID [2018-11-23 12:47:42,955 INFO L273 TraceCheckUtils]: 5: Hoare triple {46328#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,956 INFO L256 TraceCheckUtils]: 6: Hoare triple {46328#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {46328#true} is VALID [2018-11-23 12:47:42,956 INFO L273 TraceCheckUtils]: 7: Hoare triple {46328#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,956 INFO L273 TraceCheckUtils]: 8: Hoare triple {46328#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {46328#true} is VALID [2018-11-23 12:47:42,956 INFO L273 TraceCheckUtils]: 9: Hoare triple {46328#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {46328#true} is VALID [2018-11-23 12:47:42,956 INFO L273 TraceCheckUtils]: 10: Hoare triple {46328#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {46328#true} is VALID [2018-11-23 12:47:42,956 INFO L273 TraceCheckUtils]: 11: Hoare triple {46328#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,957 INFO L273 TraceCheckUtils]: 12: Hoare triple {46328#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {46328#true} is VALID [2018-11-23 12:47:42,957 INFO L273 TraceCheckUtils]: 13: Hoare triple {46328#true} assume !false; {46328#true} is VALID [2018-11-23 12:47:42,957 INFO L273 TraceCheckUtils]: 14: Hoare triple {46328#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,957 INFO L273 TraceCheckUtils]: 15: Hoare triple {46328#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,957 INFO L273 TraceCheckUtils]: 16: Hoare triple {46328#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,957 INFO L273 TraceCheckUtils]: 17: Hoare triple {46328#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,958 INFO L273 TraceCheckUtils]: 18: Hoare triple {46328#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,958 INFO L273 TraceCheckUtils]: 19: Hoare triple {46328#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,958 INFO L273 TraceCheckUtils]: 20: Hoare triple {46328#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,958 INFO L273 TraceCheckUtils]: 21: Hoare triple {46328#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,958 INFO L273 TraceCheckUtils]: 22: Hoare triple {46328#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,958 INFO L273 TraceCheckUtils]: 23: Hoare triple {46328#true} assume 8464 == #t~mem27;havoc #t~mem27; {46328#true} is VALID [2018-11-23 12:47:42,959 INFO L273 TraceCheckUtils]: 24: Hoare triple {46328#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {46328#true} is VALID [2018-11-23 12:47:42,959 INFO L273 TraceCheckUtils]: 25: Hoare triple {46328#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {46328#true} is VALID [2018-11-23 12:47:42,959 INFO L273 TraceCheckUtils]: 26: Hoare triple {46328#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,959 INFO L273 TraceCheckUtils]: 27: Hoare triple {46328#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,959 INFO L273 TraceCheckUtils]: 28: Hoare triple {46328#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {46328#true} is VALID [2018-11-23 12:47:42,959 INFO L273 TraceCheckUtils]: 29: Hoare triple {46328#true} ~skip~0 := 0; {46328#true} is VALID [2018-11-23 12:47:42,960 INFO L273 TraceCheckUtils]: 30: Hoare triple {46328#true} assume !false; {46328#true} is VALID [2018-11-23 12:47:42,960 INFO L273 TraceCheckUtils]: 31: Hoare triple {46328#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,960 INFO L273 TraceCheckUtils]: 32: Hoare triple {46328#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,960 INFO L273 TraceCheckUtils]: 33: Hoare triple {46328#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,960 INFO L273 TraceCheckUtils]: 34: Hoare triple {46328#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,961 INFO L273 TraceCheckUtils]: 35: Hoare triple {46328#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,961 INFO L273 TraceCheckUtils]: 36: Hoare triple {46328#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,961 INFO L273 TraceCheckUtils]: 37: Hoare triple {46328#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,961 INFO L273 TraceCheckUtils]: 38: Hoare triple {46328#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,961 INFO L273 TraceCheckUtils]: 39: Hoare triple {46328#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,961 INFO L273 TraceCheckUtils]: 40: Hoare triple {46328#true} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,962 INFO L273 TraceCheckUtils]: 41: Hoare triple {46328#true} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,962 INFO L273 TraceCheckUtils]: 42: Hoare triple {46328#true} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {46328#true} is VALID [2018-11-23 12:47:42,962 INFO L273 TraceCheckUtils]: 43: Hoare triple {46328#true} assume 8496 == #t~mem30;havoc #t~mem30; {46328#true} is VALID [2018-11-23 12:47:42,962 INFO L273 TraceCheckUtils]: 44: Hoare triple {46328#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {46328#true} is VALID [2018-11-23 12:47:42,976 INFO L273 TraceCheckUtils]: 45: Hoare triple {46328#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:42,984 INFO L273 TraceCheckUtils]: 46: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:42,998 INFO L273 TraceCheckUtils]: 47: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(0 != #t~mem68);havoc #t~mem68;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,006 INFO L273 TraceCheckUtils]: 48: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,020 INFO L273 TraceCheckUtils]: 49: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,028 INFO L273 TraceCheckUtils]: 50: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,041 INFO L273 TraceCheckUtils]: 51: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} ~skip~0 := 0; {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,054 INFO L273 TraceCheckUtils]: 52: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !false; {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,066 INFO L273 TraceCheckUtils]: 53: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,079 INFO L273 TraceCheckUtils]: 54: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,091 INFO L273 TraceCheckUtils]: 55: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,104 INFO L273 TraceCheckUtils]: 56: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,116 INFO L273 TraceCheckUtils]: 57: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,129 INFO L273 TraceCheckUtils]: 58: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,143 INFO L273 TraceCheckUtils]: 59: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,155 INFO L273 TraceCheckUtils]: 60: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,164 INFO L273 TraceCheckUtils]: 61: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,177 INFO L273 TraceCheckUtils]: 62: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,189 INFO L273 TraceCheckUtils]: 63: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,202 INFO L273 TraceCheckUtils]: 64: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,216 INFO L273 TraceCheckUtils]: 65: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,225 INFO L273 TraceCheckUtils]: 66: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,237 INFO L273 TraceCheckUtils]: 67: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume 8512 == #t~mem32;havoc #t~mem32; {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,250 INFO L273 TraceCheckUtils]: 68: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem69.base, #t~mem69.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem70.base, #t~mem70.offset := read~$Pointer$(#t~mem69.base, 836 + #t~mem69.offset, 4);call #t~mem71 := read~int(#t~mem70.base, 12 + #t~mem70.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,262 INFO L273 TraceCheckUtils]: 69: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume 0 != ~bitwiseAnd(#t~mem71, 256) % 4294967296;havoc #t~mem69.base, #t~mem69.offset;havoc #t~mem70.base, #t~mem70.offset;havoc #t~mem71;~skip~0 := 1; {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,276 INFO L273 TraceCheckUtils]: 70: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} call write~int(8528, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,283 INFO L273 TraceCheckUtils]: 71: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,286 INFO L273 TraceCheckUtils]: 72: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,289 INFO L273 TraceCheckUtils]: 73: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} ~skip~0 := 0; {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,289 INFO L273 TraceCheckUtils]: 74: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !false; {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,292 INFO L273 TraceCheckUtils]: 75: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,292 INFO L273 TraceCheckUtils]: 76: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,292 INFO L273 TraceCheckUtils]: 77: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,293 INFO L273 TraceCheckUtils]: 78: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,293 INFO L273 TraceCheckUtils]: 79: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,293 INFO L273 TraceCheckUtils]: 80: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,293 INFO L273 TraceCheckUtils]: 81: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,294 INFO L273 TraceCheckUtils]: 82: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,294 INFO L273 TraceCheckUtils]: 83: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,294 INFO L273 TraceCheckUtils]: 84: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,295 INFO L273 TraceCheckUtils]: 85: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,295 INFO L273 TraceCheckUtils]: 86: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,295 INFO L273 TraceCheckUtils]: 87: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,295 INFO L273 TraceCheckUtils]: 88: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,296 INFO L273 TraceCheckUtils]: 89: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,296 INFO L273 TraceCheckUtils]: 90: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,297 INFO L273 TraceCheckUtils]: 91: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,297 INFO L273 TraceCheckUtils]: 92: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,298 INFO L273 TraceCheckUtils]: 93: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,298 INFO L273 TraceCheckUtils]: 94: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,298 INFO L273 TraceCheckUtils]: 95: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,299 INFO L273 TraceCheckUtils]: 96: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,299 INFO L273 TraceCheckUtils]: 97: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,300 INFO L273 TraceCheckUtils]: 98: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,300 INFO L273 TraceCheckUtils]: 99: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,301 INFO L273 TraceCheckUtils]: 100: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,301 INFO L273 TraceCheckUtils]: 101: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,302 INFO L273 TraceCheckUtils]: 102: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,302 INFO L273 TraceCheckUtils]: 103: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,303 INFO L273 TraceCheckUtils]: 104: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,303 INFO L273 TraceCheckUtils]: 105: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,304 INFO L273 TraceCheckUtils]: 106: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,304 INFO L273 TraceCheckUtils]: 107: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,305 INFO L273 TraceCheckUtils]: 108: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume 8672 == #t~mem51;havoc #t~mem51; {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,305 INFO L273 TraceCheckUtils]: 109: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {46330#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:47:43,306 INFO L273 TraceCheckUtils]: 110: Hoare triple {46330#(<= ssl3_accept_~blastFlag~0 2)} assume 4 == ~blastFlag~0; {46329#false} is VALID [2018-11-23 12:47:43,306 INFO L273 TraceCheckUtils]: 111: Hoare triple {46329#false} assume !false; {46329#false} is VALID [2018-11-23 12:47:43,314 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 56 proven. 0 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2018-11-23 12:47:43,314 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:43,314 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:47:43,315 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 112 [2018-11-23 12:47:43,315 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:43,315 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 12:47:43,392 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 84 edges. 84 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:43,393 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:47:43,393 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:47:43,393 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:47:43,393 INFO L87 Difference]: Start difference. First operand 263 states and 389 transitions. Second operand 3 states. [2018-11-23 12:47:44,060 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:44,060 INFO L93 Difference]: Finished difference Result 737 states and 1110 transitions. [2018-11-23 12:47:44,060 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:47:44,060 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 112 [2018-11-23 12:47:44,060 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:44,060 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:47:44,062 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 583 transitions. [2018-11-23 12:47:44,062 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:47:44,064 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 583 transitions. [2018-11-23 12:47:44,064 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 583 transitions. [2018-11-23 12:47:44,618 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 583 edges. 