java -ea -Xmx8000000000 -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc ../../../trunk/examples/toolchains/AutomizerCInline_WitnessPrinter.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf -i ../../../trunk/examples/svcomp/ssh/s3_srvr.blast.04_false-unreach-call.i.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.1.23-61f4311 [2018-11-23 12:46:44,034 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 12:46:44,038 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 12:46:44,050 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 12:46:44,051 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 12:46:44,052 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 12:46:44,053 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 12:46:44,055 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 12:46:44,057 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 12:46:44,057 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 12:46:44,058 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 12:46:44,059 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 12:46:44,060 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 12:46:44,061 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 12:46:44,062 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 12:46:44,063 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 12:46:44,063 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 12:46:44,065 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 12:46:44,068 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 12:46:44,069 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 12:46:44,070 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 12:46:44,072 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 12:46:44,074 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 12:46:44,075 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 12:46:44,075 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 12:46:44,076 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 12:46:44,077 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 12:46:44,078 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 12:46:44,079 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 12:46:44,080 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 12:46:44,080 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 12:46:44,081 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 12:46:44,081 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 12:46:44,081 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 12:46:44,083 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 12:46:44,083 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 12:46:44,084 INFO L98 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf [2018-11-23 12:46:44,099 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 12:46:44,099 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 12:46:44,100 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 12:46:44,101 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 12:46:44,101 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 12:46:44,101 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 12:46:44,101 INFO L133 SettingsManager]: * Use SBE=true [2018-11-23 12:46:44,103 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 12:46:44,103 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-23 12:46:44,103 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 12:46:44,103 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-23 12:46:44,104 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 12:46:44,104 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 12:46:44,104 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 12:46:44,104 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 12:46:44,104 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-23 12:46:44,105 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 12:46:44,105 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 12:46:44,105 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 12:46:44,105 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 12:46:44,105 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 12:46:44,106 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 12:46:44,106 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 12:46:44,106 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 12:46:44,106 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 12:46:44,106 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 12:46:44,108 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 12:46:44,108 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-23 12:46:44,109 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 12:46:44,109 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 12:46:44,109 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 12:46:44,167 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 12:46:44,179 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 12:46:44,183 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 12:46:44,184 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 12:46:44,185 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 12:46:44,185 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ssh/s3_srvr.blast.04_false-unreach-call.i.cil.c [2018-11-23 12:46:44,244 INFO L221 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5b496e876/8e8a7bd0b22141bda8a6afb0c8be1165/FLAGf62e551ef [2018-11-23 12:46:44,924 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 12:46:44,926 INFO L161 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ssh/s3_srvr.blast.04_false-unreach-call.i.cil.c [2018-11-23 12:46:44,950 INFO L355 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5b496e876/8e8a7bd0b22141bda8a6afb0c8be1165/FLAGf62e551ef [2018-11-23 12:46:45,061 INFO L363 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5b496e876/8e8a7bd0b22141bda8a6afb0c8be1165 [2018-11-23 12:46:45,071 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 12:46:45,073 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 12:46:45,074 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 12:46:45,074 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 12:46:45,078 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 12:46:45,081 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:46:45" (1/1) ... [2018-11-23 12:46:45,084 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7cc2ddbb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:45, skipping insertion in model container [2018-11-23 12:46:45,084 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:46:45" (1/1) ... [2018-11-23 12:46:45,094 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 12:46:45,171 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 12:46:45,681 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 12:46:45,715 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 12:46:46,025 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 12:46:46,055 INFO L195 MainTranslator]: Completed translation [2018-11-23 12:46:46,056 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:46 WrapperNode [2018-11-23 12:46:46,056 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 12:46:46,057 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 12:46:46,058 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 12:46:46,058 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 12:46:46,069 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:46" (1/1) ... [2018-11-23 12:46:46,100 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:46" (1/1) ... [2018-11-23 12:46:46,111 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 12:46:46,112 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 12:46:46,112 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 12:46:46,112 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 12:46:46,125 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:46" (1/1) ... [2018-11-23 12:46:46,125 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:46" (1/1) ... [2018-11-23 12:46:46,136 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:46" (1/1) ... [2018-11-23 12:46:46,136 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:46" (1/1) ... [2018-11-23 12:46:46,215 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:46" (1/1) ... [2018-11-23 12:46:46,230 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:46" (1/1) ... [2018-11-23 12:46:46,234 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:46" (1/1) ... [2018-11-23 12:46:46,242 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 12:46:46,243 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 12:46:46,243 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 12:46:46,243 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 12:46:46,244 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:46" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 12:46:46,323 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 12:46:46,323 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 12:46:46,324 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 12:46:46,324 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 12:46:46,324 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-23 12:46:46,324 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 12:46:46,324 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-23 12:46:46,325 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 12:46:46,326 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-23 12:46:46,326 INFO L130 BoogieDeclarations]: Found specification of procedure ssl3_accept [2018-11-23 12:46:46,326 INFO L138 BoogieDeclarations]: Found implementation of procedure ssl3_accept [2018-11-23 12:46:46,326 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 12:46:46,327 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 12:46:46,327 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 12:46:46,327 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 12:46:46,939 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 12:46:46,940 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 12:46:49,574 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 12:46:49,574 INFO L280 CfgBuilder]: Removed 1 assue(true) statements. [2018-11-23 12:46:49,574 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:46:49 BoogieIcfgContainer [2018-11-23 12:46:49,575 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 12:46:49,576 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 12:46:49,576 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 12:46:49,579 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 12:46:49,580 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 12:46:45" (1/3) ... [2018-11-23 12:46:49,581 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6ee2c11f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:46:49, skipping insertion in model container [2018-11-23 12:46:49,581 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:46" (2/3) ... [2018-11-23 12:46:49,581 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6ee2c11f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:46:49, skipping insertion in model container [2018-11-23 12:46:49,581 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:46:49" (3/3) ... [2018-11-23 12:46:49,583 INFO L112 eAbstractionObserver]: Analyzing ICFG s3_srvr.blast.04_false-unreach-call.i.cil.c [2018-11-23 12:46:49,594 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 12:46:49,603 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 12:46:49,619 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 12:46:49,653 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 12:46:49,653 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 12:46:49,654 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 12:46:49,654 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 12:46:49,654 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 12:46:49,654 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 12:46:49,654 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 12:46:49,654 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 12:46:49,654 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 12:46:49,679 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states. [2018-11-23 12:46:49,690 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2018-11-23 12:46:49,691 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:49,692 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:49,694 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:49,701 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:49,701 INFO L82 PathProgramCache]: Analyzing trace with hash 1762902688, now seen corresponding path program 1 times [2018-11-23 12:46:49,703 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:49,703 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:49,770 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:49,771 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:49,771 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:49,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:50,426 INFO L256 TraceCheckUtils]: 0: Hoare triple {155#true} call ULTIMATE.init(); {155#true} is VALID [2018-11-23 12:46:50,430 INFO L273 TraceCheckUtils]: 1: Hoare triple {155#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {155#true} is VALID [2018-11-23 12:46:50,431 INFO L273 TraceCheckUtils]: 2: Hoare triple {155#true} assume true; {155#true} is VALID [2018-11-23 12:46:50,432 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {155#true} {155#true} #604#return; {155#true} is VALID [2018-11-23 12:46:50,432 INFO L256 TraceCheckUtils]: 4: Hoare triple {155#true} call #t~ret138 := main(); {155#true} is VALID [2018-11-23 12:46:50,432 INFO L273 TraceCheckUtils]: 5: Hoare triple {155#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {155#true} is VALID [2018-11-23 12:46:50,433 INFO L256 TraceCheckUtils]: 6: Hoare triple {155#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {155#true} is VALID [2018-11-23 12:46:50,451 INFO L273 TraceCheckUtils]: 7: Hoare triple {155#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:50,460 INFO L273 TraceCheckUtils]: 8: Hoare triple {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:50,474 INFO L273 TraceCheckUtils]: 9: Hoare triple {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:50,487 INFO L273 TraceCheckUtils]: 10: Hoare triple {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:50,502 INFO L273 TraceCheckUtils]: 11: Hoare triple {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:50,511 INFO L273 TraceCheckUtils]: 12: Hoare triple {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:50,524 INFO L273 TraceCheckUtils]: 13: Hoare triple {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !false; {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:50,537 INFO L273 TraceCheckUtils]: 14: Hoare triple {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:50,551 INFO L273 TraceCheckUtils]: 15: Hoare triple {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:50,564 INFO L273 TraceCheckUtils]: 16: Hoare triple {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:50,577 INFO L273 TraceCheckUtils]: 17: Hoare triple {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:50,590 INFO L273 TraceCheckUtils]: 18: Hoare triple {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:50,604 INFO L273 TraceCheckUtils]: 