583 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:44,636 INFO L225 Difference]: With dead ends: 737 [2018-11-23 12:47:44,636 INFO L226 Difference]: Without dead ends: 499 [2018-11-23 12:47:44,637 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:47:44,637 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 499 states. [2018-11-23 12:47:44,769 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 499 to 499. [2018-11-23 12:47:44,769 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:44,770 INFO L82 GeneralOperation]: Start isEquivalent. First operand 499 states. Second operand 499 states. [2018-11-23 12:47:44,770 INFO L74 IsIncluded]: Start isIncluded. First operand 499 states. Second operand 499 states. [2018-11-23 12:47:44,770 INFO L87 Difference]: Start difference. First operand 499 states. Second operand 499 states. [2018-11-23 12:47:44,782 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:44,782 INFO L93 Difference]: Finished difference Result 499 states and 746 transitions. [2018-11-23 12:47:44,783 INFO L276 IsEmpty]: Start isEmpty. Operand 499 states and 746 transitions. [2018-11-23 12:47:44,783 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:44,783 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:44,783 INFO L74 IsIncluded]: Start isIncluded. First operand 499 states. Second operand 499 states. [2018-11-23 12:47:44,783 INFO L87 Difference]: Start difference. First operand 499 states. Second operand 499 states. [2018-11-23 12:47:44,795 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:44,795 INFO L93 Difference]: Finished difference Result 499 states and 746 transitions. [2018-11-23 12:47:44,795 INFO L276 IsEmpty]: Start isEmpty. Operand 499 states and 746 transitions. [2018-11-23 12:47:44,796 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:44,796 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:44,796 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:44,796 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:44,796 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 499 states. [2018-11-23 12:47:44,808 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 499 states to 499 states and 746 transitions. [2018-11-23 12:47:44,808 INFO L78 Accepts]: Start accepts. Automaton has 499 states and 746 transitions. Word has length 112 [2018-11-23 12:47:44,808 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:44,808 INFO L480 AbstractCegarLoop]: Abstraction has 499 states and 746 transitions. [2018-11-23 12:47:44,808 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:47:44,808 INFO L276 IsEmpty]: Start isEmpty. Operand 499 states and 746 transitions. [2018-11-23 12:47:44,809 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 132 [2018-11-23 12:47:44,809 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:44,809 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:44,809 INFO L423 AbstractCegarLoop]: === Iteration 39 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:44,809 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:44,810 INFO L82 PathProgramCache]: Analyzing trace with hash 398999817, now seen corresponding path program 1 times [2018-11-23 12:47:44,810 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:44,810 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:44,810 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:44,811 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:44,811 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:44,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:44,982 INFO L256 TraceCheckUtils]: 0: Hoare triple {48739#true} call ULTIMATE.init(); {48739#true} is VALID [2018-11-23 12:47:44,982 INFO L273 TraceCheckUtils]: 1: Hoare triple {48739#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,982 INFO L273 TraceCheckUtils]: 2: Hoare triple {48739#true} assume true; {48739#true} is VALID [2018-11-23 12:47:44,982 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {48739#true} {48739#true} #607#return; {48739#true} is VALID [2018-11-23 12:47:44,982 INFO L256 TraceCheckUtils]: 4: Hoare triple {48739#true} call #t~ret139 := main(); {48739#true} is VALID [2018-11-23 12:47:44,982 INFO L273 TraceCheckUtils]: 5: Hoare triple {48739#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,983 INFO L256 TraceCheckUtils]: 6: Hoare triple {48739#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {48739#true} is VALID [2018-11-23 12:47:44,983 INFO L273 TraceCheckUtils]: 7: Hoare triple {48739#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,983 INFO L273 TraceCheckUtils]: 8: Hoare triple {48739#true} assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; {48739#true} is VALID [2018-11-23 12:47:44,983 INFO L273 TraceCheckUtils]: 9: Hoare triple {48739#true} call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; {48739#true} is VALID [2018-11-23 12:47:44,983 INFO L273 TraceCheckUtils]: 10: Hoare triple {48739#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {48739#true} is VALID [2018-11-23 12:47:44,983 INFO L273 TraceCheckUtils]: 11: Hoare triple {48739#true} call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,983 INFO L273 TraceCheckUtils]: 12: Hoare triple {48739#true} assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; {48739#true} is VALID [2018-11-23 12:47:44,983 INFO L273 TraceCheckUtils]: 13: Hoare triple {48739#true} assume !false; {48739#true} is VALID [2018-11-23 12:47:44,984 INFO L273 TraceCheckUtils]: 14: Hoare triple {48739#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,984 INFO L273 TraceCheckUtils]: 15: Hoare triple {48739#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,984 INFO L273 TraceCheckUtils]: 16: Hoare triple {48739#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,984 INFO L273 TraceCheckUtils]: 17: Hoare triple {48739#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,984 INFO L273 TraceCheckUtils]: 18: Hoare triple {48739#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,984 INFO L273 TraceCheckUtils]: 19: Hoare triple {48739#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,984 INFO L273 TraceCheckUtils]: 20: Hoare triple {48739#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,984 INFO L273 TraceCheckUtils]: 21: Hoare triple {48739#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,985 INFO L273 TraceCheckUtils]: 22: Hoare triple {48739#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,985 INFO L273 TraceCheckUtils]: 23: Hoare triple {48739#true} assume 8464 == #t~mem27;havoc #t~mem27; {48739#true} is VALID [2018-11-23 12:47:44,985 INFO L273 TraceCheckUtils]: 24: Hoare triple {48739#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; {48739#true} is VALID [2018-11-23 12:47:44,985 INFO L273 TraceCheckUtils]: 25: Hoare triple {48739#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {48739#true} is VALID [2018-11-23 12:47:44,985 INFO L273 TraceCheckUtils]: 26: Hoare triple {48739#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,985 INFO L273 TraceCheckUtils]: 27: Hoare triple {48739#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,985 INFO L273 TraceCheckUtils]: 28: Hoare triple {48739#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {48739#true} is VALID [2018-11-23 12:47:44,985 INFO L273 TraceCheckUtils]: 29: Hoare triple {48739#true} ~skip~0 := 0; {48739#true} is VALID [2018-11-23 12:47:44,985 INFO L273 TraceCheckUtils]: 30: Hoare triple {48739#true} assume !false; {48739#true} is VALID [2018-11-23 12:47:44,986 INFO L273 TraceCheckUtils]: 31: Hoare triple {48739#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,986 INFO L273 TraceCheckUtils]: 32: Hoare triple {48739#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,986 INFO L273 TraceCheckUtils]: 33: Hoare triple {48739#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,986 INFO L273 TraceCheckUtils]: 34: Hoare triple {48739#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,986 INFO L273 TraceCheckUtils]: 35: Hoare triple {48739#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,986 INFO L273 TraceCheckUtils]: 36: Hoare triple {48739#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,986 INFO L273 TraceCheckUtils]: 37: Hoare triple {48739#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,986 INFO L273 TraceCheckUtils]: 38: Hoare triple {48739#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,986 INFO L273 TraceCheckUtils]: 39: Hoare triple {48739#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,987 INFO L273 TraceCheckUtils]: 40: Hoare triple {48739#true} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,987 INFO L273 TraceCheckUtils]: 41: Hoare triple {48739#true} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,987 INFO L273 TraceCheckUtils]: 42: Hoare triple {48739#true} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,987 INFO L273 TraceCheckUtils]: 43: Hoare triple {48739#true} assume 8496 == #t~mem30;havoc #t~mem30; {48739#true} is VALID [2018-11-23 12:47:44,987 INFO L273 TraceCheckUtils]: 44: Hoare triple {48739#true} assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {48739#true} is VALID [2018-11-23 12:47:44,987 INFO L273 TraceCheckUtils]: 45: Hoare triple {48739#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {48739#true} is VALID [2018-11-23 12:47:44,987 INFO L273 TraceCheckUtils]: 46: Hoare triple {48739#true} assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,987 INFO L273 TraceCheckUtils]: 47: Hoare triple {48739#true} assume 0 != #t~mem68;havoc #t~mem68;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,987 INFO L273 TraceCheckUtils]: 48: Hoare triple {48739#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,988 INFO L273 TraceCheckUtils]: 49: Hoare triple {48739#true} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,988 INFO L273 TraceCheckUtils]: 50: Hoare triple {48739#true} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {48739#true} is VALID [2018-11-23 12:47:44,988 INFO L273 TraceCheckUtils]: 51: Hoare triple {48739#true} ~skip~0 := 0; {48739#true} is VALID [2018-11-23 12:47:44,988 INFO L273 TraceCheckUtils]: 52: Hoare triple {48739#true} assume !false; {48739#true} is VALID [2018-11-23 12:47:44,988 INFO L273 TraceCheckUtils]: 53: Hoare triple {48739#true} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,988 INFO L273 TraceCheckUtils]: 54: Hoare triple {48739#true} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,988 INFO L273 TraceCheckUtils]: 55: Hoare triple {48739#true} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,988 INFO L273 TraceCheckUtils]: 56: Hoare triple {48739#true} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,988 INFO L273 TraceCheckUtils]: 57: Hoare triple {48739#true} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,989 INFO L273 TraceCheckUtils]: 58: Hoare triple {48739#true} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,989 INFO L273 TraceCheckUtils]: 59: Hoare triple {48739#true} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,989 INFO L273 TraceCheckUtils]: 60: Hoare triple {48739#true} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,989 INFO L273 TraceCheckUtils]: 61: Hoare triple {48739#true} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,989 INFO L273 TraceCheckUtils]: 62: Hoare triple {48739#true} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,989 INFO L273 TraceCheckUtils]: 63: Hoare triple {48739#true} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,989 INFO L273 TraceCheckUtils]: 64: Hoare triple {48739#true} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,989 INFO L273 TraceCheckUtils]: 65: Hoare triple {48739#true} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,989 INFO L273 TraceCheckUtils]: 66: Hoare triple {48739#true} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,990 INFO L273 TraceCheckUtils]: 67: Hoare triple {48739#true} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,990 INFO L273 TraceCheckUtils]: 68: Hoare triple {48739#true} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,990 INFO L273 TraceCheckUtils]: 69: Hoare triple {48739#true} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,990 INFO L273 TraceCheckUtils]: 70: Hoare triple {48739#true} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,990 INFO L273 TraceCheckUtils]: 71: Hoare triple {48739#true} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,990 INFO L273 TraceCheckUtils]: 72: Hoare triple {48739#true} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,990 INFO L273 TraceCheckUtils]: 73: Hoare triple {48739#true} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,990 INFO L273 TraceCheckUtils]: 74: Hoare triple {48739#true} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,990 INFO L273 TraceCheckUtils]: 75: Hoare triple {48739#true} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,991 INFO L273 TraceCheckUtils]: 76: Hoare triple {48739#true} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,991 INFO L273 TraceCheckUtils]: 77: Hoare triple {48739#true} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,991 INFO L273 TraceCheckUtils]: 78: Hoare triple {48739#true} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,991 INFO L273 TraceCheckUtils]: 79: Hoare triple {48739#true} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,991 INFO L273 TraceCheckUtils]: 80: Hoare triple {48739#true} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,991 INFO L273 TraceCheckUtils]: 81: Hoare triple {48739#true} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,991 INFO L273 TraceCheckUtils]: 82: Hoare triple {48739#true} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,991 INFO L273 TraceCheckUtils]: 83: Hoare triple {48739#true} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {48739#true} is VALID [2018-11-23 12:47:44,991 INFO L273 TraceCheckUtils]: 84: Hoare triple {48739#true} assume 8656 == #t~mem49;havoc #t~mem49; {48739#true} is VALID [2018-11-23 12:47:44,992 INFO L273 TraceCheckUtils]: 85: Hoare triple {48739#true} call #t~mem116.base, #t~mem116.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(#t~mem117.base, 836 + #t~mem117.offset, 4);call write~$Pointer$(#t~mem118.base, #t~mem118.offset, #t~mem116.base, 172 + #t~mem116.offset, 4);havoc #t~mem117.base, #t~mem117.offset;havoc #t~mem116.base, #t~mem116.offset;havoc #t~mem118.base, #t~mem118.offset;assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647;~tmp___9~0 := #t~nondet119;havoc #t~nondet119; {48739#true} is VALID [2018-11-23 12:47:44,992 INFO L273 TraceCheckUtils]: 86: Hoare triple {48739#true} assume !(0 == ~tmp___9~0);assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647;~ret~0 := #t~nondet120;havoc #t~nondet120; {48739#true} is VALID [2018-11-23 12:47:44,992 INFO L273 TraceCheckUtils]: 87: Hoare triple {48739#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 5; {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:44,992 INFO L273 TraceCheckUtils]: 88: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(~ret~0 <= 0);call write~int(8672, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~tmp___10~0 := #t~nondet121;havoc #t~nondet121; {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:44,994 INFO L273 TraceCheckUtils]: 89: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(0 == ~tmp___10~0); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:44,994 INFO L273 TraceCheckUtils]: 90: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:44,996 INFO L273 TraceCheckUtils]: 91: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:44,996 INFO L273 TraceCheckUtils]: 92: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} ~skip~0 := 0; {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:44,998 INFO L273 TraceCheckUtils]: 93: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !false; {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:44,998 INFO L273 TraceCheckUtils]: 94: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,000 INFO L273 TraceCheckUtils]: 95: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,000 INFO L273 TraceCheckUtils]: 96: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,002 INFO L273 TraceCheckUtils]: 97: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,002 INFO L273 TraceCheckUtils]: 98: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,004 INFO L273 TraceCheckUtils]: 99: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,004 INFO L273 TraceCheckUtils]: 100: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,004 INFO L273 TraceCheckUtils]: 101: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,005 INFO L273 TraceCheckUtils]: 102: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,005 INFO L273 TraceCheckUtils]: 103: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,005 INFO L273 TraceCheckUtils]: 104: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,005 INFO L273 TraceCheckUtils]: 105: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,006 INFO L273 TraceCheckUtils]: 106: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,006 INFO L273 TraceCheckUtils]: 107: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,006 INFO L273 TraceCheckUtils]: 108: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,007 INFO L273 TraceCheckUtils]: 109: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,007 INFO L273 TraceCheckUtils]: 110: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,008 INFO L273 TraceCheckUtils]: 111: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,008 INFO L273 TraceCheckUtils]: 112: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,009 INFO L273 TraceCheckUtils]: 113: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,009 INFO L273 TraceCheckUtils]: 114: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,010 INFO L273 TraceCheckUtils]: 115: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,010 INFO L273 TraceCheckUtils]: 116: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,011 INFO L273 TraceCheckUtils]: 117: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,011 INFO L273 TraceCheckUtils]: 118: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,012 INFO L273 TraceCheckUtils]: 119: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,012 INFO L273 TraceCheckUtils]: 120: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,013 INFO L273 TraceCheckUtils]: 121: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,013 INFO L273 TraceCheckUtils]: 122: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,014 INFO L273 TraceCheckUtils]: 123: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,014 INFO L273 TraceCheckUtils]: 124: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,015 INFO L273 TraceCheckUtils]: 125: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,015 INFO L273 TraceCheckUtils]: 126: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,016 INFO L273 TraceCheckUtils]: 127: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume 8672 == #t~mem51;havoc #t~mem51; {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,016 INFO L273 TraceCheckUtils]: 128: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; {48741#(<= 5 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:47:45,017 INFO L273 TraceCheckUtils]: 129: Hoare triple {48741#(<= 5 ssl3_accept_~blastFlag~0)} assume 4 == ~blastFlag~0; {48740#false} is VALID [2018-11-23 12:47:45,017 INFO L273 TraceCheckUtils]: 130: Hoare triple {48740#false} assume !false; {48740#false} is VALID [2018-11-23 12:47:45,026 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 12:47:45,026 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:45,026 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:47:45,026 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 131 [2018-11-23 12:47:45,026 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:45,027 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 12:47:45,124 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 105 edges. 105 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:45,124 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:47:45,124 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:47:45,125 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:47:45,125 INFO L87 Difference]: Start difference. First operand 499 states and 746 transitions. Second operand 3 states. [2018-11-23 12:47:45,896 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:45,896 INFO L93 Difference]: Finished difference Result 973 states and 1464 transitions. [2018-11-23 12:47:45,896 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:47:45,896 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 131 [2018-11-23 12:47:45,896 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:45,896 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:47:45,898 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 580 transitions. [2018-11-23 12:47:45,899 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:47:45,901 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 580 transitions. [2018-11-23 12:47:45,901 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 580 transitions. [2018-11-23 12:47:46,617 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 580 edges. 580 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:46,630 INFO L225 Difference]: With dead ends: 973 [2018-11-23 12:47:46,630 INFO L226 Difference]: Without dead ends: 499 [2018-11-23 12:47:46,631 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:47:46,631 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 499 states. [2018-11-23 12:47:46,853 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 499 to 499. [2018-11-23 12:47:46,854 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:46,854 INFO L82 GeneralOperation]: Start isEquivalent. First operand 499 states. Second operand 499 states. [2018-11-23 12:47:46,854 INFO L74 IsIncluded]: Start isIncluded. First operand 499 states. Second operand 499 states. [2018-11-23 12:47:46,854 INFO L87 Difference]: Start difference. First operand 499 states. Second operand 499 states. [2018-11-23 12:47:46,866 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:46,867 INFO L93 Difference]: Finished difference Result 499 states and 741 transitions. [2018-11-23 12:47:46,867 INFO L276 IsEmpty]: Start isEmpty. Operand 499 states and 741 transitions. [2018-11-23 12:47:46,867 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:46,867 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:46,867 INFO L74 IsIncluded]: Start isIncluded. First operand 499 states. Second operand 499 states. [2018-11-23 12:47:46,867 INFO L87 Difference]: Start difference. First operand 499 states. Second operand 499 states. [2018-11-23 12:47:46,880 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:46,880 INFO L93 Difference]: Finished difference Result 499 states and 741 transitions. [2018-11-23 12:47:46,880 INFO L276 IsEmpty]: Start isEmpty. Operand 499 states and 741 transitions. [2018-11-23 12:47:46,881 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:46,881 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:46,881 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:46,881 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:46,881 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 499 states. [2018-11-23 12:47:46,893 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 499 states to 499 states and 741 transitions. [2018-11-23 12:47:46,893 INFO L78 Accepts]: Start accepts. Automaton has 499 states and 741 transitions. Word has length 131 [2018-11-23 12:47:46,893 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:46,894 INFO L480 AbstractCegarLoop]: Abstraction has 499 states and 741 transitions. [2018-11-23 12:47:46,894 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:47:46,894 INFO L276 IsEmpty]: Start isEmpty. Operand 499 states and 741 transitions. [2018-11-23 12:47:46,894 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 133 [2018-11-23 12:47:46,894 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:46,895 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:46,895 INFO L423 AbstractCegarLoop]: === Iteration 40 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:46,895 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:46,895 INFO L82 PathProgramCache]: Analyzing trace with hash -515907609, now seen corresponding path program 1 times [2018-11-23 12:47:46,895 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:46,895 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:46,896 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:46,896 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:46,896 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:46,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 12:47:47,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 12:47:47,122 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=24604, |#NULL.offset|=24596, |old(#NULL.base)|=24604, |old(#NULL.offset)|=24596, |old(~#SSLv3_server_data~0.base)|=24589, |old(~#SSLv3_server_data~0.offset)|=24587, |old(~init~0)|=24608, |~#SSLv3_server_data~0.base|=24589, |~#SSLv3_server_data~0.offset|=24587, ~init~0=24608] [?] #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); VAL [|#NULL.base|=0, |#NULL.offset|=0, |old(#NULL.base)|=24604, |old(#NULL.offset)|=24596, |old(~#SSLv3_server_data~0.base)|=24589, |old(~#SSLv3_server_data~0.offset)|=24587, |old(~init~0)|=24608, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume true; VAL [|#NULL.base|=0, |#NULL.offset|=0, |old(#NULL.base)|=24604, |old(#NULL.offset)|=24596, |old(~#SSLv3_server_data~0.base)|=24589, |old(~#SSLv3_server_data~0.offset)|=24587, |old(~init~0)|=24608, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] RET #607#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); VAL [main_~s~0.base=24597, main_~s~0.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |main_#t~malloc3.base|=24597, |main_#t~malloc3.offset|=0, |main_#t~malloc4.base|=24601, |main_#t~malloc4.offset|=0, |main_#t~malloc5.base|=24610, |main_#t~malloc5.offset|=0, |main_#t~malloc6.base|=24579, |main_#t~malloc6.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=0, ssl3_accept_~cb~0.offset=0, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem14.base|=(- 1), |ssl3_accept_#t~mem14.offset|=2, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem17.base|=(- 2), |ssl3_accept_#t~mem17.offset|=3, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem19|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem20|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem21|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem22|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem23|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8464 == #t~mem27;havoc #t~mem27; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 == ~blastFlag~0;~blastFlag~0 := 1; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem128.base|=24601, |ssl3_accept_#t~mem128.offset|=0, |ssl3_accept_#t~mem129|=24616, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem19|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem20|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem21|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem22|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem23|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8496 == #t~mem30;havoc #t~mem30; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 1 == ~blastFlag~0;~blastFlag~0 := 2; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem68|=1, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 != #t~mem68;havoc #t~mem68;call write~int(8656, ~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem128.base|=24601, |ssl3_accept_#t~mem128.offset|=0, |ssl3_accept_#t~mem129|=24616, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem19|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem20|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem21|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem22|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem23|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem33|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem34|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem35|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem36|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem37|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem38|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem39|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem40|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem41|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem42|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem43|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem44|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem45|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem46|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem47|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem48|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem49|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8656 == #t~mem49;havoc #t~mem49; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem116.base, #t~mem116.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(#t~mem117.base, 836 + #t~mem117.offset, 4);call write~$Pointer$(#t~mem118.base, #t~mem118.offset, #t~mem116.base, 172 + #t~mem116.offset, 4);havoc #t~mem117.base, #t~mem117.offset;havoc #t~mem116.base, #t~mem116.offset;havoc #t~mem118.base, #t~mem118.offset;assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647;~tmp___9~0 := #t~nondet119;havoc #t~nondet119; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == ~tmp___9~0);assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647;~ret~0 := #t~nondet120;havoc #t~nondet120; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 2 == ~blastFlag~0;~blastFlag~0 := 5; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);call write~int(8672, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~tmp___10~0 := #t~nondet121;havoc #t~nondet121; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == ~tmp___10~0); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem128.base|=24601, |ssl3_accept_#t~mem128.offset|=0, |ssl3_accept_#t~mem129|=24616, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem129);havoc #t~mem129;havoc #t~mem128.base, #t~mem128.offset; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem19|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem20|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem21|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem22|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem23|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem33|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem34|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem35|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem36|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem37|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem38|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem39|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem40|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem41|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem42|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem43|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem44|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem45|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem46|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem47|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem48|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem49|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem50|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem51|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8672 == #t~mem51;havoc #t~mem51; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(4 == ~blastFlag~0); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 5 == ~blastFlag~0; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] CALL call ULTIMATE.init(); VAL [#NULL.base=24604, #NULL.offset=24596, old(#NULL.base)=24604, old(#NULL.offset)=24596, old(~#SSLv3_server_data~0.base)=24589, old(~#SSLv3_server_data~0.offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0.base=24589, ~#SSLv3_server_data~0.offset=24587, ~init~0=24608] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L1042] ~init~0 := 1; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100); [L1043] call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24604, old(#NULL.offset)=24596, old(~#SSLv3_server_data~0.base)=24589, old(~#SSLv3_server_data~0.offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24604, old(#NULL.offset)=24596, old(~#SSLv3_server_data~0.base)=24589, old(~#SSLv3_server_data~0.offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); [L1074] call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~malloc3.base=24597, #t~malloc3.offset=0, #t~malloc4.base=24601, #t~malloc4.offset=0, #t~malloc5.base=24610, #t~malloc5.offset=0, #t~malloc6.base=24579, #t~malloc6.