19: Hoare triple {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:50,617 INFO L273 TraceCheckUtils]: 20: Hoare triple {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:50,634 INFO L273 TraceCheckUtils]: 21: Hoare triple {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:50,644 INFO L273 TraceCheckUtils]: 22: Hoare triple {157#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {158#(= 8464 |ssl3_accept_#t~mem32|)} is VALID [2018-11-23 12:46:50,657 INFO L273 TraceCheckUtils]: 23: Hoare triple {158#(= 8464 |ssl3_accept_#t~mem32|)} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,657 INFO L273 TraceCheckUtils]: 24: Hoare triple {156#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,658 INFO L273 TraceCheckUtils]: 25: Hoare triple {156#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,658 INFO L273 TraceCheckUtils]: 26: Hoare triple {156#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,659 INFO L273 TraceCheckUtils]: 27: Hoare triple {156#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,659 INFO L273 TraceCheckUtils]: 28: Hoare triple {156#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,660 INFO L273 TraceCheckUtils]: 29: Hoare triple {156#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,660 INFO L273 TraceCheckUtils]: 30: Hoare triple {156#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,660 INFO L273 TraceCheckUtils]: 31: Hoare triple {156#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,661 INFO L273 TraceCheckUtils]: 32: Hoare triple {156#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,661 INFO L273 TraceCheckUtils]: 33: Hoare triple {156#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,661 INFO L273 TraceCheckUtils]: 34: Hoare triple {156#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,662 INFO L273 TraceCheckUtils]: 35: Hoare triple {156#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,662 INFO L273 TraceCheckUtils]: 36: Hoare triple {156#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,663 INFO L273 TraceCheckUtils]: 37: Hoare triple {156#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,663 INFO L273 TraceCheckUtils]: 38: Hoare triple {156#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,663 INFO L273 TraceCheckUtils]: 39: Hoare triple {156#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,664 INFO L273 TraceCheckUtils]: 40: Hoare triple {156#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,664 INFO L273 TraceCheckUtils]: 41: Hoare triple {156#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,665 INFO L273 TraceCheckUtils]: 42: Hoare triple {156#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,665 INFO L273 TraceCheckUtils]: 43: Hoare triple {156#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,666 INFO L273 TraceCheckUtils]: 44: Hoare triple {156#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,666 INFO L273 TraceCheckUtils]: 45: Hoare triple {156#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,667 INFO L273 TraceCheckUtils]: 46: Hoare triple {156#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {156#false} is VALID [2018-11-23 12:46:50,667 INFO L273 TraceCheckUtils]: 47: Hoare triple {156#false} assume 8672 == #t~mem56;havoc #t~mem56; {156#false} is VALID [2018-11-23 12:46:50,668 INFO L273 TraceCheckUtils]: 48: Hoare triple {156#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {156#false} is VALID [2018-11-23 12:46:50,668 INFO L273 TraceCheckUtils]: 49: Hoare triple {156#false} assume 4 == ~blastFlag~0; {156#false} is VALID [2018-11-23 12:46:50,668 INFO L273 TraceCheckUtils]: 50: Hoare triple {156#false} assume !false; {156#false} is VALID [2018-11-23 12:46:50,690 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:46:50,695 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:50,696 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:50,701 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 51 [2018-11-23 12:46:50,705 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:50,709 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:50,994 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:50,994 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:51,003 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:51,004 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:51,006 INFO L87 Difference]: Start difference. First operand 152 states. Second operand 4 states. [2018-11-23 12:46:52,965 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:52,965 INFO L93 Difference]: Finished difference Result 323 states and 538 transitions. [2018-11-23 12:46:52,965 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:52,966 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 51 [2018-11-23 12:46:52,966 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:52,968 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:52,991 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 538 transitions. [2018-11-23 12:46:52,992 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:53,004 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 538 transitions. [2018-11-23 12:46:53,004 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 538 transitions. [2018-11-23 12:46:53,996 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 538 edges. 538 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:54,020 INFO L225 Difference]: With dead ends: 323 [2018-11-23 12:46:54,020 INFO L226 Difference]: Without dead ends: 164 [2018-11-23 12:46:54,025 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:54,047 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 164 states. [2018-11-23 12:46:54,208 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 164 to 147. [2018-11-23 12:46:54,208 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:54,209 INFO L82 GeneralOperation]: Start isEquivalent. First operand 164 states. Second operand 147 states. [2018-11-23 12:46:54,209 INFO L74 IsIncluded]: Start isIncluded. First operand 164 states. Second operand 147 states. [2018-11-23 12:46:54,210 INFO L87 Difference]: Start difference. First operand 164 states. Second operand 147 states. [2018-11-23 12:46:54,221 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:54,222 INFO L93 Difference]: Finished difference Result 164 states and 243 transitions. [2018-11-23 12:46:54,222 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 243 transitions. [2018-11-23 12:46:54,224 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:54,225 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:54,225 INFO L74 IsIncluded]: Start isIncluded. First operand 147 states. Second operand 164 states. [2018-11-23 12:46:54,225 INFO L87 Difference]: Start difference. First operand 147 states. Second operand 164 states. [2018-11-23 12:46:54,236 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:54,236 INFO L93 Difference]: Finished difference Result 164 states and 243 transitions. [2018-11-23 12:46:54,236 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 243 transitions. [2018-11-23 12:46:54,238 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:54,238 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:54,239 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:54,239 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:54,239 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 147 states. [2018-11-23 12:46:54,248 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 147 states to 147 states and 222 transitions. [2018-11-23 12:46:54,250 INFO L78 Accepts]: Start accepts. Automaton has 147 states and 222 transitions. Word has length 51 [2018-11-23 12:46:54,250 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:54,250 INFO L480 AbstractCegarLoop]: Abstraction has 147 states and 222 transitions. [2018-11-23 12:46:54,251 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:54,251 INFO L276 IsEmpty]: Start isEmpty. Operand 147 states and 222 transitions. [2018-11-23 12:46:54,253 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2018-11-23 12:46:54,253 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:54,254 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:54,254 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:54,254 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:54,254 INFO L82 PathProgramCache]: Analyzing trace with hash -772543898, now seen corresponding path program 1 times [2018-11-23 12:46:54,255 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:54,255 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:54,257 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:54,257 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:54,257 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:54,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:54,740 INFO L256 TraceCheckUtils]: 0: Hoare triple {1056#true} call ULTIMATE.init(); {1056#true} is VALID [2018-11-23 12:46:54,741 INFO L273 TraceCheckUtils]: 1: Hoare triple {1056#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {1056#true} is VALID [2018-11-23 12:46:54,741 INFO L273 TraceCheckUtils]: 2: Hoare triple {1056#true} assume true; {1056#true} is VALID [2018-11-23 12:46:54,741 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1056#true} {1056#true} #604#return; {1056#true} is VALID [2018-11-23 12:46:54,741 INFO L256 TraceCheckUtils]: 4: Hoare triple {1056#true} call #t~ret138 := main(); {1056#true} is VALID [2018-11-23 12:46:54,742 INFO L273 TraceCheckUtils]: 5: Hoare triple {1056#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {1056#true} is VALID [2018-11-23 12:46:54,742 INFO L256 TraceCheckUtils]: 6: Hoare triple {1056#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {1056#true} is VALID [2018-11-23 12:46:54,747 INFO L273 TraceCheckUtils]: 7: Hoare triple {1056#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:54,748 INFO L273 TraceCheckUtils]: 8: Hoare triple {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:54,749 INFO L273 TraceCheckUtils]: 9: Hoare triple {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:54,769 INFO L273 TraceCheckUtils]: 10: Hoare triple {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:54,777 INFO L273 TraceCheckUtils]: 11: Hoare triple {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:54,781 INFO L273 TraceCheckUtils]: 12: Hoare triple {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:54,781 INFO L273 TraceCheckUtils]: 13: Hoare triple {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:54,783 INFO L273 TraceCheckUtils]: 14: Hoare triple {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:54,783 INFO L273 TraceCheckUtils]: 15: Hoare triple {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:54,785 INFO L273 TraceCheckUtils]: 16: Hoare triple {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:54,786 INFO L273 TraceCheckUtils]: 17: Hoare triple {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:54,787 INFO L273 TraceCheckUtils]: 18: Hoare triple {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:46:54,804 INFO L273 TraceCheckUtils]: 19: Hoare triple {1058#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {1059#(= |ssl3_accept_#t~mem29| 8464)} is VALID [2018-11-23 12:46:54,820 INFO L273 TraceCheckUtils]: 20: Hoare triple {1059#(= |ssl3_accept_#t~mem29| 8464)} assume 8480 == #t~mem29;havoc #t~mem29; {1057#false} is VALID [2018-11-23 12:46:54,820 INFO L273 TraceCheckUtils]: 21: Hoare triple {1057#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {1057#false} is VALID [2018-11-23 12:46:54,821 INFO L273 TraceCheckUtils]: 22: Hoare triple {1057#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,821 INFO L273 TraceCheckUtils]: 23: Hoare triple {1057#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,822 INFO L273 TraceCheckUtils]: 24: Hoare triple {1057#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {1057#false} is VALID [2018-11-23 12:46:54,822 INFO L273 TraceCheckUtils]: 25: Hoare triple {1057#false} ~skip~0 := 0; {1057#false} is VALID [2018-11-23 12:46:54,822 INFO L273 TraceCheckUtils]: 26: Hoare triple {1057#false} assume !false; {1057#false} is VALID [2018-11-23 12:46:54,823 INFO L273 TraceCheckUtils]: 27: Hoare triple {1057#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,823 INFO L273 TraceCheckUtils]: 28: Hoare triple {1057#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,823 INFO L273 TraceCheckUtils]: 29: Hoare triple {1057#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,823 INFO L273 TraceCheckUtils]: 30: Hoare triple {1057#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,824 INFO L273 TraceCheckUtils]: 31: Hoare triple {1057#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,824 INFO L273 TraceCheckUtils]: 32: Hoare triple {1057#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,824 INFO L273 TraceCheckUtils]: 33: Hoare triple {1057#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,825 INFO L273 TraceCheckUtils]: 34: Hoare triple {1057#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,825 INFO L273 TraceCheckUtils]: 35: Hoare triple {1057#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,825 INFO L273 TraceCheckUtils]: 36: Hoare triple {1057#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,826 INFO L273 TraceCheckUtils]: 37: Hoare triple {1057#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,826 INFO L273 TraceCheckUtils]: 38: Hoare triple {1057#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,826 INFO L273 TraceCheckUtils]: 39: Hoare triple {1057#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,827 INFO L273 TraceCheckUtils]: 40: Hoare triple {1057#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,827 INFO L273 TraceCheckUtils]: 41: Hoare triple {1057#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,827 INFO L273 TraceCheckUtils]: 42: Hoare triple {1057#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,828 INFO L273 TraceCheckUtils]: 43: Hoare triple {1057#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,828 INFO L273 TraceCheckUtils]: 44: Hoare triple {1057#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,828 INFO L273 TraceCheckUtils]: 45: Hoare triple {1057#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,829 INFO L273 TraceCheckUtils]: 46: Hoare triple {1057#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,829 INFO L273 TraceCheckUtils]: 47: Hoare triple {1057#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,829 INFO L273 TraceCheckUtils]: 48: Hoare triple {1057#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,829 INFO L273 TraceCheckUtils]: 49: Hoare triple {1057#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,830 INFO L273 TraceCheckUtils]: 50: Hoare triple {1057#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,830 INFO L273 TraceCheckUtils]: 51: Hoare triple {1057#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,830 INFO L273 TraceCheckUtils]: 52: Hoare triple {1057#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,830 INFO L273 TraceCheckUtils]: 53: Hoare triple {1057#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,831 INFO L273 TraceCheckUtils]: 54: Hoare triple {1057#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,831 INFO L273 TraceCheckUtils]: 55: Hoare triple {1057#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,831 INFO L273 TraceCheckUtils]: 56: Hoare triple {1057#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,832 INFO L273 TraceCheckUtils]: 57: Hoare triple {1057#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,832 INFO L273 TraceCheckUtils]: 58: Hoare triple {1057#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,832 INFO L273 TraceCheckUtils]: 59: Hoare triple {1057#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {1057#false} is VALID [2018-11-23 12:46:54,832 INFO L273 TraceCheckUtils]: 60: Hoare triple {1057#false} assume 8672 == #t~mem56;havoc #t~mem56; {1057#false} is VALID [2018-11-23 12:46:54,833 INFO L273 TraceCheckUtils]: 61: Hoare triple {1057#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {1057#false} is VALID [2018-11-23 12:46:54,833 INFO L273 TraceCheckUtils]: 62: Hoare triple {1057#false} assume 4 == ~blastFlag~0; {1057#false} is VALID [2018-11-23 12:46:54,833 INFO L273 TraceCheckUtils]: 63: Hoare triple {1057#false} assume !false; {1057#false} is VALID [2018-11-23 12:46:54,843 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:46:54,843 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:54,843 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:46:54,845 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 64 [2018-11-23 12:46:54,846 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:54,846 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:46:54,981 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 64 edges. 64 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:54,981 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:46:54,982 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:46:54,982 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:46:54,982 INFO L87 Difference]: Start difference. First operand 147 states and 222 transitions. Second operand 4 states. [2018-11-23 12:46:56,358 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:56,358 INFO L93 Difference]: Finished difference Result 286 states and 429 transitions. [2018-11-23 12:46:56,358 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:46:56,359 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 64 [2018-11-23 12:46:56,359 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:56,359 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:56,366 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 429 transitions. [2018-11-23 12:46:56,366 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:46:56,373 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 429 transitions. [2018-11-23 12:46:56,374 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 429 transitions. [2018-11-23 12:46:57,333 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 429 edges. 429 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:57,338 INFO L225 Difference]: With dead ends: 286 [2018-11-23 12:46:57,338 INFO L226 Difference]: Without dead ends: 164 [2018-11-23 12:46:57,340 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:57,341 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 164 states. [2018-11-23 12:46:57,463 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 164 to 147. [2018-11-23 12:46:57,463 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:46:57,463 INFO L82 GeneralOperation]: Start isEquivalent. First operand 164 states. Second operand 147 states. [2018-11-23 12:46:57,463 INFO L74 IsIncluded]: Start isIncluded. First operand 164 states. Second operand 147 states. [2018-11-23 12:46:57,463 INFO L87 Difference]: Start difference. First operand 164 states. Second operand 147 states. [2018-11-23 12:46:57,474 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:57,474 INFO L93 Difference]: Finished difference Result 164 states and 242 transitions. [2018-11-23 12:46:57,474 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 242 transitions. [2018-11-23 12:46:57,476 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:57,476 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:57,476 INFO L74 IsIncluded]: Start isIncluded. First operand 147 states. Second operand 164 states. [2018-11-23 12:46:57,476 INFO L87 Difference]: Start difference. First operand 147 states. Second operand 164 states. [2018-11-23 12:46:57,483 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:57,483 INFO L93 Difference]: Finished difference Result 164 states and 242 transitions. [2018-11-23 12:46:57,483 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 242 transitions. [2018-11-23 12:46:57,484 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:46:57,484 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:46:57,485 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:46:57,485 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:46:57,485 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 147 states. [2018-11-23 12:46:57,491 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 147 states to 147 states and 221 transitions. [2018-11-23 12:46:57,491 INFO L78 Accepts]: Start accepts. Automaton has 147 states and 221 transitions. Word has length 64 [2018-11-23 12:46:57,491 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:46:57,491 INFO L480 AbstractCegarLoop]: Abstraction has 147 states and 221 transitions. [2018-11-23 12:46:57,492 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:46:57,492 INFO L276 IsEmpty]: Start isEmpty. Operand 147 states and 221 transitions. [2018-11-23 12:46:57,493 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2018-11-23 12:46:57,493 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:46:57,494 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:46:57,494 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:46:57,494 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:46:57,494 INFO L82 PathProgramCache]: Analyzing trace with hash 579930898, now seen corresponding path program 1 times [2018-11-23 12:46:57,494 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:46:57,495 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:46:57,496 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:57,496 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:46:57,496 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:46:57,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:46:57,737 INFO L256 TraceCheckUtils]: 0: Hoare triple {1913#true} call ULTIMATE.init(); {1913#true} is VALID [2018-11-23 12:46:57,738 INFO L273 TraceCheckUtils]: 1: Hoare triple {1913#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {1913#true} is VALID [2018-11-23 12:46:57,738 INFO L273 TraceCheckUtils]: 2: Hoare triple {1913#true} assume true; {1913#true} is VALID [2018-11-23 12:46:57,739 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1913#true} {1913#true} #604#return; {1913#true} is VALID [2018-11-23 12:46:57,739 INFO L256 TraceCheckUtils]: 4: Hoare triple {1913#true} call #t~ret138 := main(); {1913#true} is VALID [2018-11-23 12:46:57,739 INFO L273 TraceCheckUtils]: 5: Hoare triple {1913#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {1913#true} is VALID [2018-11-23 12:46:57,740 INFO L256 TraceCheckUtils]: 6: Hoare triple {1913#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {1913#true} is VALID [2018-11-23 12:46:57,740 INFO L273 TraceCheckUtils]: 7: Hoare triple {1913#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {1913#true} is VALID [2018-11-23 12:46:57,740 INFO L273 TraceCheckUtils]: 8: Hoare triple {1913#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {1913#true} is VALID [2018-11-23 12:46:57,740 INFO L273 TraceCheckUtils]: 9: Hoare triple {1913#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {1913#true} is VALID [2018-11-23 12:46:57,741 INFO L273 TraceCheckUtils]: 10: Hoare triple {1913#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {1913#true} is VALID [2018-11-23 12:46:57,741 INFO L273 TraceCheckUtils]: 11: Hoare triple {1913#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {1913#true} is VALID [2018-11-23 12:46:57,741 INFO L273 TraceCheckUtils]: 12: Hoare triple {1913#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {1913#true} is VALID [2018-11-23 12:46:57,741 INFO L273 TraceCheckUtils]: 13: Hoare triple {1913#true} assume !false; {1913#true} is VALID [2018-11-23 12:46:57,755 INFO L273 TraceCheckUtils]: 14: Hoare triple {1913#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1915#(= |ssl3_accept_#t~mem24| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:46:57,756 INFO L273 TraceCheckUtils]: 15: Hoare triple {1915#(= |ssl3_accept_#t~mem24| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {1916#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:46:57,759 INFO L273 TraceCheckUtils]: 16: Hoare triple {1916#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume 16384 == #t~mem25;havoc #t~mem25; {1916#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:46:57,761 INFO L273 TraceCheckUtils]: 17: Hoare triple {1916#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} call write~int(1, ~s.base, 36 + ~s.offset, 4); {1916#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:46:57,762 INFO L273 TraceCheckUtils]: 18: Hoare triple {1916#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {1916#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:46:57,762 INFO L273 TraceCheckUtils]: 19: Hoare triple {1916#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {1916#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:46:57,763 INFO L273 TraceCheckUtils]: 20: Hoare triple {1916#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {1916#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:46:57,764 INFO L273 TraceCheckUtils]: 21: Hoare triple {1916#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {1916#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:46:57,765 INFO L273 TraceCheckUtils]: 22: Hoare triple {1916#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {1917#(not (= 12292 |ssl3_accept_#t~mem62|))} is VALID [2018-11-23 12:46:57,765 INFO L273 TraceCheckUtils]: 23: Hoare triple {1917#(not (= 12292 |ssl3_accept_#t~mem62|))} assume !(12292 != #t~mem62);havoc #t~mem62;call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem66 := read~int(#t~mem65.base, 76 + #t~mem65.offset, 4);call write~int(1 + #t~mem66, #t~mem65.base, 76 + #t~mem65.offset, 4);havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66;call write~int(8480, ~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,765 INFO L273 TraceCheckUtils]: 24: Hoare triple {1914#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,766 INFO L273 TraceCheckUtils]: 25: Hoare triple {1914#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {1914#false} is VALID [2018-11-23 12:46:57,766 INFO L273 TraceCheckUtils]: 26: Hoare triple {1914#false} ~skip~0 := 0; {1914#false} is VALID [2018-11-23 12:46:57,766 INFO L273 TraceCheckUtils]: 27: Hoare triple {1914#false} assume !false; {1914#false} is VALID [2018-11-23 12:46:57,767 INFO L273 TraceCheckUtils]: 28: Hoare triple {1914#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,767 INFO L273 TraceCheckUtils]: 29: Hoare triple {1914#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,767 INFO L273 TraceCheckUtils]: 30: Hoare triple {1914#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,768 INFO L273 TraceCheckUtils]: 31: Hoare triple {1914#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,768 INFO L273 TraceCheckUtils]: 32: Hoare triple {1914#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,768 INFO L273 TraceCheckUtils]: 33: Hoare triple {1914#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,769 INFO L273 TraceCheckUtils]: 34: Hoare triple {1914#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,769 INFO L273 TraceCheckUtils]: 35: Hoare triple {1914#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,769 INFO L273 TraceCheckUtils]: 36: Hoare triple {1914#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,769 INFO L273 TraceCheckUtils]: 37: Hoare triple {1914#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,770 INFO L273 TraceCheckUtils]: 38: Hoare triple {1914#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,770 INFO L273 TraceCheckUtils]: 39: Hoare triple {1914#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,770 INFO L273 TraceCheckUtils]: 40: Hoare triple {1914#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,770 INFO L273 TraceCheckUtils]: 41: Hoare triple {1914#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,770 INFO L273 TraceCheckUtils]: 42: Hoare triple {1914#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,770 INFO L273 TraceCheckUtils]: 43: Hoare triple {1914#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,771 INFO L273 TraceCheckUtils]: 44: Hoare triple {1914#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,771 INFO L273 TraceCheckUtils]: 45: Hoare triple {1914#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,771 INFO L273 TraceCheckUtils]: 46: Hoare triple {1914#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,771 INFO L273 TraceCheckUtils]: 47: Hoare triple {1914#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,771 INFO L273 TraceCheckUtils]: 48: Hoare triple {1914#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,772 INFO L273 TraceCheckUtils]: 49: Hoare triple {1914#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,772 INFO L273 TraceCheckUtils]: 50: Hoare triple {1914#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,772 INFO L273 TraceCheckUtils]: 51: Hoare triple {1914#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,772 INFO L273 TraceCheckUtils]: 52: Hoare triple {1914#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,772 INFO L273 TraceCheckUtils]: 53: Hoare triple {1914#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,773 INFO L273 TraceCheckUtils]: 54: Hoare triple {1914#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,773 INFO L273 TraceCheckUtils]: 55: Hoare triple {1914#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,773 INFO L273 TraceCheckUtils]: 56: Hoare triple {1914#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,773 INFO L273 TraceCheckUtils]: 57: Hoare triple {1914#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,773 INFO L273 TraceCheckUtils]: 58: Hoare triple {1914#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,774 INFO L273 TraceCheckUtils]: 59: Hoare triple {1914#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,774 INFO L273 TraceCheckUtils]: 60: Hoare triple {1914#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {1914#false} is VALID [2018-11-23 12:46:57,774 INFO L273 TraceCheckUtils]: 61: Hoare triple {1914#false} assume 8672 == #t~mem56;havoc #t~mem56; {1914#false} is VALID [2018-11-23 12:46:57,774 INFO L273 TraceCheckUtils]: 62: Hoare triple {1914#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {1914#false} is VALID [2018-11-23 12:46:57,774 INFO L273 TraceCheckUtils]: 63: Hoare triple {1914#false} assume 4 == ~blastFlag~0; {1914#false} is VALID [2018-11-23 12:46:57,774 INFO L273 TraceCheckUtils]: 64: Hoare triple {1914#false} assume !false; {1914#false} is VALID [2018-11-23 12:46:57,777 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:46:57,777 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:46:57,778 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 12:46:57,778 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 65 [2018-11-23 12:46:57,778 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:46:57,778 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2018-11-23 12:46:57,854 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 65 edges. 