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1, ~s~0.base=24597, ~s~0.offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1080-L1708] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1081] ~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset; [L1081] havoc #t~nondet8.base, #t~nondet8.offset; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0.base, ~cb~0.offset; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1107] call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4); [L1107] havoc #t~nondet13; [L1108] call write~int(8464, ~s.base, 52 + ~s.offset, 4); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0.base, ~cb~0.offset := 0, 0; [L1111] ~ret~0 := -1; [L1112] ~skip~0 := 0; [L1113] ~got_new_session~0 := 0; [L1114] call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem14.base=-1, #t~mem14.offset=2, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=0, ~cb~0.offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1114-L1118] assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296; [L1114] havoc #t~mem14.base, #t~mem14.offset; [L1115] call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); [L1115] ~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset; [L1115] havoc #t~mem15.base, #t~mem15.offset; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1119] call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4); [L1119] call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4); [L1119] havoc #t~mem16; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1120-L1128] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem17.base=-2, #t~mem17.offset=3, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129-L1133] assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296); [L1129] havoc #t~mem17.base, #t~mem17.offset; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162-L1656] assume 8464 == #t~mem27; [L1162] havoc #t~mem27; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1318] call write~int(0, ~s.base, 48 + ~s.offset, 4); [L1319] assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647; [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1320-L1324] assume 0 == ~blastFlag~0; [L1321] ~blastFlag~0 := 1; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1325-L1329] assume !(~ret~0 <= 0); [L1330] ~got_new_session~0 := 1; [L1331] call write~int(8496, ~s.base, 52 + ~s.offset, 4); [L1332] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1665] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=24601, #t~mem128.offset=0, #t~mem129=24616, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665-L1693] assume !(0 == #t~mem129); [L1665] havoc #t~mem129; [L1665] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162-L1656] assume !(8464 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165-L1655] assume !(8465 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168-L1654] assume !(8466 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171-L1653] assume 8496 == #t~mem30; [L1171] havoc #t~mem30; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1336] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1337-L1341] assume 1 == ~blastFlag~0; [L1338] ~blastFlag~0 := 2; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1342-L1346] assume !(~ret~0 <= 0); [L1347] call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem68=1, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1347-L1351] assume 0 != #t~mem68; [L1347] havoc #t~mem68; [L1348] call write~int(8656, ~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1352] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1665] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=24601, #t~mem128.offset=0, #t~mem129=24616, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665-L1693] assume !(0 == #t~mem129); [L1665] havoc #t~mem129; [L1665] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162-L1656] assume !(8464 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165-L1655] assume !(8465 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168-L1654] assume !(8466 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171-L1653] assume !(8496 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1174-L1652] assume !(8497 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1177-L1651] assume !(8512 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1180-L1650] assume !(8513 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1183-L1649] assume !(8528 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1186-L1648] assume !(8529 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1189-L1647] assume !(8544 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1192-L1646] assume !(8545 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1195-L1645] assume !(8560 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1198-L1644] assume !(8561 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1201-L1643] assume !(8448 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1204-L1642] assume !(8576 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem42=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1207-L1641] assume !(8577 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem43=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1210-L1640] assume !(8592 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem44=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1213-L1639] assume !(8593 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem45=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1216-L1638] assume !(8608 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem46=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1219-L1637] assume !(8609 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem47=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1222-L1636] assume !(8640 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem48=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1225-L1635] assume !(8641 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem49=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1228-L1634] assume 8656 == #t~mem49; [L1228] havoc #t~mem49; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1552] call #t~mem116.base, #t~mem116.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4); [L1552] call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1552] call #t~mem118.base, #t~mem118.offset := read~$Pointer$(#t~mem117.base, 836 + #t~mem117.offset, 4); [L1552] call write~$Pointer$(#t~mem118.base, #t~mem118.offset, #t~mem116.base, 172 + #t~mem116.offset, 4); [L1552] havoc #t~mem117.base, #t~mem117.offset; [L1552] havoc #t~mem116.base, #t~mem116.offset; [L1552] havoc #t~mem118.base, #t~mem118.offset; [L1553] assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554-L1559] assume !(0 == ~tmp___9~0); [L1560] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1561-L1565] assume 2 == ~blastFlag~0; [L1562] ~blastFlag~0 := 5; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1566-L1570] assume !(~ret~0 <= 0); [L1571] call write~int(8672, ~s.base, 52 + ~s.offset, 4); [L1572] call write~int(0, ~s.base, 64 + ~s.offset, 4); [L1573] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574-L1579] assume !(0 == ~tmp___10~0); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1665] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=24601, #t~mem128.offset=0, #t~mem129=24616, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665-L1693] assume !(0 == #t~mem129); [L1665] havoc #t~mem129; [L1665] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1162-L1656] assume !(8464 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1165-L1655] assume !(8465 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1168-L1654] assume !(8466 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1171-L1653] assume !(8496 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1174-L1652] assume !(8497 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1177-L1651] assume !(8512 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1180-L1650] assume !(8513 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1183-L1649] assume !(8528 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1186-L1648] assume !(8529 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1189-L1647] assume !(8544 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1192-L1646] assume !(8545 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1195-L1645] assume !(8560 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1198-L1644] assume !(8561 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1201-L1643] assume !(8448 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1204-L1642] assume !(8576 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem42=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1207-L1641] assume !(8577 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem43=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1210-L1640] assume !(8592 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem44=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1213-L1639] assume !(8593 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem45=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1216-L1638] assume !(8608 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem46=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1219-L1637] assume !(8609 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem47=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1222-L1636] assume !(8640 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem48=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1225-L1635] assume !(8641 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem49=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1228-L1634] assume !(8656 == #t~mem49); [L1228] havoc #t~mem49; [L1231] call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem50=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1231-L1633] assume !(8657 == #t~mem50); [L1231] havoc #t~mem50; [L1234] call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem51=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1234-L1632] assume 8672 == #t~mem51; [L1234] havoc #t~mem51; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647; [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584-L1592] assume !(4 == ~blastFlag~0); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1587-L1591] assume 5 == ~blastFlag~0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1706] assert false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL.base=24604, #NULL.offset=24596, old(#NULL.base)=24604, old(#NULL.offset)=24596, old(~#SSLv3_server_data~0.base)=24589, old(~#SSLv3_server_data~0.offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0.base=24589, ~#SSLv3_server_data~0.offset=24587, ~init~0=24608] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L1042] ~init~0 := 1; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100); [L1043] call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24604, old(#NULL.offset)=24596, old(~#SSLv3_server_data~0.base)=24589, old(~#SSLv3_server_data~0.offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24604, old(#NULL.offset)=24596, old(~#SSLv3_server_data~0.base)=24589, old(~#SSLv3_server_data~0.offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); [L1074] call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~malloc3.base=24597, #t~malloc3.offset=0, #t~malloc4.base=24601, #t~malloc4.offset=0, #t~malloc5.base=24610, #t~malloc5.offset=0, #t~malloc6.base=24579, #t~malloc6.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1, ~s~0.base=24597, ~s~0.offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1080-L1708] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1081] ~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset; [L1081] havoc #t~nondet8.base, #t~nondet8.offset; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0.base, ~cb~0.offset; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1107] call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4); [L1107] havoc #t~nondet13; [L1108] call write~int(8464, ~s.base, 52 + ~s.offset, 4); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0.base, ~cb~0.offset := 0, 0; [L1111] ~ret~0 := -1; [L1112] ~skip~0 := 0; [L1113] ~got_new_session~0 := 0; [L1114] call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem14.base=-1, #t~mem14.offset=2, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=0, ~cb~0.offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1114-L1118] assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296; [L1114] havoc #t~mem14.base, #t~mem14.offset; [L1115] call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); [L1115] ~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset; [L1115] havoc #t~mem15.base, #t~mem15.offset; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1119] call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4); [L1119] call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4); [L1119] havoc #t~mem16; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1120-L1128] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem17.base=-2, #t~mem17.offset=3, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129-L1133] assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296); [L1129] havoc #t~mem17.base, #t~mem17.offset; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162-L1656] assume 8464 == #t~mem27; [L1162] havoc #t~mem27; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1318] call write~int(0, ~s.base, 48 + ~s.offset, 4); [L1319] assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647; [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1320-L1324] assume 0 == ~blastFlag~0; [L1321] ~blastFlag~0 := 1; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1325-L1329] assume !(~ret~0 <= 0); [L1330] ~got_new_session~0 := 1; [L1331] call write~int(8496, ~s.base, 52 + ~s.offset, 4); [L1332] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1665] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=24601, #t~mem128.offset=0, #t~mem129=24616, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665-L1693] assume !(0 == #t~mem129); [L1665] havoc #t~mem129; [L1665] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162-L1656] assume !