65 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:46:57,855 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 12:46:57,855 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 12:46:57,855 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:46:57,856 INFO L87 Difference]: Start difference. First operand 147 states and 221 transitions. Second operand 5 states. [2018-11-23 12:46:59,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:46:59,688 INFO L93 Difference]: Finished difference Result 290 states and 437 transitions. [2018-11-23 12:46:59,689 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-23 12:46:59,689 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 65 [2018-11-23 12:46:59,689 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:46:59,689 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-23 12:46:59,695 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 419 transitions. [2018-11-23 12:46:59,695 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-23 12:46:59,700 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 419 transitions. [2018-11-23 12:46:59,700 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 419 transitions. [2018-11-23 12:47:00,304 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 419 edges. 419 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:00,309 INFO L225 Difference]: With dead ends: 290 [2018-11-23 12:47:00,309 INFO L226 Difference]: Without dead ends: 168 [2018-11-23 12:47:00,310 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2018-11-23 12:47:00,310 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 168 states. [2018-11-23 12:47:00,386 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 168 to 167. [2018-11-23 12:47:00,386 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:00,386 INFO L82 GeneralOperation]: Start isEquivalent. First operand 168 states. Second operand 167 states. [2018-11-23 12:47:00,386 INFO L74 IsIncluded]: Start isIncluded. First operand 168 states. Second operand 167 states. [2018-11-23 12:47:00,386 INFO L87 Difference]: Start difference. First operand 168 states. Second operand 167 states. [2018-11-23 12:47:00,393 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:00,393 INFO L93 Difference]: Finished difference Result 168 states and 248 transitions. [2018-11-23 12:47:00,393 INFO L276 IsEmpty]: Start isEmpty. Operand 168 states and 248 transitions. [2018-11-23 12:47:00,394 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:00,394 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:00,394 INFO L74 IsIncluded]: Start isIncluded. First operand 167 states. Second operand 168 states. [2018-11-23 12:47:00,395 INFO L87 Difference]: Start difference. First operand 167 states. Second operand 168 states. [2018-11-23 12:47:00,409 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:00,410 INFO L93 Difference]: Finished difference Result 168 states and 248 transitions. [2018-11-23 12:47:00,410 INFO L276 IsEmpty]: Start isEmpty. Operand 168 states and 248 transitions. [2018-11-23 12:47:00,412 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:00,412 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:00,413 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:00,413 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:00,413 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 167 states. [2018-11-23 12:47:00,418 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 167 states to 167 states and 247 transitions. [2018-11-23 12:47:00,418 INFO L78 Accepts]: Start accepts. Automaton has 167 states and 247 transitions. Word has length 65 [2018-11-23 12:47:00,419 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:00,419 INFO L480 AbstractCegarLoop]: Abstraction has 167 states and 247 transitions. [2018-11-23 12:47:00,419 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 12:47:00,419 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 247 transitions. [2018-11-23 12:47:00,420 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2018-11-23 12:47:00,420 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:00,421 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:00,421 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:00,421 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:00,421 INFO L82 PathProgramCache]: Analyzing trace with hash -1640320823, now seen corresponding path program 1 times [2018-11-23 12:47:00,421 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:00,421 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:00,423 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:00,423 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:00,423 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:00,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:00,620 INFO L256 TraceCheckUtils]: 0: Hoare triple {2806#true} call ULTIMATE.init(); {2806#true} is VALID [2018-11-23 12:47:00,621 INFO L273 TraceCheckUtils]: 1: Hoare triple {2806#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {2806#true} is VALID [2018-11-23 12:47:00,621 INFO L273 TraceCheckUtils]: 2: Hoare triple {2806#true} assume true; {2806#true} is VALID [2018-11-23 12:47:00,621 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {2806#true} {2806#true} #604#return; {2806#true} is VALID [2018-11-23 12:47:00,622 INFO L256 TraceCheckUtils]: 4: Hoare triple {2806#true} call #t~ret138 := main(); {2806#true} is VALID [2018-11-23 12:47:00,622 INFO L273 TraceCheckUtils]: 5: Hoare triple {2806#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {2806#true} is VALID [2018-11-23 12:47:00,622 INFO L256 TraceCheckUtils]: 6: Hoare triple {2806#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {2806#true} is VALID [2018-11-23 12:47:00,625 INFO L273 TraceCheckUtils]: 7: Hoare triple {2806#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:00,625 INFO L273 TraceCheckUtils]: 8: Hoare triple {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:00,627 INFO L273 TraceCheckUtils]: 9: Hoare triple {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:00,629 INFO L273 TraceCheckUtils]: 10: Hoare triple {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:00,630 INFO L273 TraceCheckUtils]: 11: Hoare triple {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:00,635 INFO L273 TraceCheckUtils]: 12: Hoare triple {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:00,636 INFO L273 TraceCheckUtils]: 13: Hoare triple {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:00,637 INFO L273 TraceCheckUtils]: 14: Hoare triple {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:00,637 INFO L273 TraceCheckUtils]: 15: Hoare triple {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:00,638 INFO L273 TraceCheckUtils]: 16: Hoare triple {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:00,638 INFO L273 TraceCheckUtils]: 17: Hoare triple {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:00,639 INFO L273 TraceCheckUtils]: 18: Hoare triple {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:00,639 INFO L273 TraceCheckUtils]: 19: Hoare triple {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:00,640 INFO L273 TraceCheckUtils]: 20: Hoare triple {2808#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {2809#(= |ssl3_accept_#t~mem30| 8464)} is VALID [2018-11-23 12:47:00,640 INFO L273 TraceCheckUtils]: 21: Hoare triple {2809#(= |ssl3_accept_#t~mem30| 8464)} assume 8481 == #t~mem30;havoc #t~mem30; {2807#false} is VALID [2018-11-23 12:47:00,640 INFO L273 TraceCheckUtils]: 22: Hoare triple {2807#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {2807#false} is VALID [2018-11-23 12:47:00,641 INFO L273 TraceCheckUtils]: 23: Hoare triple {2807#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,641 INFO L273 TraceCheckUtils]: 24: Hoare triple {2807#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,641 INFO L273 TraceCheckUtils]: 25: Hoare triple {2807#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {2807#false} is VALID [2018-11-23 12:47:00,641 INFO L273 TraceCheckUtils]: 26: Hoare triple {2807#false} ~skip~0 := 0; {2807#false} is VALID [2018-11-23 12:47:00,642 INFO L273 TraceCheckUtils]: 27: Hoare triple {2807#false} assume !false; {2807#false} is VALID [2018-11-23 12:47:00,642 INFO L273 TraceCheckUtils]: 28: Hoare triple {2807#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,643 INFO L273 TraceCheckUtils]: 29: Hoare triple {2807#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,643 INFO L273 TraceCheckUtils]: 30: Hoare triple {2807#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,643 INFO L273 TraceCheckUtils]: 31: Hoare triple {2807#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,644 INFO L273 TraceCheckUtils]: 32: Hoare triple {2807#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,644 INFO L273 TraceCheckUtils]: 33: Hoare triple {2807#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,644 INFO L273 TraceCheckUtils]: 34: Hoare triple {2807#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,644 INFO L273 TraceCheckUtils]: 35: Hoare triple {2807#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,645 INFO L273 TraceCheckUtils]: 36: Hoare triple {2807#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,645 INFO L273 TraceCheckUtils]: 37: Hoare triple {2807#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,645 INFO L273 TraceCheckUtils]: 38: Hoare triple {2807#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,645 INFO L273 TraceCheckUtils]: 39: Hoare triple {2807#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,645 INFO L273 TraceCheckUtils]: 40: Hoare triple {2807#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,646 INFO L273 TraceCheckUtils]: 41: Hoare triple {2807#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,646 INFO L273 TraceCheckUtils]: 42: Hoare triple {2807#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,646 INFO L273 TraceCheckUtils]: 43: Hoare triple {2807#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,646 INFO L273 TraceCheckUtils]: 44: Hoare triple {2807#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,647 INFO L273 TraceCheckUtils]: 45: Hoare triple {2807#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,647 INFO L273 TraceCheckUtils]: 46: Hoare triple {2807#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,647 INFO L273 TraceCheckUtils]: 47: Hoare triple {2807#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,647 INFO L273 TraceCheckUtils]: 48: Hoare triple {2807#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,648 INFO L273 TraceCheckUtils]: 49: Hoare triple {2807#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,648 INFO L273 TraceCheckUtils]: 50: Hoare triple {2807#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,648 INFO L273 TraceCheckUtils]: 51: Hoare triple {2807#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,648 INFO L273 TraceCheckUtils]: 52: Hoare triple {2807#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,649 INFO L273 TraceCheckUtils]: 53: Hoare triple {2807#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,649 INFO L273 TraceCheckUtils]: 54: Hoare triple {2807#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,649 INFO L273 TraceCheckUtils]: 55: Hoare triple {2807#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,649 INFO L273 TraceCheckUtils]: 56: Hoare triple {2807#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,649 INFO L273 TraceCheckUtils]: 57: Hoare triple {2807#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,650 INFO L273 TraceCheckUtils]: 58: Hoare triple {2807#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,650 INFO L273 TraceCheckUtils]: 59: Hoare triple {2807#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,650 INFO L273 TraceCheckUtils]: 60: Hoare triple {2807#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {2807#false} is VALID [2018-11-23 12:47:00,650 INFO L273 TraceCheckUtils]: 61: Hoare triple {2807#false} assume 8672 == #t~mem56;havoc #t~mem56; {2807#false} is VALID [2018-11-23 12:47:00,651 INFO L273 TraceCheckUtils]: 62: Hoare triple {2807#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {2807#false} is VALID [2018-11-23 12:47:00,651 INFO L273 TraceCheckUtils]: 63: Hoare triple {2807#false} assume 4 == ~blastFlag~0; {2807#false} is VALID [2018-11-23 12:47:00,651 INFO L273 TraceCheckUtils]: 64: Hoare triple {2807#false} assume !false; {2807#false} is VALID [2018-11-23 12:47:00,656 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:00,656 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:00,656 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:00,656 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 65 [2018-11-23 12:47:00,657 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:00,657 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:00,730 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 65 edges. 65 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:00,730 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:00,730 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:00,730 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:00,731 INFO L87 Difference]: Start difference. First operand 167 states and 247 transitions. Second operand 4 states. [2018-11-23 12:47:01,859 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:01,860 INFO L93 Difference]: Finished difference Result 323 states and 477 transitions. [2018-11-23 12:47:01,860 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:01,860 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 65 [2018-11-23 12:47:01,860 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:01,861 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:01,866 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 423 transitions. [2018-11-23 12:47:01,866 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:01,871 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 423 transitions. [2018-11-23 12:47:01,871 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 423 transitions. [2018-11-23 12:47:02,323 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 423 edges. 423 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:02,328 INFO L225 Difference]: With dead ends: 323 [2018-11-23 12:47:02,328 INFO L226 Difference]: Without dead ends: 181 [2018-11-23 12:47:02,329 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:02,330 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 181 states. [2018-11-23 12:47:02,406 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 181 to 167. [2018-11-23 12:47:02,407 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:02,407 INFO L82 GeneralOperation]: Start isEquivalent. First operand 181 states. Second operand 167 states. [2018-11-23 12:47:02,407 INFO L74 IsIncluded]: Start isIncluded. First operand 181 states. Second operand 167 states. [2018-11-23 12:47:02,407 INFO L87 Difference]: Start difference. First operand 181 states. Second operand 167 states. [2018-11-23 12:47:02,414 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:02,414 INFO L93 Difference]: Finished difference Result 181 states and 263 transitions. [2018-11-23 12:47:02,414 INFO L276 IsEmpty]: Start isEmpty. Operand 181 states and 263 transitions. [2018-11-23 12:47:02,415 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:02,415 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:02,415 INFO L74 IsIncluded]: Start isIncluded. First operand 167 states. Second operand 181 states. [2018-11-23 12:47:02,415 INFO L87 Difference]: Start difference. First operand 167 states. Second operand 181 states. [2018-11-23 12:47:02,422 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:02,422 INFO L93 Difference]: Finished difference Result 181 states and 263 transitions. [2018-11-23 12:47:02,422 INFO L276 IsEmpty]: Start isEmpty. Operand 181 states and 263 transitions. [2018-11-23 12:47:02,423 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:02,423 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:02,423 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:02,423 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:02,423 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 167 states. [2018-11-23 12:47:02,430 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 167 states to 167 states and 246 transitions. [2018-11-23 12:47:02,430 INFO L78 Accepts]: Start accepts. Automaton has 167 states and 246 transitions. Word has length 65 [2018-11-23 12:47:02,430 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:02,431 INFO L480 AbstractCegarLoop]: Abstraction has 167 states and 246 transitions. [2018-11-23 12:47:02,431 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:02,431 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 246 transitions. [2018-11-23 12:47:02,432 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2018-11-23 12:47:02,432 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:02,432 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:02,432 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:02,433 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:02,433 INFO L82 PathProgramCache]: Analyzing trace with hash -1139669302, now seen corresponding path program 1 times [2018-11-23 12:47:02,433 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:02,433 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:02,435 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:02,435 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:02,435 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:02,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:02,831 INFO L256 TraceCheckUtils]: 0: Hoare triple {3761#true} call ULTIMATE.init(); {3761#true} is VALID [2018-11-23 12:47:02,831 INFO L273 TraceCheckUtils]: 1: Hoare triple {3761#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {3761#true} is VALID [2018-11-23 12:47:02,832 INFO L273 TraceCheckUtils]: 2: Hoare triple {3761#true} assume true; {3761#true} is VALID [2018-11-23 12:47:02,832 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {3761#true} {3761#true} #604#return; {3761#true} is VALID [2018-11-23 12:47:02,832 INFO L256 TraceCheckUtils]: 4: Hoare triple {3761#true} call #t~ret138 := main(); {3761#true} is VALID [2018-11-23 12:47:02,833 INFO L273 TraceCheckUtils]: 5: Hoare triple {3761#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {3761#true} is VALID [2018-11-23 12:47:02,833 INFO L256 TraceCheckUtils]: 6: Hoare triple {3761#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {3761#true} is VALID [2018-11-23 12:47:02,835 INFO L273 TraceCheckUtils]: 7: Hoare triple {3761#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:02,836 INFO L273 TraceCheckUtils]: 8: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:02,840 INFO L273 TraceCheckUtils]: 9: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:02,843 INFO L273 TraceCheckUtils]: 10: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:02,845 INFO L273 TraceCheckUtils]: 11: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:02,846 INFO L273 TraceCheckUtils]: 12: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:02,847 INFO L273 TraceCheckUtils]: 13: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:02,847 INFO L273 TraceCheckUtils]: 14: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:02,848 INFO L273 TraceCheckUtils]: 15: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:02,848 INFO L273 TraceCheckUtils]: 16: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:02,849 INFO L273 TraceCheckUtils]: 17: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:02,850 INFO L273 TraceCheckUtils]: 18: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:02,850 INFO L273 TraceCheckUtils]: 19: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:02,851 INFO L273 TraceCheckUtils]: 20: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:02,852 INFO L273 TraceCheckUtils]: 21: Hoare triple {3763#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {3764#(= |ssl3_accept_#t~mem31| 8464)} is VALID [2018-11-23 12:47:02,853 INFO L273 TraceCheckUtils]: 22: Hoare triple {3764#(= |ssl3_accept_#t~mem31| 8464)} assume 8482 == #t~mem31;havoc #t~mem31; {3762#false} is VALID [2018-11-23 12:47:02,853 INFO L273 TraceCheckUtils]: 23: Hoare triple {3762#false} call write~int(3, ~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,854 INFO L273 TraceCheckUtils]: 24: Hoare triple {3762#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,854 INFO L273 TraceCheckUtils]: 25: Hoare triple {3762#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {3762#false} is VALID [2018-11-23 12:47:02,854 INFO L273 TraceCheckUtils]: 26: Hoare triple {3762#false} ~skip~0 := 0; {3762#false} is VALID [2018-11-23 12:47:02,855 INFO L273 TraceCheckUtils]: 27: Hoare triple {3762#false} assume !false; {3762#false} is VALID [2018-11-23 12:47:02,855 INFO L273 TraceCheckUtils]: 28: Hoare triple {3762#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,855 INFO L273 TraceCheckUtils]: 29: Hoare triple {3762#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,856 INFO L273 TraceCheckUtils]: 30: Hoare triple {3762#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,856 INFO L273 TraceCheckUtils]: 31: Hoare triple {3762#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,856 INFO L273 TraceCheckUtils]: 32: Hoare triple {3762#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,857 INFO L273 TraceCheckUtils]: 33: Hoare triple {3762#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,857 INFO L273 TraceCheckUtils]: 34: Hoare triple {3762#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,857 INFO L273 TraceCheckUtils]: 35: Hoare triple {3762#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,857 INFO L273 TraceCheckUtils]: 36: Hoare triple {3762#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,858 INFO L273 TraceCheckUtils]: 37: Hoare triple {3762#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,858 INFO L273 TraceCheckUtils]: 38: Hoare triple {3762#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,858 INFO L273 TraceCheckUtils]: 39: Hoare triple {3762#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,858 INFO L273 TraceCheckUtils]: 40: Hoare triple {3762#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,858 INFO L273 TraceCheckUtils]: 41: Hoare triple {3762#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,859 INFO L273 TraceCheckUtils]: 42: Hoare triple {3762#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,859 INFO L273 TraceCheckUtils]: 43: Hoare triple {3762#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,859 INFO L273 TraceCheckUtils]: 44: Hoare triple {3762#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,859 INFO L273 TraceCheckUtils]: 45: Hoare triple {3762#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,859 INFO L273 TraceCheckUtils]: 46: Hoare triple {3762#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,859 INFO L273 TraceCheckUtils]: 47: Hoare triple {3762#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,860 INFO L273 TraceCheckUtils]: 48: Hoare triple {3762#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,860 INFO L273 TraceCheckUtils]: 49: Hoare triple {3762#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,860 INFO L273 TraceCheckUtils]: 50: Hoare triple {3762#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,860 INFO L273 TraceCheckUtils]: 51: Hoare triple {3762#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,860 INFO L273 TraceCheckUtils]: 52: Hoare triple {3762#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,861 INFO L273 TraceCheckUtils]: 53: Hoare triple {3762#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,861 INFO L273 TraceCheckUtils]: 54: Hoare triple {3762#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,861 INFO L273 TraceCheckUtils]: 55: Hoare triple {3762#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,861 INFO L273 TraceCheckUtils]: 56: Hoare triple {3762#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,861 INFO L273 TraceCheckUtils]: 57: Hoare triple {3762#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,862 INFO L273 TraceCheckUtils]: 58: Hoare triple {3762#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,862 INFO L273 TraceCheckUtils]: 59: Hoare triple {3762#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,862 INFO L273 TraceCheckUtils]: 60: Hoare triple {3762#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {3762#false} is VALID [2018-11-23 12:47:02,862 INFO L273 TraceCheckUtils]: 61: Hoare triple {3762#false} assume 8672 == #t~mem56;havoc #t~mem56; {3762#false} is VALID [2018-11-23 12:47:02,862 INFO L273 TraceCheckUtils]: 62: Hoare triple {3762#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {3762#false} is VALID [2018-11-23 12:47:02,863 INFO L273 TraceCheckUtils]: 63: Hoare triple {3762#false} assume 4 == ~blastFlag~0; {3762#false} is VALID [2018-11-23 12:47:02,863 INFO L273 TraceCheckUtils]: 64: Hoare triple {3762#false} assume !false; {3762#false} is VALID [2018-11-23 12:47:02,870 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:02,870 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:02,871 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:02,871 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 65 [2018-11-23 12:47:02,871 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:02,871 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:02,954 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 65 edges. 65 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:02,954 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:02,955 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:02,955 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:02,955 INFO L87 Difference]: Start difference. First operand 167 states and 246 transitions. Second operand 4 states. [2018-11-23 12:47:04,799 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:04,800 INFO L93 Difference]: Finished difference Result 322 states and 475 transitions. [2018-11-23 12:47:04,800 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:04,800 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 65 [2018-11-23 12:47:04,800 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:04,801 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:04,838 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 421 transitions. [2018-11-23 12:47:04,839 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:04,842 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 421 transitions. [2018-11-23 12:47:04,842 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 421 transitions. [2018-11-23 12:47:05,292 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 421 edges. 421 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:05,297 INFO L225 Difference]: With dead ends: 322 [2018-11-23 12:47:05,297 INFO L226 Difference]: Without dead ends: 180 [2018-11-23 12:47:05,298 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:05,298 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 180 states. [2018-11-23 12:47:05,400 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 180 to 167. [2018-11-23 12:47:05,400 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:05,400 INFO L82 GeneralOperation]: Start isEquivalent. First operand 180 states. Second operand 167 states. [2018-11-23 12:47:05,400 INFO L74 IsIncluded]: Start isIncluded. First operand 180 states. Second operand 167 states. [2018-11-23 12:47:05,400 INFO L87 Difference]: Start difference. First operand 180 states. Second operand 167 states. [2018-11-23 12:47:05,404 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:05,405 INFO L93 Difference]: Finished difference Result 180 states and 261 transitions. [2018-11-23 12:47:05,405 INFO L276 IsEmpty]: Start isEmpty. Operand 180 states and 261 transitions. [2018-11-23 12:47:05,405 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:05,406 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:05,406 INFO L74 IsIncluded]: Start isIncluded. First operand 167 states. Second operand 180 states. [2018-11-23 12:47:05,406 INFO L87 Difference]: Start difference. First operand 167 states. Second operand 180 states. [2018-11-23 12:47:05,410 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:05,410 INFO L93 Difference]: Finished difference Result 180 states and 261 transitions. [2018-11-23 12:47:05,411 INFO L276 IsEmpty]: Start isEmpty. Operand 180 states and 261 transitions. [2018-11-23 12:47:05,411 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:05,411 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:05,411 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:05,412 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:05,412 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 167 states. [2018-11-23 12:47:05,415 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 167 states to 167 states and 245 transitions. [2018-11-23 12:47:05,416 INFO L78 Accepts]: Start accepts. Automaton has 167 states and 245 transitions. Word has length 65 [2018-11-23 12:47:05,416 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:05,416 INFO L480 AbstractCegarLoop]: Abstraction has 167 states and 245 transitions. [2018-11-23 12:47:05,416 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:05,416 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 245 transitions. [2018-11-23 12:47:05,417 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2018-11-23 12:47:05,417 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:05,417 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:05,417 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:05,418 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:05,418 INFO L82 PathProgramCache]: Analyzing trace with hash 1222129443, now seen corresponding path program 1 times [2018-11-23 12:47:05,418 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:05,418 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:05,419 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:05,419 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:05,419 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:05,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:05,720 INFO L256 TraceCheckUtils]: 0: Hoare triple {4712#true} call ULTIMATE.init(); {4712#true} is VALID [2018-11-23 12:47:05,720 INFO L273 TraceCheckUtils]: 1: Hoare triple {4712#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {4712#true} is VALID [2018-11-23 12:47:05,720 INFO L273 TraceCheckUtils]: 2: Hoare triple {4712#true} assume true; {4712#true} is VALID [2018-11-23 12:47:05,721 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {4712#true} {4712#true} #604#return; {4712#true} is VALID [2018-11-23 12:47:05,721 INFO L256 TraceCheckUtils]: 4: Hoare triple {4712#true} call #t~ret138 := main(); {4712#true} is VALID [2018-11-23 12:47:05,721 INFO L273 TraceCheckUtils]: 5: Hoare triple {4712#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {4712#true} is VALID [2018-11-23 12:47:05,721 INFO L256 TraceCheckUtils]: 6: Hoare triple {4712#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {4712#true} is VALID [2018-11-23 12:47:05,723 