(8464 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165-L1655] assume !(8465 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168-L1654] assume !(8466 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171-L1653] assume 8496 == #t~mem30; [L1171] havoc #t~mem30; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1336] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1337-L1341] assume 1 == ~blastFlag~0; [L1338] ~blastFlag~0 := 2; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1342-L1346] assume !(~ret~0 <= 0); [L1347] call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem68=1, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1347-L1351] assume 0 != #t~mem68; [L1347] havoc #t~mem68; [L1348] call write~int(8656, ~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1352] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1665] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=24601, #t~mem128.offset=0, #t~mem129=24616, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665-L1693] assume !(0 == #t~mem129); [L1665] havoc #t~mem129; [L1665] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162-L1656] assume !(8464 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165-L1655] assume !(8465 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168-L1654] assume !(8466 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171-L1653] assume !(8496 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1174-L1652] assume !(8497 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1177-L1651] assume !(8512 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1180-L1650] assume !(8513 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1183-L1649] assume !(8528 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1186-L1648] assume !(8529 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1189-L1647] assume !(8544 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1192-L1646] assume !(8545 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1195-L1645] assume !(8560 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1198-L1644] assume !(8561 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1201-L1643] assume !(8448 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1204-L1642] assume !(8576 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem42=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1207-L1641] assume !(8577 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem43=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1210-L1640] assume !(8592 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem44=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1213-L1639] assume !(8593 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem45=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1216-L1638] assume !(8608 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem46=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1219-L1637] assume !(8609 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem47=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1222-L1636] assume !(8640 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem48=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1225-L1635] assume !(8641 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem49=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1228-L1634] assume 8656 == #t~mem49; [L1228] havoc #t~mem49; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1552] call #t~mem116.base, #t~mem116.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4); [L1552] call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1552] call #t~mem118.base, #t~mem118.offset := read~$Pointer$(#t~mem117.base, 836 + #t~mem117.offset, 4); [L1552] call write~$Pointer$(#t~mem118.base, #t~mem118.offset, #t~mem116.base, 172 + #t~mem116.offset, 4); [L1552] havoc #t~mem117.base, #t~mem117.offset; [L1552] havoc #t~mem116.base, #t~mem116.offset; [L1552] havoc #t~mem118.base, #t~mem118.offset; [L1553] assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554-L1559] assume !(0 == ~tmp___9~0); [L1560] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1561-L1565] assume 2 == ~blastFlag~0; [L1562] ~blastFlag~0 := 5; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1566-L1570] assume !(~ret~0 <= 0); [L1571] call write~int(8672, ~s.base, 52 + ~s.offset, 4); [L1572] call write~int(0, ~s.base, 64 + ~s.offset, 4); [L1573] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574-L1579] assume !(0 == ~tmp___10~0); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1665] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=24601, #t~mem128.offset=0, #t~mem129=24616, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665-L1693] assume !(0 == #t~mem129); [L1665] havoc #t~mem129; [L1665] havoc #t~mem128.base, #t~mem128.offset; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1162-L1656] assume !(8464 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1165-L1655] assume !(8465 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1168-L1654] assume !(8466 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1171-L1653] assume !(8496 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1174-L1652] assume !(8497 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1177-L1651] assume !(8512 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1180-L1650] assume !(8513 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1183-L1649] assume !(8528 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1186-L1648] assume !(8529 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1189-L1647] assume !(8544 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1192-L1646] assume !(8545 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1195-L1645] assume !(8560 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1198-L1644] assume !(8561 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1201-L1643] assume !(8448 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1204-L1642] assume !(8576 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem42=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1207-L1641] assume !(8577 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem43=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1210-L1640] assume !(8592 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem44=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1213-L1639] assume !(8593 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem45=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1216-L1638] assume !(8608 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem46=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1219-L1637] assume !(8609 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem47=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1222-L1636] assume !(8640 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem48=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1225-L1635] assume !(8641 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem49=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1228-L1634] assume !(8656 == #t~mem49); [L1228] havoc #t~mem49; [L1231] call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem50=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1231-L1633] assume !(8657 == #t~mem50); [L1231] havoc #t~mem50; [L1234] call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem51=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1234-L1632] assume 8672 == #t~mem51; [L1234] havoc #t~mem51; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647; [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584-L1592] assume !(4 == ~blastFlag~0); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1587-L1591] assume 5 == ~blastFlag~0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1706] assert false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24604, #NULL!offset=24596, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24589, ~#SSLv3_server_data~0!offset=24587, ~init~0=24608] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1074] FCALL call write~int(8464, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24597, #t~malloc3!offset=0, #t~malloc4!base=24601, #t~malloc4!offset=0, #t~malloc5!base=24610, #t~malloc5!offset=0, #t~malloc6!base=24579, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24597, ~s~0!offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1107] FCALL call write~int(#t~nondet13, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet13; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0, offset: 0 }; [L1111] ~ret~0 := -1; [L1112] ~skip~0 := 0; [L1113] ~got_new_session~0 := 0; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem14!base=-1, #t~mem14!offset=2, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1114] COND TRUE 0 != (#t~mem14!base + #t~mem14!offset) % 4294967296 [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1119] FCALL call #t~mem16 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] FCALL call write~int(1 + #t~mem16, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] havoc #t~mem16; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1120-L1128] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem17!base=-2, #t~mem17!offset=3, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] COND FALSE !(0 == (#t~mem17!base + #t~mem17!offset) % 4294967296) [L1129] havoc #t~mem17; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND TRUE 8464 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1318] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1319] assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647; [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1320] COND TRUE 0 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1325] COND FALSE !(~ret~0 <= 0) [L1330] ~got_new_session~0 := 1; [L1331] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1332] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND TRUE 8496 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1336] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1337] COND TRUE 1 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1342] COND FALSE !(~ret~0 <= 0) [L1347] FCALL call #t~mem68 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem68=1, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1347-L1351] COND TRUE 0 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~int(8656, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1352] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1228] COND TRUE 8656 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: 836 + #t~mem117!offset }, 4); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: 172 + #t~mem116!offset }, 4); [L1552] havoc #t~mem117; [L1552] havoc #t~mem116; [L1552] havoc #t~mem118; [L1553] assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554] COND FALSE !(0 == ~tmp___9~0) [L1560] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1561] COND TRUE 2 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1566] COND FALSE !(~ret~0 <= 0) [L1571] FCALL call write~int(8672, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1572] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1573] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574] COND FALSE !(0 == ~tmp___10~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1228] COND FALSE !(8656 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1231] COND FALSE !(8657 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1234] COND TRUE 8672 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647; [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584] COND FALSE !(4 == ~blastFlag~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1587] COND TRUE 5 == ~blastFlag~0 VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1706] assert false; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24604, #NULL!offset=24596, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24589, ~#SSLv3_server_data~0!offset=24587, ~init~0=24608] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1074] FCALL call write~int(8464, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24597, #t~malloc3!offset=0, #t~malloc4!base=24601, #t~malloc4!offset=0, #t~malloc5!base=24610, #t~malloc5!offset=0, #t~malloc6!base=24579, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24597, ~s~0!offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1107] FCALL call write~int(#t~nondet13, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet13; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0, offset: 0 }; [L1111] ~ret~0 := -1; [L1112] ~skip~0 := 0; [L1113] ~got_new_session~0 := 0; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem14!base=-1, #t~mem14!offset=2, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1114] COND TRUE 0 != (#t~mem14!base + #t~mem14!offset) % 4294967296 [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1119] FCALL call #t~mem16 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] FCALL call write~int(1 + #t~mem16, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] havoc #t~mem16; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1120-L1128] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem17!base=-2, #t~mem17!offset=3, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] COND FALSE !(0 == (#t~mem17!base + #t~mem17!offset) % 4294967296) [L1129] havoc #t~mem17; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND TRUE 8464 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1318] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1319] assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647; [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1320] COND TRUE 0 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1325] COND FALSE !(~ret~0 <= 0) [L1330] ~got_new_session~0 := 1; [L1331] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1332] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND TRUE 8496 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1336] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1337] COND TRUE 1 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1342] COND FALSE !(~ret~0 <= 0) [L1347] FCALL call #t~mem68 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem68=1, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1347-L1351] COND TRUE 0 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~int(8656, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1352] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1228] COND TRUE 8656 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: 836 + #t~mem117!offset }, 4); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: 172 + #t~mem116!offset }, 4); [L1552] havoc #t~mem117; [L1552] havoc #t~mem116; [L1552] havoc #t~mem118; [L1553] assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554] COND FALSE !(0 == ~tmp___9~0) [L1560] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1561] COND TRUE 2 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1566] COND FALSE !(~ret~0 <= 0) [L1571] FCALL call write~int(8672, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1572] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1573] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574] COND FALSE !(0 == ~tmp___10~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1228] COND FALSE !(8656 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1231] COND FALSE !(8657 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1234] COND TRUE 8672 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647; [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584] COND FALSE !(4 == ~blastFlag~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1587] COND TRUE 5 == ~blastFlag~0 VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1706] assert false; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24604, #NULL!offset=24596, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24589, ~#SSLv3_server_data~0!offset=24587, ~init~0=24608] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1074] FCALL call write~int(8464, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24597, #t~malloc3!offset=0, #t~malloc4!base=24601, #t~malloc4!offset=0, #t~malloc5!base=24610, #t~malloc5!offset=0, #t~malloc6!base=24579, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24597, ~s~0!offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1107] FCALL call write~int(#t~nondet13, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet13; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0, offset: 0 }; [L1111] ~ret~0 := -1; [L1112] ~skip~0 := 0; [L1113] ~got_new_session~0 := 0; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem14!base=-1, #t~mem14!offset=2, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1114] COND TRUE 0 != (#t~mem14!base + #t~mem14!offset) % 4294967296 [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1119] FCALL call #t~mem16 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] FCALL call write~int(1 + #t~mem16, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] havoc #t~mem16; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1120-L1128] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem17!base=-2, #t~mem17!offset=3, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] COND FALSE !(0 == (#t~mem17!base + #t~mem17!offset) % 4294967296) [L1129] havoc #t~mem17; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND TRUE 8464 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1318] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1319] assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647; [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1320] COND TRUE 0 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1325] COND FALSE !(~ret~0 <= 0) [L1330] ~got_new_session~0 := 1; [L1331] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1332] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND TRUE 8496 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1336] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1337] COND TRUE 1 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1342] COND FALSE !(~ret~0 <= 0) [L1347] FCALL call #t~mem68 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem68=1, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1347-L1351] COND TRUE 0 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~int(8656, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1352] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1228] COND TRUE 8656 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: 836 + #t~mem117!offset }, 4); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: 172 + #t~mem116!offset }, 4); [L1552] havoc #t~mem117; [L1552] havoc #t~mem116; [L1552] havoc #t~mem118; [L1553] assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554] COND FALSE !(0 == ~tmp___9~0) [L1560] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1561] COND TRUE 2 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1566] COND FALSE !(~ret~0 <= 0) [L1571] FCALL call write~int(8672, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1572] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1573] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574] COND FALSE !(0 == ~tmp___10~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1228] COND FALSE !(8656 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1231] COND FALSE !(8657 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1234] COND TRUE 8672 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647; [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584] COND FALSE !(4 == ~blastFlag~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1587] COND TRUE 5 == ~blastFlag~0 VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1706] assert false; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] ----- [2018-11-23 12:47:47,368 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 24589 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# [2018-11-23 12:47:47,369 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 24587 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24604, #NULL!offset=24596, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24589, ~#SSLv3_server_data~0!offset=24587, ~init~0=24608] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1074] FCALL call write~int(8464, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24597, #t~malloc3!offset=0, #t~malloc4!base=24601, #t~malloc4!offset=0, #t~malloc5!base=24610, #t~malloc5!offset=0, #t~malloc6!base=24579, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24597, ~s~0!offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1107] FCALL call write~int(#t~nondet13, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet13; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0, offset: 0 }; [L1111] ~ret~0 := -1; [L1112] ~skip~0 := 0; [L1113] ~got_new_session~0 := 0; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem14!base=-1, #t~mem14!offset=2, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1114] COND TRUE 0 != (#t~mem14!base + #t~mem14!offset) % 4294967296 [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1119] FCALL call #t~mem16 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] FCALL call write~int(1 + #t~mem16, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] havoc #t~mem16; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1120-L1128] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem17!base=-2, #t~mem17!offset=3, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] COND FALSE !(0 == (#t~mem17!base + #t~mem17!offset) % 4294967296) [L1129] havoc #t~mem17; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND TRUE 8464 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1318] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1319] assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647; [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1320] COND TRUE 0 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1325] COND FALSE !(~ret~0 <= 0) [L1330] ~got_new_session~0 := 1; [L1331] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1332] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND TRUE 8496 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1336] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1337] COND TRUE 1 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1342] COND FALSE !(~ret~0 <= 0) [L1347] FCALL call #t~mem68 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem68=1, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1347-L1351] COND TRUE 0 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~int(8656, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1352] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1228] COND TRUE 8656 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: 836 + #t~mem117!offset }, 4); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: 172 + #t~mem116!offset }, 4); [L1552] havoc #t~mem117; [L1552] havoc #t~mem116; [L1552] havoc #t~mem118; [L1553] assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554] COND FALSE !(0 == ~tmp___9~0) [L1560] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1561] COND TRUE 2 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1566] COND FALSE !(~ret~0 <= 0) [L1571] FCALL call write~int(8672, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1572] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1573] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574] COND FALSE !(0 == ~tmp___10~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem129; [L1665] havoc #t~mem128; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1228] COND FALSE !(8656 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1231] COND FALSE !(8657 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1234] COND TRUE 8672 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647; [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584] COND FALSE !(4 == ~blastFlag~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1587] COND TRUE 5 == ~blastFlag~0 VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1706] assert false; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=24608, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={24588:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) [L1074] s->state = 8464 VAL [init=1, malloc(sizeof(SSL))={24597:0}, malloc(sizeof(SSL_CTX))={24610:0}, malloc(sizeof(SSL_SESSION))={24579:0}, malloc(sizeof(struct ssl3_state_st))={24601:0}, s={24597:0}, SSLv3_server_data={24588:0}] [L1075] CALL ssl3_accept(s) VAL [init=1, s={24597:0}, SSLv3_server_data={24588:0}] [L1081] BUF_MEM *buf = __VERIFIER_nondet_pointer() ; [L1082] unsigned long l ; [L1083] unsigned long Time ; [L1084] unsigned long tmp = __VERIFIER_nondet_long() ; [L1085] void (*cb)() ; [L1086] long num1 ; [L1087] int ret ; [L1088] int new_state ; [L1089] int state ; [L1090] int skip ; [L1091] int got_new_session ; [L1092] int tmp___1 = __VERIFIER_nondet_int() ; [L1093] int tmp___2 = __VERIFIER_nondet_int() ; [L1094] int tmp___3 ; [L1095] int tmp___4 ; [L1096] int tmp___5 ; [L1097] int tmp___6 ; [L1098] int tmp___7 ; [L1099] long tmp___8 = __VERIFIER_nondet_long() ; [L1100] int tmp___9 ; [L1101] int tmp___10 ; [L1102] int blastFlag ; [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] Time = tmp [L1110] cb = (void (*)())((void *)0) [L1111] ret = -1 [L1112] skip = 0 [L1113] got_new_session = 0 [L1114] EXPR s->info_callback VAL [={0:0}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->info_callback={-1:2}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1114] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1115] EXPR s->info_callback [L1115] cb = s->info_callback [L1119] EXPR s->in_handshake [L1119] s->in_handshake += 1 [L1120] COND FALSE !(tmp___1 & 12288) VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] EXPR s->cert VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->cert={-2:3}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND TRUE s->state == 8464 [L1318] s->shutdown = 0 [L1319] ret = __VERIFIER_nondet_int() [L1320] COND TRUE blastFlag == 0 [L1321] blastFlag = 1 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=0, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1325] COND FALSE !(ret <= 0) [L1330] got_new_session = 1 [L1331] s->state = 8496 [L1332] s->init_num = 0 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={-1:2}, (s->s3)->tmp.reuse_message=24616, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->s3={24601:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND TRUE s->state == 8496 [L1336] ret = __VERIFIER_nondet_int() [L1337] COND TRUE blastFlag == 1 [L1338] blastFlag = 2 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1342] COND FALSE !(ret <= 0) [L1347] s->hit VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->hit=1, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1347] COND TRUE s->hit [L1348] s->state = 8656 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1352] s->init_num = 0 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={-1:2}, (s->s3)->tmp.reuse_message=24616, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->s3={24601:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1228] COND TRUE s->state == 8656 [L1552] EXPR s->session [L1552] EXPR s->s3 [L1552] EXPR (s->s3)->tmp.new_cipher [L1552] (s->session)->cipher = (s->s3)->tmp.new_cipher [L1553] tmp___9 = __VERIFIER_nondet_int() [L1554] COND FALSE !(! tmp___9) [L1560] ret = __VERIFIER_nondet_int() [L1561] COND TRUE blastFlag == 2 [L1562] blastFlag = 5 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0, tmp___9=1] [L1566] COND FALSE !(ret <= 0) [L1571] s->state = 8672 [L1572] s->init_num = 0 [L1573] tmp___10 = __VERIFIER_nondet_int() [L1574] COND FALSE !(! tmp___10) VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={-1:2}, (s->s3)->tmp.reuse_message=24616, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->s3={24601:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1228] COND FALSE !(s->state == 8656) [L1231] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1231] COND FALSE !(s->state == 8657) [L1234] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1234] COND TRUE s->state == 8672 [L1583] ret = __VERIFIER_nondet_int() [L1584] COND FALSE !(blastFlag == 4) VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=0, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1587] COND TRUE blastFlag == 5 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=0, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1706] __VERIFIER_error() VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=0, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] ----- [2018-11-23 12:47:47,458 WARN L170 areAnnotationChecker]: ULTIMATE.initENTRY has no Hoare annotation [2018-11-23 12:47:47,458 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2018-11-23 12:47:47,458 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2018-11-23 12:47:47,458 WARN L170 areAnnotationChecker]: mainENTRY has no Hoare annotation [2018-11-23 12:47:47,458 WARN L170 areAnnotationChecker]: ssl3_acceptENTRY has no Hoare annotation [2018-11-23 12:47:47,458 WARN L170 areAnnotationChecker]: ULTIMATE.initFINAL has no Hoare annotation [2018-11-23 12:47:47,458 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2018-11-23 12:47:47,458 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2018-11-23 12:47:47,459 WARN L170 areAnnotationChecker]: L1075 has no Hoare annotation [2018-11-23 12:47:47,459 WARN L170 areAnnotationChecker]: L1075 has no Hoare annotation [2018-11-23 12:47:47,459 WARN L170 areAnnotationChecker]: L1114 has no Hoare annotation [2018-11-23 12:47:47,459 WARN L170 areAnnotationChecker]: L1114 has no Hoare annotation [2018-11-23 12:47:47,459 WARN L170 areAnnotationChecker]: ULTIMATE.initEXIT has no Hoare annotation [2018-11-23 12:47:47,459 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2018-11-23 12:47:47,459 WARN L170 areAnnotationChecker]: L1075-1 has no Hoare annotation [2018-11-23 12:47:47,459 WARN L170 areAnnotationChecker]: L1114-2 has no Hoare annotation [2018-11-23 12:47:47,459 WARN L170 areAnnotationChecker]: mainFINAL has no Hoare annotation [2018-11-23 12:47:47,459 WARN L170 areAnnotationChecker]: L1120 has no Hoare annotation [2018-11-23 12:47:47,460 WARN L170 areAnnotationChecker]: L1120 has no Hoare annotation [2018-11-23 12:47:47,460 WARN L170 areAnnotationChecker]: mainEXIT has no Hoare annotation [2018-11-23 12:47:47,460 WARN L170 areAnnotationChecker]: L1121 has no Hoare annotation [2018-11-23 12:47:47,460 WARN L170 areAnnotationChecker]: L1121 has no Hoare annotation [2018-11-23 12:47:47,460 WARN L170 areAnnotationChecker]: L1120-1 has no Hoare annotation [2018-11-23 12:47:47,460 WARN L170 areAnnotationChecker]: L1129 has no Hoare annotation [2018-11-23 12:47:47,460 WARN L170 areAnnotationChecker]: L1129 has no Hoare annotation [2018-11-23 12:47:47,460 WARN L170 areAnnotationChecker]: ssl3_acceptFINAL has no Hoare annotation [2018-11-23 12:47:47,460 WARN L170 areAnnotationChecker]: L1135-2 has no Hoare annotation [2018-11-23 12:47:47,460 WARN L170 areAnnotationChecker]: L1135-2 has no Hoare annotation [2018-11-23 12:47:47,460 WARN L170 areAnnotationChecker]: L1135-2 has no Hoare annotation [2018-11-23 12:47:47,461 WARN L170 areAnnotationChecker]: ssl3_acceptEXIT has no Hoare annotation [2018-11-23 12:47:47,461 WARN L170 areAnnotationChecker]: L1696 has no Hoare annotation [2018-11-23 12:47:47,461 WARN L170 areAnnotationChecker]: L1136 has no Hoare annotation [2018-11-23 12:47:47,461 WARN L170 areAnnotationChecker]: L1700 has no Hoare annotation [2018-11-23 12:47:47,461 WARN L170 areAnnotationChecker]: L1700 has no Hoare annotation [2018-11-23 12:47:47,461 WARN L170 areAnnotationChecker]: L1138 has no Hoare annotation [2018-11-23 12:47:47,461 WARN L170 areAnnotationChecker]: L1138 has no Hoare annotation [2018-11-23 12:47:47,461 WARN L170 areAnnotationChecker]: L1700-2 has no Hoare annotation [2018-11-23 12:47:47,461 WARN L170 areAnnotationChecker]: L1139 has no Hoare annotation [2018-11-23 12:47:47,461 WARN L170 areAnnotationChecker]: L1141 has no Hoare annotation [2018-11-23 12:47:47,461 WARN L170 areAnnotationChecker]: L1141 has no Hoare annotation [2018-11-23 12:47:47,462 WARN L170 areAnnotationChecker]: L1248 has no Hoare annotation [2018-11-23 12:47:47,462 WARN L170 areAnnotationChecker]: L1144 has no Hoare annotation [2018-11-23 12:47:47,462 WARN L170 areAnnotationChecker]: L1144 has no Hoare annotation [2018-11-23 12:47:47,463 WARN L170 areAnnotationChecker]: L1253 has no Hoare annotation [2018-11-23 12:47:47,463 WARN L170 areAnnotationChecker]: L1253 has no Hoare annotation [2018-11-23 12:47:47,463 WARN L170 areAnnotationChecker]: L1147 has no Hoare annotation [2018-11-23 12:47:47,463 WARN L170 areAnnotationChecker]: L1147 has no Hoare annotation [2018-11-23 12:47:47,463 WARN L170 areAnnotationChecker]: L1253-2 has no Hoare annotation [2018-11-23 12:47:47,463 WARN L170 areAnnotationChecker]: L1150 has no Hoare annotation [2018-11-23 12:47:47,463 WARN L170 areAnnotationChecker]: L1150 has no Hoare annotation [2018-11-23 12:47:47,463 WARN L170 areAnnotationChecker]: L1258 has no Hoare annotation [2018-11-23 12:47:47,463 WARN L170 areAnnotationChecker]: L1258 has no Hoare annotation [2018-11-23 12:47:47,463 WARN L170 areAnnotationChecker]: L1153 has no Hoare annotation [2018-11-23 12:47:47,464 WARN L170 areAnnotationChecker]: L1153 has no Hoare annotation [2018-11-23 12:47:47,464 WARN L170 areAnnotationChecker]: L1264 has no Hoare annotation [2018-11-23 12:47:47,464 WARN L170 areAnnotationChecker]: L1264 has no Hoare annotation [2018-11-23 12:47:47,464 WARN L170 areAnnotationChecker]: L1157 has no Hoare annotation [2018-11-23 12:47:47,464 WARN L170 areAnnotationChecker]: L1156 has no Hoare annotation [2018-11-23 12:47:47,464 WARN L170 areAnnotationChecker]: L1156 has no Hoare annotation [2018-11-23 12:47:47,464 WARN L170 areAnnotationChecker]: L1266 has no Hoare annotation [2018-11-23 12:47:47,464 WARN L170 areAnnotationChecker]: L1266 has no Hoare annotation [2018-11-23 12:47:47,464 WARN L170 areAnnotationChecker]: L1264-2 has no Hoare annotation [2018-11-23 12:47:47,464 WARN L170 areAnnotationChecker]: L1303 has no Hoare annotation [2018-11-23 12:47:47,464 WARN L170 areAnnotationChecker]: L1303 has no Hoare annotation [2018-11-23 12:47:47,465 WARN L170 areAnnotationChecker]: L1159 has no Hoare annotation [2018-11-23 12:47:47,465 WARN L170 areAnnotationChecker]: L1159 has no Hoare annotation [2018-11-23 12:47:47,465 WARN L170 areAnnotationChecker]: L1277 has no Hoare annotation [2018-11-23 12:47:47,465 WARN L170 areAnnotationChecker]: L1277 has no Hoare annotation [2018-11-23 12:47:47,465 WARN L170 areAnnotationChecker]: L1627 has no Hoare annotation [2018-11-23 12:47:47,465 WARN L170 areAnnotationChecker]: L1160 has no Hoare annotation [2018-11-23 12:47:47,465 WARN L170 areAnnotationChecker]: L1162 has no Hoare annotation [2018-11-23 12:47:47,465 WARN L170 areAnnotationChecker]: L1162 has no Hoare annotation [2018-11-23 12:47:47,465 WARN L170 areAnnotationChecker]: L1284 has no Hoare annotation [2018-11-23 12:47:47,465 WARN L170 areAnnotationChecker]: L1284 has no Hoare annotation [2018-11-23 12:47:47,466 WARN L170 areAnnotationChecker]: L1665 has no Hoare annotation [2018-11-23 12:47:47,466 WARN L170 areAnnotationChecker]: L1665 has no Hoare annotation [2018-11-23 12:47:47,466 WARN L170 areAnnotationChecker]: L1169 has no Hoare annotation [2018-11-23 12:47:47,466 WARN L170 areAnnotationChecker]: L1165 has no Hoare annotation [2018-11-23 12:47:47,466 WARN L170 areAnnotationChecker]: L1165 has no Hoare annotation [2018-11-23 12:47:47,466 WARN L170 areAnnotationChecker]: L1286 has no Hoare annotation [2018-11-23 12:47:47,466 WARN L170 areAnnotationChecker]: L1286 has no Hoare annotation [2018-11-23 12:47:47,466 WARN L170 areAnnotationChecker]: L1666 has no Hoare annotation [2018-11-23 12:47:47,466 WARN L170 areAnnotationChecker]: L1666 has no Hoare annotation [2018-11-23 12:47:47,466 WARN L170 areAnnotationChecker]: L1665-1 has no Hoare annotation [2018-11-23 12:47:47,466 WARN L170 areAnnotationChecker]: L1320 has no Hoare annotation [2018-11-23 12:47:47,467 WARN L170 areAnnotationChecker]: L1320 has no Hoare annotation [2018-11-23 12:47:47,467 WARN L170 areAnnotationChecker]: L1168 has no Hoare annotation [2018-11-23 12:47:47,467 WARN L170 areAnnotationChecker]: L1168 has no Hoare annotation [2018-11-23 12:47:47,467 WARN L170 areAnnotationChecker]: L1667 has no Hoare annotation [2018-11-23 12:47:47,467 WARN L170 areAnnotationChecker]: L1667 has no Hoare annotation [2018-11-23 12:47:47,467 WARN L170 areAnnotationChecker]: L1320-2 has no Hoare annotation [2018-11-23 12:47:47,467 WARN L170 areAnnotationChecker]: L1320-2 has no Hoare annotation [2018-11-23 12:47:47,467 WARN L170 areAnnotationChecker]: L1171 has no Hoare annotation [2018-11-23 12:47:47,467 WARN L170 areAnnotationChecker]: L1171 has no Hoare annotation [2018-11-23 12:47:47,467 WARN L170 areAnnotationChecker]: L1669 has no Hoare annotation [2018-11-23 12:47:47,467 WARN L170 areAnnotationChecker]: L1669 has no Hoare annotation [2018-11-23 12:47:47,468 WARN L170 areAnnotationChecker]: L1667-2 has no Hoare annotation [2018-11-23 12:47:47,468 WARN L170 areAnnotationChecker]: L1667-2 has no Hoare annotation [2018-11-23 12:47:47,468 WARN L170 areAnnotationChecker]: L1175 has no Hoare annotation [2018-11-23 12:47:47,468 WARN L170 areAnnotationChecker]: L1174 has no Hoare annotation [2018-11-23 12:47:47,468 WARN L170 areAnnotationChecker]: L1174 has no Hoare annotation [2018-11-23 12:47:47,468 WARN L170 areAnnotationChecker]: L1678 has no Hoare annotation [2018-11-23 12:47:47,468 WARN L170 areAnnotationChecker]: L1678 has no Hoare annotation [2018-11-23 12:47:47,468 WARN L170 areAnnotationChecker]: L1337 has no Hoare annotation [2018-11-23 12:47:47,468 WARN L170 areAnnotationChecker]: L1337 has no Hoare annotation [2018-11-23 12:47:47,468 WARN L170 areAnnotationChecker]: L1177 has no Hoare annotation [2018-11-23 12:47:47,468 WARN L170 areAnnotationChecker]: L1177 has no Hoare annotation [2018-11-23 12:47:47,469 WARN L170 areAnnotationChecker]: L1337-2 has no Hoare annotation [2018-11-23 12:47:47,469 WARN L170 areAnnotationChecker]: L1337-2 has no Hoare annotation [2018-11-23 12:47:47,469 WARN L170 areAnnotationChecker]: L1181 has no Hoare annotation [2018-11-23 12:47:47,469 WARN L170 areAnnotationChecker]: L1180 has no Hoare annotation [2018-11-23 12:47:47,469 WARN L170 areAnnotationChecker]: L1180 has no Hoare annotation [2018-11-23 12:47:47,469 WARN L170 areAnnotationChecker]: L1347 has no Hoare annotation [2018-11-23 12:47:47,469 WARN L170 areAnnotationChecker]: L1347 has no Hoare annotation [2018-11-23 12:47:47,469 WARN L170 areAnnotationChecker]: L1356 has no Hoare annotation [2018-11-23 12:47:47,469 WARN L170 areAnnotationChecker]: L1356 has no Hoare annotation [2018-11-23 12:47:47,469 WARN L170 areAnnotationChecker]: L1183 has no Hoare annotation [2018-11-23 12:47:47,469 WARN L170 areAnnotationChecker]: L1183 has no Hoare annotation [2018-11-23 12:47:47,470 WARN L170 areAnnotationChecker]: L1347-2 has no Hoare annotation [2018-11-23 12:47:47,470 WARN L170 areAnnotationChecker]: L1356-2 has no Hoare annotation [2018-11-23 12:47:47,470 WARN L170 areAnnotationChecker]: L1360 has no Hoare annotation [2018-11-23 12:47:47,470 WARN L170 areAnnotationChecker]: L1360 has no Hoare annotation [2018-11-23 12:47:47,470 WARN L170 areAnnotationChecker]: L1187 has no Hoare annotation [2018-11-23 12:47:47,470 WARN L170 areAnnotationChecker]: L1186 has no Hoare annotation [2018-11-23 12:47:47,470 WARN L170 areAnnotationChecker]: L1186 has no Hoare annotation [2018-11-23 12:47:47,470 WARN L170 areAnnotationChecker]: L1372 has no Hoare annotation [2018-11-23 12:47:47,470 WARN L170 areAnnotationChecker]: L1372 has no Hoare annotation [2018-11-23 12:47:47,470 WARN L170 areAnnotationChecker]: L1189 has no Hoare annotation [2018-11-23 12:47:47,471 WARN L170 areAnnotationChecker]: L1189 has no Hoare annotation [2018-11-23 12:47:47,471 WARN L170 areAnnotationChecker]: L1372-2 has no Hoare annotation [2018-11-23 12:47:47,471 WARN L170 areAnnotationChecker]: L1193 has no Hoare annotation [2018-11-23 12:47:47,471 WARN L170 areAnnotationChecker]: L1192 has no Hoare annotation [2018-11-23 12:47:47,471 WARN L170 areAnnotationChecker]: L1192 has no Hoare annotation [2018-11-23 12:47:47,471 WARN L170 areAnnotationChecker]: L1377 has no Hoare annotation [2018-11-23 12:47:47,471 WARN L170 areAnnotationChecker]: L1377 has no Hoare annotation [2018-11-23 12:47:47,471 WARN L170 areAnnotationChecker]: L1419 has no Hoare annotation [2018-11-23 12:47:47,471 WARN L170 areAnnotationChecker]: L1419 has no Hoare annotation [2018-11-23 12:47:47,471 WARN L170 areAnnotationChecker]: L1195 has no Hoare annotation [2018-11-23 12:47:47,472 WARN L170 areAnnotationChecker]: L1195 has no Hoare annotation [2018-11-23 12:47:47,472 WARN L170 areAnnotationChecker]: L1395 has no Hoare annotation [2018-11-23 12:47:47,472 WARN L170 areAnnotationChecker]: L1380 has no Hoare annotation [2018-11-23 12:47:47,472 WARN L170 areAnnotationChecker]: L1380 has no Hoare annotation [2018-11-23 12:47:47,472 WARN L170 areAnnotationChecker]: L1420 has no Hoare annotation [2018-11-23 12:47:47,472 WARN L170 areAnnotationChecker]: L1420 has no Hoare annotation [2018-11-23 12:47:47,472 WARN L170 areAnnotationChecker]: L1199 has no Hoare annotation [2018-11-23 12:47:47,472 WARN L170 areAnnotationChecker]: L1198 has no Hoare annotation [2018-11-23 12:47:47,472 WARN L170 areAnnotationChecker]: L1198 has no Hoare annotation [2018-11-23 12:47:47,473 WARN L170 areAnnotationChecker]: L1397 has no Hoare annotation [2018-11-23 12:47:47,473 WARN L170 areAnnotationChecker]: L1397 has no Hoare annotation [2018-11-23 12:47:47,473 WARN L170 areAnnotationChecker]: L1383 has no Hoare annotation [2018-11-23 12:47:47,473 WARN L170 areAnnotationChecker]: L1383 has no Hoare annotation [2018-11-23 12:47:47,473 WARN L170 areAnnotationChecker]: L1421 has no Hoare annotation [2018-11-23 12:47:47,473 WARN L170 areAnnotationChecker]: L1421 has no Hoare annotation [2018-11-23 12:47:47,473 WARN L170 areAnnotationChecker]: L1429 has no Hoare annotation [2018-11-23 12:47:47,473 WARN L170 areAnnotationChecker]: L1461 has no Hoare annotation [2018-11-23 12:47:47,473 WARN L170 areAnnotationChecker]: L1461 has no Hoare annotation [2018-11-23 12:47:47,473 WARN L170 areAnnotationChecker]: L1201 has no Hoare annotation [2018-11-23 12:47:47,473 WARN L170 areAnnotationChecker]: L1201 has no Hoare annotation [2018-11-23 12:47:47,474 WARN L170 areAnnotationChecker]: L1383-1 has no Hoare annotation [2018-11-23 12:47:47,474 WARN L170 areAnnotationChecker]: L1384 has no Hoare annotation [2018-11-23 12:47:47,474 WARN L170 areAnnotationChecker]: L1384 has no Hoare annotation [2018-11-23 12:47:47,474 WARN L170 areAnnotationChecker]: L1430 has no Hoare annotation [2018-11-23 12:47:47,474 WARN L170 areAnnotationChecker]: L1430 has no Hoare annotation [2018-11-23 12:47:47,474 WARN L170 areAnnotationChecker]: L1202 has no Hoare annotation [2018-11-23 12:47:47,474 WARN L170 areAnnotationChecker]: L1204 has no Hoare annotation [2018-11-23 12:47:47,474 WARN L170 areAnnotationChecker]: L1204 has no Hoare annotation [2018-11-23 12:47:47,474 WARN L170 areAnnotationChecker]: L1387 has no Hoare annotation [2018-11-23 12:47:47,474 WARN L170 areAnnotationChecker]: L1387 has no Hoare annotation [2018-11-23 12:47:47,475 WARN L170 areAnnotationChecker]: L1431 has no Hoare annotation [2018-11-23 12:47:47,475 WARN L170 areAnnotationChecker]: L1431 has no Hoare annotation [2018-11-23 12:47:47,475 WARN L170 areAnnotationChecker]: L1439 has no Hoare annotation [2018-11-23 12:47:47,475 WARN L170 areAnnotationChecker]: L1472 has no Hoare annotation [2018-11-23 12:47:47,475 WARN L170 areAnnotationChecker]: L1472 has no Hoare annotation [2018-11-23 12:47:47,475 WARN L170 areAnnotationChecker]: L1208 has no Hoare annotation [2018-11-23 12:47:47,475 WARN L170 areAnnotationChecker]: L1207 has no Hoare annotation [2018-11-23 12:47:47,475 WARN L170 areAnnotationChecker]: L1207 has no Hoare annotation [2018-11-23 12:47:47,475 WARN L170 areAnnotationChecker]: L1389 has no Hoare annotation [2018-11-23 12:47:47,475 WARN L170 areAnnotationChecker]: L1389 has no Hoare annotation [2018-11-23 12:47:47,476 WARN L170 areAnnotationChecker]: L1442 has no Hoare annotation [2018-11-23 12:47:47,476 WARN L170 areAnnotationChecker]: L1442 has no Hoare annotation [2018-11-23 12:47:47,476 WARN L170 areAnnotationChecker]: L1475 has no Hoare annotation [2018-11-23 12:47:47,476 WARN L170 areAnnotationChecker]: L1475 has no Hoare annotation [2018-11-23 12:47:47,476 WARN L170 areAnnotationChecker]: L1472-2 has no Hoare annotation [2018-11-23 12:47:47,476 WARN L170 areAnnotationChecker]: L1490 has no Hoare annotation [2018-11-23 12:47:47,476 WARN L170 areAnnotationChecker]: L1490 has no Hoare annotation [2018-11-23 12:47:47,476 WARN L170 areAnnotationChecker]: L1210 has no Hoare annotation [2018-11-23 12:47:47,476 WARN L170 areAnnotationChecker]: L1210 has no Hoare annotation [2018-11-23 12:47:47,476 WARN L170 areAnnotationChecker]: L1389-2 has no Hoare annotation [2018-11-23 12:47:47,476 WARN L170 areAnnotationChecker]: L1389-2 has no Hoare annotation [2018-11-23 12:47:47,477 WARN L170 areAnnotationChecker]: L1495 has no Hoare annotation [2018-11-23 12:47:47,477 WARN L170 areAnnotationChecker]: L1495 has no Hoare annotation [2018-11-23 12:47:47,477 WARN L170 areAnnotationChecker]: L1214 has no Hoare annotation [2018-11-23 12:47:47,477 WARN L170 areAnnotationChecker]: L1213 has no Hoare annotation [2018-11-23 12:47:47,477 WARN L170 areAnnotationChecker]: L1213 has no Hoare annotation [2018-11-23 12:47:47,477 WARN L170 areAnnotationChecker]: L1499 has no Hoare annotation [2018-11-23 12:47:47,477 WARN L170 areAnnotationChecker]: L1499 has no Hoare annotation [2018-11-23 12:47:47,477 WARN L170 areAnnotationChecker]: L1511 has no Hoare annotation [2018-11-23 12:47:47,477 WARN L170 areAnnotationChecker]: L1511 has no Hoare annotation [2018-11-23 12:47:47,478 WARN L170 areAnnotationChecker]: L1216 has no Hoare annotation [2018-11-23 12:47:47,478 WARN L170 areAnnotationChecker]: L1216 has no Hoare annotation [2018-11-23 12:47:47,478 WARN L170 areAnnotationChecker]: L1220 has no Hoare annotation [2018-11-23 12:47:47,478 WARN L170 areAnnotationChecker]: L1219 has no Hoare annotation [2018-11-23 12:47:47,478 WARN L170 areAnnotationChecker]: L1219 has no Hoare annotation [2018-11-23 12:47:47,478 WARN L170 areAnnotationChecker]: L1522 has no Hoare annotation [2018-11-23 12:47:47,478 WARN L170 areAnnotationChecker]: L1522 has no Hoare annotation [2018-11-23 12:47:47,478 WARN L170 areAnnotationChecker]: L1222 has no Hoare annotation [2018-11-23 12:47:47,478 WARN L170 areAnnotationChecker]: L1222 has no Hoare annotation [2018-11-23 12:47:47,479 WARN L170 areAnnotationChecker]: L1226 has no Hoare annotation [2018-11-23 12:47:47,479 WARN L170 areAnnotationChecker]: L1225 has no Hoare annotation [2018-11-23 12:47:47,479 WARN L170 areAnnotationChecker]: L1225 has no Hoare annotation [2018-11-23 12:47:47,479 WARN L170 areAnnotationChecker]: L1533 has no Hoare annotation [2018-11-23 12:47:47,479 WARN L170 areAnnotationChecker]: L1533 has no Hoare annotation [2018-11-23 12:47:47,479 WARN L170 areAnnotationChecker]: L1228 has no Hoare annotation [2018-11-23 12:47:47,479 WARN L170 areAnnotationChecker]: L1228 has no Hoare annotation [2018-11-23 12:47:47,479 WARN L170 areAnnotationChecker]: L1533-2 has no Hoare annotation [2018-11-23 12:47:47,479 WARN L170 areAnnotationChecker]: L1533-2 has no Hoare annotation [2018-11-23 12:47:47,480 WARN L170 areAnnotationChecker]: L1232 has no Hoare annotation [2018-11-23 12:47:47,480 WARN L170 areAnnotationChecker]: L1231 has no Hoare annotation [2018-11-23 12:47:47,480 WARN L170 areAnnotationChecker]: L1231 has no Hoare annotation [2018-11-23 12:47:47,480 WARN L170 areAnnotationChecker]: L1543 has no Hoare annotation [2018-11-23 12:47:47,480 WARN L170 areAnnotationChecker]: L1543 has no Hoare annotation [2018-11-23 12:47:47,480 WARN L170 areAnnotationChecker]: L1554 has no Hoare annotation [2018-11-23 12:47:47,480 WARN L170 areAnnotationChecker]: L1554 has no Hoare annotation [2018-11-23 12:47:47,480 WARN L170 areAnnotationChecker]: L1234 has no Hoare annotation [2018-11-23 12:47:47,480 WARN L170 areAnnotationChecker]: L1234 has no Hoare annotation [2018-11-23 12:47:47,481 WARN L170 areAnnotationChecker]: L1543-2 has no Hoare annotation [2018-11-23 12:47:47,481 WARN L170 areAnnotationChecker]: L1561 has no Hoare annotation [2018-11-23 12:47:47,481 WARN L170 areAnnotationChecker]: L1561 has no Hoare annotation [2018-11-23 12:47:47,481 WARN L170 areAnnotationChecker]: L1238 has no Hoare annotation [2018-11-23 12:47:47,481 WARN L170 areAnnotationChecker]: L1237 has no Hoare annotation [2018-11-23 12:47:47,481 WARN L170 areAnnotationChecker]: L1237 has no Hoare annotation [2018-11-23 12:47:47,481 WARN L170 areAnnotationChecker]: L1561-2 has no Hoare annotation [2018-11-23 12:47:47,481 WARN L170 areAnnotationChecker]: L1561-2 has no Hoare annotation [2018-11-23 12:47:47,481 WARN L170 areAnnotationChecker]: L1584 has no Hoare annotation [2018-11-23 12:47:47,481 WARN L170 areAnnotationChecker]: L1584 has no Hoare annotation [2018-11-23 12:47:47,482 WARN L170 areAnnotationChecker]: L1240 has no Hoare annotation [2018-11-23 12:47:47,482 WARN L170 areAnnotationChecker]: L1240 has no Hoare annotation [2018-11-23 12:47:47,482 WARN L170 areAnnotationChecker]: L1574 has no Hoare annotation [2018-11-23 12:47:47,482 WARN L170 areAnnotationChecker]: L1574 has no Hoare annotation [2018-11-23 12:47:47,482 WARN L170 areAnnotationChecker]: L1588 has no Hoare annotation [2018-11-23 12:47:47,482 WARN L170 areAnnotationChecker]: L1588 has no Hoare annotation [2018-11-23 12:47:47,482 WARN L170 areAnnotationChecker]: L1587 has no Hoare annotation [2018-11-23 12:47:47,482 WARN L170 areAnnotationChecker]: L1587 has no Hoare annotation [2018-11-23 12:47:47,482 WARN L170 areAnnotationChecker]: L1241 has no Hoare annotation [2018-11-23 12:47:47,483 WARN L170 areAnnotationChecker]: L1244 has no Hoare annotation [2018-11-23 12:47:47,483 WARN L170 areAnnotationChecker]: L1593 has no Hoare annotation [2018-11-23 12:47:47,483 WARN L170 areAnnotationChecker]: L1593 has no Hoare annotation [2018-11-23 12:47:47,483 WARN L170 areAnnotationChecker]: L1609 has no Hoare annotation [2018-11-23 12:47:47,483 WARN L170 areAnnotationChecker]: L1609 has no Hoare annotation [2018-11-23 12:47:47,483 WARN L170 areAnnotationChecker]: L1599 has no Hoare annotation [2018-11-23 12:47:47,483 WARN L170 areAnnotationChecker]: L1599 has no Hoare annotation [2018-11-23 12:47:47,483 WARN L170 areAnnotationChecker]: L1613 has no Hoare annotation [2018-11-23 12:47:47,483 WARN L170 areAnnotationChecker]: L1613 has no Hoare annotation [2018-11-23 12:47:47,484 WARN L170 areAnnotationChecker]: L1609-1 has no Hoare annotation [2018-11-23 12:47:47,484 WARN L170 areAnnotationChecker]: L1599-2 has no Hoare annotation [2018-11-23 12:47:47,484 INFO L163 areAnnotationChecker]: CFG has 0 edges. 0 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2018-11-23 12:47:47,489 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 12:47:47 BoogieIcfgContainer [2018-11-23 12:47:47,489 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 12:47:47,489 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 12:47:47,490 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 12:47:47,490 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 12:47:47,491 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:46:11" (3/4) ... [2018-11-23 12:47:47,495 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-23 12:47:47,495 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 12:47:47,498 INFO L168 Benchmark]: Toolchain (without parser) took 100537.75 ms. Allocated memory was 1.5 GB in the beginning and 3.0 GB in the end (delta: 1.4 GB). Free memory was 1.4 GB in the beginning and 2.7 GB in the end (delta: -1.3 GB). Peak memory consumption was 173.9 MB. Max. memory is 7.1 GB. [2018-11-23 12:47:47,499 INFO L168 Benchmark]: CDTParser took 0.21 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-11-23 12:47:47,500 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1033.23 ms. Allocated memory was 1.5 GB in the beginning and 2.2 GB in the end (delta: 725.6 MB). Free memory was 1.4 GB in the beginning and 2.2 GB in the end (delta: -769.5 MB). Peak memory consumption was 54.4 MB. Max. memory is 7.1 GB. [2018-11-23 12:47:47,500 INFO L168 Benchmark]: Boogie Procedure Inliner took 48.98 ms. Allocated memory is still 2.2 GB. Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 13.6 MB). Peak memory consumption was 13.6 MB. Max. memory is 7.1 GB. [2018-11-23 12:47:47,501 INFO L168 Benchmark]: Boogie Preprocessor took 162.74 ms. Allocated memory is still 2.2 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-11-23 12:47:47,501 INFO L168 Benchmark]: RCFGBuilder took 3448.56 ms. Allocated memory is still 2.2 GB. Free memory was 2.2 GB in the beginning and 2.0 GB in the end (delta: 160.0 MB). Peak memory consumption was 160.0 MB. Max. memory is 7.1 GB. [2018-11-23 12:47:47,501 INFO L168 Benchmark]: TraceAbstraction took 95831.13 ms. Allocated memory was 2.2 GB in the beginning and 3.0 GB in the end (delta: 707.3 MB). Free memory was 2.0 GB in the beginning and 2.7 GB in the end (delta: -663.1 MB). Peak memory consumption was 44.2 MB. Max. memory is 7.1 GB. [2018-11-23 12:47:47,505 INFO L168 Benchmark]: Witness Printer took 6.06 ms. Allocated memory is still 3.0 GB. Free memory is still 2.7 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-11-23 12:47:47,507 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - GenericResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 7.1 GB. * CACSL2BoogieTranslator took 1033.23 ms. Allocated memory was 1.5 GB in the beginning and 2.2 GB in the end (delta: 725.6 MB). Free memory was 1.4 GB in the beginning and 2.2 GB in the end (delta: -769.5 MB). Peak memory consumption was 54.4 MB. Max. memory is 7.1 GB. * Boogie Procedure Inliner took 48.98 ms. Allocated memory is still 2.2 GB. Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 13.6 MB). Peak memory consumption was 13.6 MB. Max. memory is 7.1 GB. * Boogie Preprocessor took 162.74 ms. Allocated memory is still 2.2 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 7.1 GB. * RCFGBuilder took 3448.56 ms. Allocated memory is still 2.2 GB. Free memory was 2.2 GB in the beginning and 2.0 GB in the end (delta: 160.0 MB). Peak memory consumption was 160.0 MB. Max. memory is 7.1 GB. * TraceAbstraction took 95831.13 ms. Allocated memory was 2.2 GB in the beginning and 3.0 GB in the end (delta: 707.3 MB). Free memory was 2.0 GB in the beginning and 2.7 GB in the end (delta: -663.1 MB). Peak memory consumption was 44.2 MB. Max. memory is 7.1 GB. * Witness Printer took 6.06 ms. Allocated memory is still 3.0 GB. Free memory is still 2.7 GB. There was no memory consumed. Max. memory is 7.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 24589 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 24587 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - UnprovableResult [Line: 1706]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of bitwiseAnd at line 1120. Possible FailurePath: [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=24608, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={24588:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) [L1074] s->state = 8464 VAL [init=1, malloc(sizeof(SSL))={24597:0}, malloc(sizeof(SSL_CTX))={24610:0}, malloc(sizeof(SSL_SESSION))={24579:0}, malloc(sizeof(struct ssl3_state_st))={24601:0}, s={24597:0}, SSLv3_server_data={24588:0}] [L1075] CALL ssl3_accept(s) VAL [init=1, s={24597:0}, SSLv3_server_data={24588:0}] [L1081] BUF_MEM *buf = __VERIFIER_nondet_pointer() ; [L1082] unsigned long l ; [L1083] unsigned long Time ; [L1084] unsigned long tmp = __VERIFIER_nondet_long() ; [L1085] void (*cb)() ; [L1086] long num1 ; [L1087] int ret ; [L1088] int new_state ; [L1089] int state ; [L1090] int skip ; [L1091] int got_new_session ; [L1092] int tmp___1 = __VERIFIER_nondet_int() ; [L1093] int tmp___2 = __VERIFIER_nondet_int() ; [L1094] int tmp___3 ; [L1095] int tmp___4 ; [L1096] int tmp___5 ; [L1097] int tmp___6 ; [L1098] int tmp___7 ; [L1099] long tmp___8 = __VERIFIER_nondet_long() ; [L1100] int tmp___9 ; [L1101] int tmp___10 ; [L1102] int blastFlag ; [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] Time = tmp [L1110] cb = (void (*)())((void *)0) [L1111] ret = -1 [L1112] skip = 0 [L1113] got_new_session = 0 [L1114] EXPR s->info_callback VAL [={0:0}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->info_callback={-1:2}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1114] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1115] EXPR s->info_callback [L1115] cb = s->info_callback [L1119] EXPR s->in_handshake [L1119] s->in_handshake += 1 [L1120] COND FALSE !(tmp___1 & 12288) VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] EXPR s->cert VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->cert={-2:3}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND TRUE s->state == 8464 [L1318] s->shutdown = 0 [L1319] ret = __VERIFIER_nondet_int() [L1320] COND TRUE blastFlag == 0 [L1321] blastFlag = 1 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=0, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1325] COND FALSE !(ret <= 0) [L1330] got_new_session = 1 [L1331] s->state = 8496 [L1332] s->init_num = 0 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={-1:2}, (s->s3)->tmp.reuse_message=24616, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->s3={24601:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND TRUE s->state == 8496 [L1336] ret = __VERIFIER_nondet_int() [L1337] COND TRUE blastFlag == 1 [L1338] blastFlag = 2 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1342] COND FALSE !(ret <= 0) [L1347] s->hit VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->hit=1, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1347] COND TRUE s->hit [L1348] s->state = 8656 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1352] s->init_num = 0 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={-1:2}, (s->s3)->tmp.reuse_message=24616, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->s3={24601:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1228] COND TRUE s->state == 8656 [L1552] EXPR s->session [L1552] EXPR s->s3 [L1552] EXPR (s->s3)->tmp.new_cipher [L1552] (s->session)->cipher = (s->s3)->tmp.new_cipher [L1553] tmp___9 = __VERIFIER_nondet_int() [L1554] COND FALSE !(! tmp___9) [L1560] ret = __VERIFIER_nondet_int() [L1561] COND TRUE blastFlag == 2 [L1562] blastFlag = 5 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0, tmp___9=1] [L1566] COND FALSE !(ret <= 0) [L1571] s->state = 8672 [L1572] s->init_num = 0 [L1573] tmp___10 = __VERIFIER_nondet_int() [L1574] COND FALSE !(! tmp___10) VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={-1:2}, (s->s3)->tmp.reuse_message=24616, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->s3={24601:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1228] COND FALSE !(s->state == 8656) [L1231] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1231] COND FALSE !(s->state == 8657) [L1234] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1234] COND TRUE s->state == 8672 [L1583] ret = __VERIFIER_nondet_int() [L1584] COND FALSE !(blastFlag == 4) VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=0, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1587] COND TRUE blastFlag == 5 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=0, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1706] __VERIFIER_error() VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=0, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 4 procedures, 156 locations, 1 error locations. UNSAFE Result, 95.7s OverallTime, 40 OverallIterations, 4 TraceHistogramMax, 69.1s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 7924 SDtfs, 2064 SDslu, 11202 SDs, 0 SdLazy, 6766 SolverSat, 332 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 11.4s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 263 GetRequests, 78 SyntacticMatches, 74 SemanticMatches, 111 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 7.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=499occurred in iteration=38, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 4.1s AutomataMinimizationTime, 39 MinimizatonAttempts, 1079 StatesRemovedByMinimization, 36 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 15.7s InterpolantComputationTime, 3648 NumberOfCodeBlocks, 3648 NumberOfCodeBlocksAsserted, 40 NumberOfCheckSat, 3477 ConstructedInterpolants, 0 QuantifiedInterpolants, 861723 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 39 InterpolantComputations, 39 PerfectInterpolantSequences, 1623/1623 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request...