INFO L273 TraceCheckUtils]: 7: Hoare triple {4712#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {4714#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:05,724 INFO L273 TraceCheckUtils]: 8: Hoare triple {4714#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {4714#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:05,726 INFO L273 TraceCheckUtils]: 9: Hoare triple {4714#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {4714#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:05,726 INFO L273 TraceCheckUtils]: 10: Hoare triple {4714#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {4714#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:05,729 INFO L273 TraceCheckUtils]: 11: Hoare triple {4714#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {4714#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:05,729 INFO L273 TraceCheckUtils]: 12: Hoare triple {4714#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {4714#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:05,731 INFO L273 TraceCheckUtils]: 13: Hoare triple {4714#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {4714#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:05,731 INFO L273 TraceCheckUtils]: 14: Hoare triple {4714#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {4714#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:05,734 INFO L273 TraceCheckUtils]: 15: Hoare triple {4714#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {4715#(= |ssl3_accept_#t~mem25| 8464)} is VALID [2018-11-23 12:47:05,734 INFO L273 TraceCheckUtils]: 16: Hoare triple {4715#(= |ssl3_accept_#t~mem25| 8464)} assume 16384 == #t~mem25;havoc #t~mem25; {4713#false} is VALID [2018-11-23 12:47:05,734 INFO L273 TraceCheckUtils]: 17: Hoare triple {4713#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,734 INFO L273 TraceCheckUtils]: 18: Hoare triple {4713#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {4713#false} is VALID [2018-11-23 12:47:05,735 INFO L273 TraceCheckUtils]: 19: Hoare triple {4713#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,735 INFO L273 TraceCheckUtils]: 20: Hoare triple {4713#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,735 INFO L273 TraceCheckUtils]: 21: Hoare triple {4713#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {4713#false} is VALID [2018-11-23 12:47:05,735 INFO L273 TraceCheckUtils]: 22: Hoare triple {4713#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,735 INFO L273 TraceCheckUtils]: 23: Hoare triple {4713#false} assume 12292 != #t~mem62;havoc #t~mem62; {4713#false} is VALID [2018-11-23 12:47:05,735 INFO L273 TraceCheckUtils]: 24: Hoare triple {4713#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {4713#false} is VALID [2018-11-23 12:47:05,736 INFO L273 TraceCheckUtils]: 25: Hoare triple {4713#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,736 INFO L273 TraceCheckUtils]: 26: Hoare triple {4713#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {4713#false} is VALID [2018-11-23 12:47:05,736 INFO L273 TraceCheckUtils]: 27: Hoare triple {4713#false} ~skip~0 := 0; {4713#false} is VALID [2018-11-23 12:47:05,736 INFO L273 TraceCheckUtils]: 28: Hoare triple {4713#false} assume !false; {4713#false} is VALID [2018-11-23 12:47:05,736 INFO L273 TraceCheckUtils]: 29: Hoare triple {4713#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,737 INFO L273 TraceCheckUtils]: 30: Hoare triple {4713#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,737 INFO L273 TraceCheckUtils]: 31: Hoare triple {4713#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,737 INFO L273 TraceCheckUtils]: 32: Hoare triple {4713#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,737 INFO L273 TraceCheckUtils]: 33: Hoare triple {4713#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,738 INFO L273 TraceCheckUtils]: 34: Hoare triple {4713#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,738 INFO L273 TraceCheckUtils]: 35: Hoare triple {4713#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,738 INFO L273 TraceCheckUtils]: 36: Hoare triple {4713#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,738 INFO L273 TraceCheckUtils]: 37: Hoare triple {4713#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,738 INFO L273 TraceCheckUtils]: 38: Hoare triple {4713#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,739 INFO L273 TraceCheckUtils]: 39: Hoare triple {4713#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,739 INFO L273 TraceCheckUtils]: 40: Hoare triple {4713#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,739 INFO L273 TraceCheckUtils]: 41: Hoare triple {4713#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,739 INFO L273 TraceCheckUtils]: 42: Hoare triple {4713#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,739 INFO L273 TraceCheckUtils]: 43: Hoare triple {4713#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,740 INFO L273 TraceCheckUtils]: 44: Hoare triple {4713#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,740 INFO L273 TraceCheckUtils]: 45: Hoare triple {4713#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,740 INFO L273 TraceCheckUtils]: 46: Hoare triple {4713#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,740 INFO L273 TraceCheckUtils]: 47: Hoare triple {4713#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,740 INFO L273 TraceCheckUtils]: 48: Hoare triple {4713#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,740 INFO L273 TraceCheckUtils]: 49: Hoare triple {4713#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,741 INFO L273 TraceCheckUtils]: 50: Hoare triple {4713#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,741 INFO L273 TraceCheckUtils]: 51: Hoare triple {4713#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,741 INFO L273 TraceCheckUtils]: 52: Hoare triple {4713#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,741 INFO L273 TraceCheckUtils]: 53: Hoare triple {4713#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,741 INFO L273 TraceCheckUtils]: 54: Hoare triple {4713#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,742 INFO L273 TraceCheckUtils]: 55: Hoare triple {4713#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,742 INFO L273 TraceCheckUtils]: 56: Hoare triple {4713#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,742 INFO L273 TraceCheckUtils]: 57: Hoare triple {4713#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,742 INFO L273 TraceCheckUtils]: 58: Hoare triple {4713#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,742 INFO L273 TraceCheckUtils]: 59: Hoare triple {4713#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,743 INFO L273 TraceCheckUtils]: 60: Hoare triple {4713#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,743 INFO L273 TraceCheckUtils]: 61: Hoare triple {4713#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {4713#false} is VALID [2018-11-23 12:47:05,743 INFO L273 TraceCheckUtils]: 62: Hoare triple {4713#false} assume 8672 == #t~mem56;havoc #t~mem56; {4713#false} is VALID [2018-11-23 12:47:05,743 INFO L273 TraceCheckUtils]: 63: Hoare triple {4713#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {4713#false} is VALID [2018-11-23 12:47:05,743 INFO L273 TraceCheckUtils]: 64: Hoare triple {4713#false} assume 4 == ~blastFlag~0; {4713#false} is VALID [2018-11-23 12:47:05,744 INFO L273 TraceCheckUtils]: 65: Hoare triple {4713#false} assume !false; {4713#false} is VALID [2018-11-23 12:47:05,748 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:05,748 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:05,749 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:05,749 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 66 [2018-11-23 12:47:05,749 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:05,750 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:05,816 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 66 edges. 66 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:05,816 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:05,816 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:05,816 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:05,817 INFO L87 Difference]: Start difference. First operand 167 states and 245 transitions. Second operand 4 states. [2018-11-23 12:47:07,018 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:07,019 INFO L93 Difference]: Finished difference Result 322 states and 474 transitions. [2018-11-23 12:47:07,019 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:07,019 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 66 [2018-11-23 12:47:07,019 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:07,019 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:07,023 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 420 transitions. [2018-11-23 12:47:07,023 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:07,026 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 420 transitions. [2018-11-23 12:47:07,026 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 420 transitions. [2018-11-23 12:47:07,965 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 420 edges. 420 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:07,969 INFO L225 Difference]: With dead ends: 322 [2018-11-23 12:47:07,969 INFO L226 Difference]: Without dead ends: 180 [2018-11-23 12:47:07,970 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:07,970 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 180 states. [2018-11-23 12:47:08,046 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 180 to 167. [2018-11-23 12:47:08,046 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:08,046 INFO L82 GeneralOperation]: Start isEquivalent. First operand 180 states. Second operand 167 states. [2018-11-23 12:47:08,046 INFO L74 IsIncluded]: Start isIncluded. First operand 180 states. Second operand 167 states. [2018-11-23 12:47:08,046 INFO L87 Difference]: Start difference. First operand 180 states. Second operand 167 states. [2018-11-23 12:47:08,052 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:08,052 INFO L93 Difference]: Finished difference Result 180 states and 260 transitions. [2018-11-23 12:47:08,052 INFO L276 IsEmpty]: Start isEmpty. Operand 180 states and 260 transitions. [2018-11-23 12:47:08,053 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:08,053 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:08,053 INFO L74 IsIncluded]: Start isIncluded. First operand 167 states. Second operand 180 states. [2018-11-23 12:47:08,053 INFO L87 Difference]: Start difference. First operand 167 states. Second operand 180 states. [2018-11-23 12:47:08,058 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:08,058 INFO L93 Difference]: Finished difference Result 180 states and 260 transitions. [2018-11-23 12:47:08,058 INFO L276 IsEmpty]: Start isEmpty. Operand 180 states and 260 transitions. [2018-11-23 12:47:08,059 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:08,059 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:08,059 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:08,059 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:08,059 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 167 states. [2018-11-23 12:47:08,063 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 167 states to 167 states and 244 transitions. [2018-11-23 12:47:08,064 INFO L78 Accepts]: Start accepts. Automaton has 167 states and 244 transitions. Word has length 66 [2018-11-23 12:47:08,064 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:08,064 INFO L480 AbstractCegarLoop]: Abstraction has 167 states and 244 transitions. [2018-11-23 12:47:08,064 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:08,064 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 244 transitions. [2018-11-23 12:47:08,065 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2018-11-23 12:47:08,065 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:08,065 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:08,066 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:08,066 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:08,066 INFO L82 PathProgramCache]: Analyzing trace with hash 355025414, now seen corresponding path program 1 times [2018-11-23 12:47:08,066 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:08,066 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:08,067 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:08,067 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:08,068 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:08,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:08,665 INFO L256 TraceCheckUtils]: 0: Hoare triple {5663#true} call ULTIMATE.init(); {5663#true} is VALID [2018-11-23 12:47:08,666 INFO L273 TraceCheckUtils]: 1: Hoare triple {5663#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {5663#true} is VALID [2018-11-23 12:47:08,666 INFO L273 TraceCheckUtils]: 2: Hoare triple {5663#true} assume true; {5663#true} is VALID [2018-11-23 12:47:08,666 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {5663#true} {5663#true} #604#return; {5663#true} is VALID [2018-11-23 12:47:08,666 INFO L256 TraceCheckUtils]: 4: Hoare triple {5663#true} call #t~ret138 := main(); {5663#true} is VALID [2018-11-23 12:47:08,666 INFO L273 TraceCheckUtils]: 5: Hoare triple {5663#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {5663#true} is VALID [2018-11-23 12:47:08,666 INFO L256 TraceCheckUtils]: 6: Hoare triple {5663#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {5663#true} is VALID [2018-11-23 12:47:08,668 INFO L273 TraceCheckUtils]: 7: Hoare triple {5663#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {5665#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:08,677 INFO L273 TraceCheckUtils]: 8: Hoare triple {5665#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {5665#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:08,685 INFO L273 TraceCheckUtils]: 9: Hoare triple {5665#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {5665#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:08,685 INFO L273 TraceCheckUtils]: 10: Hoare triple {5665#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {5665#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:08,686 INFO L273 TraceCheckUtils]: 11: Hoare triple {5665#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {5665#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:08,686 INFO L273 TraceCheckUtils]: 12: Hoare triple {5665#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {5665#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:08,695 INFO L273 TraceCheckUtils]: 13: Hoare triple {5665#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {5665#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:08,704 INFO L273 TraceCheckUtils]: 14: Hoare triple {5665#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {5665#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:08,704 INFO L273 TraceCheckUtils]: 15: Hoare triple {5665#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {5665#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:08,707 INFO L273 TraceCheckUtils]: 16: Hoare triple {5665#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {5666#(= |ssl3_accept_#t~mem26| 8464)} is VALID [2018-11-23 12:47:08,707 INFO L273 TraceCheckUtils]: 17: Hoare triple {5666#(= |ssl3_accept_#t~mem26| 8464)} assume 8192 == #t~mem26;havoc #t~mem26; {5664#false} is VALID [2018-11-23 12:47:08,707 INFO L273 TraceCheckUtils]: 18: Hoare triple {5664#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,707 INFO L273 TraceCheckUtils]: 19: Hoare triple {5664#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {5664#false} is VALID [2018-11-23 12:47:08,708 INFO L273 TraceCheckUtils]: 20: Hoare triple {5664#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,708 INFO L273 TraceCheckUtils]: 21: Hoare triple {5664#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,708 INFO L273 TraceCheckUtils]: 22: Hoare triple {5664#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {5664#false} is VALID [2018-11-23 12:47:08,708 INFO L273 TraceCheckUtils]: 23: Hoare triple {5664#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,708 INFO L273 TraceCheckUtils]: 24: Hoare triple {5664#false} assume 12292 != #t~mem62;havoc #t~mem62; {5664#false} is VALID [2018-11-23 12:47:08,708 INFO L273 TraceCheckUtils]: 25: Hoare triple {5664#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {5664#false} is VALID [2018-11-23 12:47:08,708 INFO L273 TraceCheckUtils]: 26: Hoare triple {5664#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,708 INFO L273 TraceCheckUtils]: 27: Hoare triple {5664#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {5664#false} is VALID [2018-11-23 12:47:08,709 INFO L273 TraceCheckUtils]: 28: Hoare triple {5664#false} ~skip~0 := 0; {5664#false} is VALID [2018-11-23 12:47:08,709 INFO L273 TraceCheckUtils]: 29: Hoare triple {5664#false} assume !false; {5664#false} is VALID [2018-11-23 12:47:08,709 INFO L273 TraceCheckUtils]: 30: Hoare triple {5664#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,709 INFO L273 TraceCheckUtils]: 31: Hoare triple {5664#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,709 INFO L273 TraceCheckUtils]: 32: Hoare triple {5664#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,709 INFO L273 TraceCheckUtils]: 33: Hoare triple {5664#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,709 INFO L273 TraceCheckUtils]: 34: Hoare triple {5664#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,710 INFO L273 TraceCheckUtils]: 35: Hoare triple {5664#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,712 INFO L273 TraceCheckUtils]: 36: Hoare triple {5664#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,712 INFO L273 TraceCheckUtils]: 37: Hoare triple {5664#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,712 INFO L273 TraceCheckUtils]: 38: Hoare triple {5664#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,712 INFO L273 TraceCheckUtils]: 39: Hoare triple {5664#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,712 INFO L273 TraceCheckUtils]: 40: Hoare triple {5664#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,713 INFO L273 TraceCheckUtils]: 41: Hoare triple {5664#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,713 INFO L273 TraceCheckUtils]: 42: Hoare triple {5664#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,713 INFO L273 TraceCheckUtils]: 43: Hoare triple {5664#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,713 INFO L273 TraceCheckUtils]: 44: Hoare triple {5664#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,713 INFO L273 TraceCheckUtils]: 45: Hoare triple {5664#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,713 INFO L273 TraceCheckUtils]: 46: Hoare triple {5664#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,714 INFO L273 TraceCheckUtils]: 47: Hoare triple {5664#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,714 INFO L273 TraceCheckUtils]: 48: Hoare triple {5664#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,714 INFO L273 TraceCheckUtils]: 49: Hoare triple {5664#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,714 INFO L273 TraceCheckUtils]: 50: Hoare triple {5664#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,714 INFO L273 TraceCheckUtils]: 51: Hoare triple {5664#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,715 INFO L273 TraceCheckUtils]: 52: Hoare triple {5664#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,715 INFO L273 TraceCheckUtils]: 53: Hoare triple {5664#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,715 INFO L273 TraceCheckUtils]: 54: Hoare triple {5664#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,715 INFO L273 TraceCheckUtils]: 55: Hoare triple {5664#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,715 INFO L273 TraceCheckUtils]: 56: Hoare triple {5664#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,715 INFO L273 TraceCheckUtils]: 57: Hoare triple {5664#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,716 INFO L273 TraceCheckUtils]: 58: Hoare triple {5664#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,716 INFO L273 TraceCheckUtils]: 59: Hoare triple {5664#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,716 INFO L273 TraceCheckUtils]: 60: Hoare triple {5664#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,716 INFO L273 TraceCheckUtils]: 61: Hoare triple {5664#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,716 INFO L273 TraceCheckUtils]: 62: Hoare triple {5664#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {5664#false} is VALID [2018-11-23 12:47:08,717 INFO L273 TraceCheckUtils]: 63: Hoare triple {5664#false} assume 8672 == #t~mem56;havoc #t~mem56; {5664#false} is VALID [2018-11-23 12:47:08,717 INFO L273 TraceCheckUtils]: 64: Hoare triple {5664#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {5664#false} is VALID [2018-11-23 12:47:08,717 INFO L273 TraceCheckUtils]: 65: Hoare triple {5664#false} assume 4 == ~blastFlag~0; {5664#false} is VALID [2018-11-23 12:47:08,717 INFO L273 TraceCheckUtils]: 66: Hoare triple {5664#false} assume !false; {5664#false} is VALID [2018-11-23 12:47:08,721 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:08,721 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:08,721 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:08,722 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 67 [2018-11-23 12:47:08,722 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:08,722 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:08,789 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 67 edges. 67 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:08,789 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:08,789 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:08,789 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:08,790 INFO L87 Difference]: Start difference. First operand 167 states and 244 transitions. Second operand 4 states. [2018-11-23 12:47:09,861 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:09,862 INFO L93 Difference]: Finished difference Result 322 states and 473 transitions. [2018-11-23 12:47:09,862 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:09,862 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 67 [2018-11-23 12:47:09,862 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:09,863 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:09,866 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 419 transitions. [2018-11-23 12:47:09,866 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:09,869 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 419 transitions. [2018-11-23 12:47:09,869 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 419 transitions. [2018-11-23 12:47:10,899 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 419 edges. 419 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:10,902 INFO L225 Difference]: With dead ends: 322 [2018-11-23 12:47:10,903 INFO L226 Difference]: Without dead ends: 180 [2018-11-23 12:47:10,903 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:10,904 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 180 states. [2018-11-23 12:47:10,954 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 180 to 167. [2018-11-23 12:47:10,955 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:10,955 INFO L82 GeneralOperation]: Start isEquivalent. First operand 180 states. Second operand 167 states. [2018-11-23 12:47:10,955 INFO L74 IsIncluded]: Start isIncluded. First operand 180 states. Second operand 167 states. [2018-11-23 12:47:10,955 INFO L87 Difference]: Start difference. First operand 180 states. Second operand 167 states. [2018-11-23 12:47:10,960 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:10,961 INFO L93 Difference]: Finished difference Result 180 states and 259 transitions. [2018-11-23 12:47:10,961 INFO L276 IsEmpty]: Start isEmpty. Operand 180 states and 259 transitions. [2018-11-23 12:47:10,961 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:10,962 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:10,962 INFO L74 IsIncluded]: Start isIncluded. First operand 167 states. Second operand 180 states. [2018-11-23 12:47:10,962 INFO L87 Difference]: Start difference. First operand 167 states. Second operand 180 states. [2018-11-23 12:47:10,966 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:10,966 INFO L93 Difference]: Finished difference Result 180 states and 259 transitions. [2018-11-23 12:47:10,967 INFO L276 IsEmpty]: Start isEmpty. Operand 180 states and 259 transitions. [2018-11-23 12:47:10,967 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:10,967 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:10,968 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:10,968 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:10,968 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 167 states. [2018-11-23 12:47:10,972 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 167 states to 167 states and 243 transitions. [2018-11-23 12:47:10,972 INFO L78 Accepts]: Start accepts. Automaton has 167 states and 243 transitions. Word has length 67 [2018-11-23 12:47:10,972 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:10,972 INFO L480 AbstractCegarLoop]: Abstraction has 167 states and 243 transitions. [2018-11-23 12:47:10,972 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:10,972 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 243 transitions. [2018-11-23 12:47:10,973 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2018-11-23 12:47:10,974 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:10,974 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:10,974 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:10,974 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:10,974 INFO L82 PathProgramCache]: Analyzing trace with hash -1096954691, now seen corresponding path program 1 times [2018-11-23 12:47:10,975 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:10,975 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:10,976 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:10,976 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:10,976 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:10,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:11,564 INFO L256 TraceCheckUtils]: 0: Hoare triple {6614#true} call ULTIMATE.init(); {6614#true} is VALID [2018-11-23 12:47:11,565 INFO L273 TraceCheckUtils]: 1: Hoare triple {6614#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {6614#true} is VALID [2018-11-23 12:47:11,565 INFO L273 TraceCheckUtils]: 2: Hoare triple {6614#true} assume true; {6614#true} is VALID [2018-11-23 12:47:11,565 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {6614#true} {6614#true} #604#return; {6614#true} is VALID [2018-11-23 12:47:11,566 INFO L256 TraceCheckUtils]: 4: Hoare triple {6614#true} call #t~ret138 := main(); {6614#true} is VALID [2018-11-23 12:47:11,566 INFO L273 TraceCheckUtils]: 5: Hoare triple {6614#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {6614#true} is VALID [2018-11-23 12:47:11,566 INFO L256 TraceCheckUtils]: 6: Hoare triple {6614#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {6614#true} is VALID [2018-11-23 12:47:11,566 INFO L273 TraceCheckUtils]: 7: Hoare triple {6614#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {6614#true} is VALID [2018-11-23 12:47:11,566 INFO L273 TraceCheckUtils]: 8: Hoare triple {6614#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {6614#true} is VALID [2018-11-23 12:47:11,567 INFO L273 TraceCheckUtils]: 9: Hoare triple {6614#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {6614#true} is VALID [2018-11-23 12:47:11,567 INFO L273 TraceCheckUtils]: 10: Hoare triple {6614#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {6614#true} is VALID [2018-11-23 12:47:11,567 INFO L273 TraceCheckUtils]: 11: Hoare triple {6614#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {6614#true} is VALID [2018-11-23 12:47:11,567 INFO L273 TraceCheckUtils]: 12: Hoare triple {6614#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {6614#true} is VALID [2018-11-23 12:47:11,567 INFO L273 TraceCheckUtils]: 13: Hoare triple {6614#true} assume !false; {6614#true} is VALID [2018-11-23 12:47:11,568 INFO L273 TraceCheckUtils]: 14: Hoare triple {6614#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {6614#true} is VALID [2018-11-23 12:47:11,568 INFO L273 TraceCheckUtils]: 15: Hoare triple {6614#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {6614#true} is VALID [2018-11-23 12:47:11,568 INFO L273 TraceCheckUtils]: 16: Hoare triple {6614#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {6614#true} is VALID [2018-11-23 12:47:11,568 INFO L273 TraceCheckUtils]: 17: Hoare triple {6614#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {6614#true} is VALID [2018-11-23 12:47:11,568 INFO L273 TraceCheckUtils]: 18: Hoare triple {6614#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {6614#true} is VALID [2018-11-23 12:47:11,569 INFO L273 TraceCheckUtils]: 19: Hoare triple {6614#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {6614#true} is VALID [2018-11-23 12:47:11,569 INFO L273 TraceCheckUtils]: 20: Hoare triple {6614#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {6614#true} is VALID [2018-11-23 12:47:11,569 INFO L273 TraceCheckUtils]: 21: Hoare triple {6614#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {6614#true} is VALID [2018-11-23 12:47:11,569 INFO L273 TraceCheckUtils]: 22: Hoare triple {6614#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {6614#true} is VALID [2018-11-23 12:47:11,569 INFO L273 TraceCheckUtils]: 23: Hoare triple {6614#true} assume 8464 == #t~mem32;havoc #t~mem32; {6614#true} is VALID [2018-11-23 12:47:11,570 INFO L273 TraceCheckUtils]: 24: Hoare triple {6614#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {6614#true} is VALID [2018-11-23 12:47:11,570 INFO L273 TraceCheckUtils]: 25: Hoare triple {6614#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {6614#true} is VALID [2018-11-23 12:47:11,583 INFO L273 TraceCheckUtils]: 26: Hoare triple {6614#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:11,596 INFO L273 TraceCheckUtils]: 27: Hoare triple {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:11,607 INFO L273 TraceCheckUtils]: 28: Hoare triple {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:11,619 INFO L273 TraceCheckUtils]: 29: Hoare triple {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:11,632 INFO L273 TraceCheckUtils]: 30: Hoare triple {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !false; {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:11,645 INFO L273 TraceCheckUtils]: 31: Hoare triple {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:11,656 INFO L273 TraceCheckUtils]: 32: Hoare triple {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:11,668 INFO L273 TraceCheckUtils]: 33: Hoare triple {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:11,677 INFO L273 TraceCheckUtils]: 34: Hoare triple {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:11,690 INFO L273 TraceCheckUtils]: 35: Hoare triple {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:11,703 INFO L273 TraceCheckUtils]: 36: Hoare triple {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:11,715 INFO L273 TraceCheckUtils]: 37: Hoare triple {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:11,732 INFO L273 TraceCheckUtils]: 38: Hoare triple {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:11,741 INFO L273 TraceCheckUtils]: 39: Hoare triple {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:11,752 INFO L273 TraceCheckUtils]: 40: Hoare triple {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:11,752 INFO L273 TraceCheckUtils]: 41: Hoare triple {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:11,754 INFO L273 TraceCheckUtils]: 42: Hoare triple {6616#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {6617#(= 8496 |ssl3_accept_#t~mem35|)} is VALID [2018-11-23 12:47:11,754 INFO L273 TraceCheckUtils]: 43: Hoare triple {6617#(= 8496 |ssl3_accept_#t~mem35|)} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {6615#false} is VALID [2018-11-23 12:47:11,754 INFO L273 TraceCheckUtils]: 44: Hoare triple {6615#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {6615#false} is VALID [2018-11-23 12:47:11,754 INFO L273 TraceCheckUtils]: 45: Hoare triple {6615#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {6615#false} is VALID [2018-11-23 12:47:11,755 INFO L273 TraceCheckUtils]: 46: Hoare triple {6615#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {6615#false} is VALID [2018-11-23 12:47:11,755 INFO L273 TraceCheckUtils]: 47: Hoare triple {6615#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {6615#false} is VALID [2018-11-23 12:47:11,755 INFO L273 TraceCheckUtils]: 48: Hoare triple {6615#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {6615#false} is VALID [2018-11-23 12:47:11,755 INFO L273 TraceCheckUtils]: 49: Hoare triple {6615#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {6615#false} is VALID [2018-11-23 12:47:11,755 INFO L273 TraceCheckUtils]: 50: Hoare triple {6615#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {6615#false} is VALID [2018-11-23 12:47:11,755 INFO L273 TraceCheckUtils]: 51: Hoare triple {6615#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {6615#false} is VALID [2018-11-23 12:47:11,755 INFO L273 TraceCheckUtils]: 52: Hoare triple {6615#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {6615#false} is VALID [2018-11-23 12:47:11,756 INFO L273 TraceCheckUtils]: 53: Hoare triple {6615#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {6615#false} is VALID [2018-11-23 12:47:11,756 INFO L273 TraceCheckUtils]: 54: Hoare triple {6615#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {6615#false} is VALID [2018-11-23 12:47:11,756 INFO L273 TraceCheckUtils]: 55: Hoare triple {6615#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {6615#false} is VALID [2018-11-23 12:47:11,756 INFO L273 TraceCheckUtils]: 56: Hoare triple {6615#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {6615#false} is VALID [2018-11-23 12:47:11,756 INFO L273 TraceCheckUtils]: 57: Hoare triple {6615#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {6615#false} is VALID [2018-11-23 12:47:11,757 INFO L273 TraceCheckUtils]: 58: Hoare triple {6615#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {6615#false} is VALID [2018-11-23 12:47:11,757 INFO L273 TraceCheckUtils]: 59: Hoare triple {6615#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {6615#false} is VALID [2018-11-23 12:47:11,757 INFO L273 TraceCheckUtils]: 60: Hoare triple {6615#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {6615#false} is VALID [2018-11-23 12:47:11,758 INFO L273 TraceCheckUtils]: 61: Hoare triple {6615#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {6615#false} is VALID [2018-11-23 12:47:11,758 INFO L273 TraceCheckUtils]: 62: Hoare triple {6615#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {6615#false} is VALID [2018-11-23 12:47:11,758 INFO L273 TraceCheckUtils]: 63: Hoare triple {6615#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {6615#false} is VALID [2018-11-23 12:47:11,758 INFO L273 TraceCheckUtils]: 64: Hoare triple {6615#false} assume 8672 == #t~mem56;havoc #t~mem56; {6615#false} is VALID [2018-11-23 12:47:11,759 INFO L273 TraceCheckUtils]: 65: Hoare triple {6615#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {6615#false} is VALID [2018-11-23 12:47:11,759 INFO L273 TraceCheckUtils]: 66: Hoare triple {6615#false} assume 4 == ~blastFlag~0; {6615#false} is VALID [2018-11-23 12:47:11,759 INFO L273 TraceCheckUtils]: 67: Hoare triple {6615#false} assume !false; {6615#false} is VALID [2018-11-23 12:47:11,763 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:11,764 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:11,764 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:11,764 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 68 [2018-11-23 12:47:11,765 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:11,765 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:11,841 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 68 edges. 68 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:11,841 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:11,841 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:11,841 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:11,842 INFO L87 Difference]: Start difference. First operand 167 states and 243 transitions. Second operand 4 states. [2018-11-23 12:47:13,469 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:13,470 INFO L93 Difference]: Finished difference Result 351 states and 519 transitions. [2018-11-23 12:47:13,470 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:13,470 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 68 [2018-11-23 12:47:13,470 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:13,471 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:13,474 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 452 transitions. [2018-11-23 12:47:13,474 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:13,477 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 452 transitions. [2018-11-23 12:47:13,478 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 452 transitions. [2018-11-23 12:47:14,748 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 452 edges. 452 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:14,754 INFO L225 Difference]: With dead ends: 351 [2018-11-23 12:47:14,754 INFO L226 Difference]: Without dead ends: 209 [2018-11-23 12:47:14,755 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:14,755 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 209 states. [2018-11-23 12:47:14,822 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 209 to 189. [2018-11-23 12:47:14,822 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:14,823 INFO L82 GeneralOperation]: Start isEquivalent. First operand 209 states. Second operand 189 states. [2018-11-23 12:47:14,823 INFO L74 IsIncluded]: Start isIncluded. First operand 209 states. Second operand 189 states. [2018-11-23 12:47:14,823 INFO L87 Difference]: Start difference. First operand 209 states. Second operand 189 states. [2018-11-23 12:47:14,830 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:14,830 INFO L93 Difference]: Finished difference Result 209 states and 305 transitions. [2018-11-23 12:47:14,830 INFO L276 IsEmpty]: Start isEmpty. Operand 209 states and 305 transitions. [2018-11-23 12:47:14,831 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:14,831 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:14,832 INFO L74 IsIncluded]: Start isIncluded. First operand 189 states. Second operand 209 states. [2018-11-23 12:47:14,832 INFO L87 Difference]: Start difference. First operand 189 states. Second operand 209 states. [2018-11-23 12:47:14,843 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:14,843 INFO L93 Difference]: Finished difference Result 209 states and 305 transitions. [2018-11-23 12:47:14,843 INFO L276 IsEmpty]: Start isEmpty. Operand 209 states and 305 transitions. [2018-11-23 12:47:14,844 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:14,844 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:14,845 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:14,845 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:14,845 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 189 states. [2018-11-23 12:47:14,850 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 280 transitions. [2018-11-23 12:47:14,850 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 280 transitions. Word has length 68 [2018-11-23 12:47:14,851 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:14,851 INFO L480 AbstractCegarLoop]: Abstraction has 189 states and 280 transitions. [2018-11-23 12:47:14,851 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:14,851 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 280 transitions. [2018-11-23 12:47:14,852 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2018-11-23 12:47:14,852 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:14,853 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:14,853 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:14,853 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:14,853 INFO L82 PathProgramCache]: Analyzing trace with hash -1958096354, now seen corresponding path program 1 times [2018-11-23 12:47:14,853 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:14,854 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:14,855 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:14,855 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:14,855 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:14,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:15,547 WARN L180 SmtUtils]: Spent 103.00 ms on a formula simplification. DAG size of input: 6 DAG size of output: 3 [2018-11-23 12:47:15,696 INFO L256 TraceCheckUtils]: 0: Hoare triple {7681#true} call ULTIMATE.init(); {7681#true} is VALID [2018-11-23 12:47:15,697 INFO L273 TraceCheckUtils]: 1: Hoare triple {7681#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {7681#true} is VALID [2018-11-23 12:47:15,698 INFO L273 TraceCheckUtils]: 2: Hoare triple {7681#true} assume true; {7681#true} is VALID [2018-11-23 12:47:15,699 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {7681#true} {7681#true} #604#return; {7681#true} is VALID [2018-11-23 12:47:15,699 INFO L256 TraceCheckUtils]: 4: Hoare triple {7681#true} call #t~ret138 := main(); {7681#true} is VALID [2018-11-23 12:47:15,699 INFO L273 TraceCheckUtils]: 5: Hoare triple {7681#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {7681#true} is VALID [2018-11-23 12:47:15,700 INFO L256 TraceCheckUtils]: 6: Hoare triple {7681#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {7681#true} is VALID [2018-11-23 12:47:15,716 INFO L273 TraceCheckUtils]: 7: Hoare triple {7681#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {7683#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:15,731 INFO L273 TraceCheckUtils]: 8: Hoare triple {7683#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {7683#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:15,745 INFO L273 TraceCheckUtils]: 9: Hoare triple {7683#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {7683#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:15,754 INFO L273 TraceCheckUtils]: 10: Hoare triple {7683#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {7683#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:15,769 INFO L273 TraceCheckUtils]: 11: Hoare triple {7683#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {7683#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:15,783 INFO L273 TraceCheckUtils]: 12: Hoare triple {7683#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {7683#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:15,798 INFO L273 TraceCheckUtils]: 13: Hoare triple {7683#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {7683#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:15,812 INFO L273 TraceCheckUtils]: 14: Hoare triple {7683#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {7683#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:15,826 INFO L273 TraceCheckUtils]: 15: Hoare triple {7683#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {7683#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:15,840 INFO L273 TraceCheckUtils]: 16: Hoare triple {7683#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {7683#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:15,854 INFO L273 TraceCheckUtils]: 17: Hoare triple {7683#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {7684#(= |ssl3_accept_#t~mem27| 8464)} is VALID [2018-11-23 12:47:15,868 INFO L273 TraceCheckUtils]: 18: Hoare triple {7684#(= |ssl3_accept_#t~mem27| 8464)} assume 24576 == #t~mem27;havoc #t~mem27; {7682#false} is VALID [2018-11-23 12:47:15,868 INFO L273 TraceCheckUtils]: 19: Hoare triple {7682#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,869 INFO L273 TraceCheckUtils]: 20: Hoare triple {7682#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {7682#false} is VALID [2018-11-23 12:47:15,869 INFO L273 TraceCheckUtils]: 21: Hoare triple {7682#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,869 INFO L273 TraceCheckUtils]: 22: Hoare triple {7682#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,869 INFO L273 TraceCheckUtils]: 23: Hoare triple {7682#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {7682#false} is VALID [2018-11-23 12:47:15,870 INFO L273 TraceCheckUtils]: 24: Hoare triple {7682#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,870 INFO L273 TraceCheckUtils]: 25: Hoare triple {7682#false} assume 12292 != #t~mem62;havoc #t~mem62; {7682#false} is VALID [2018-11-23 12:47:15,870 INFO L273 TraceCheckUtils]: 26: Hoare triple {7682#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {7682#false} is VALID [2018-11-23 12:47:15,870 INFO L273 TraceCheckUtils]: 27: Hoare triple {7682#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,871 INFO L273 TraceCheckUtils]: 28: Hoare triple {7682#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {7682#false} is VALID [2018-11-23 12:47:15,871 INFO L273 TraceCheckUtils]: 29: Hoare triple {7682#false} ~skip~0 := 0; {7682#false} is VALID [2018-11-23 12:47:15,871 INFO L273 TraceCheckUtils]: 30: Hoare triple {7682#false} assume !false; {7682#false} is VALID [2018-11-23 12:47:15,871 INFO L273 TraceCheckUtils]: 31: Hoare triple {7682#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,872 INFO L273 TraceCheckUtils]: 32: Hoare triple {7682#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,872 INFO L273 TraceCheckUtils]: 33: Hoare triple {7682#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,872 INFO L273 TraceCheckUtils]: 34: Hoare triple {7682#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,872 INFO L273 TraceCheckUtils]: 35: Hoare triple {7682#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,873 INFO L273 TraceCheckUtils]: 36: Hoare triple {7682#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,873 INFO L273 TraceCheckUtils]: 37: Hoare triple {7682#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,873 INFO L273 TraceCheckUtils]: 38: Hoare triple {7682#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,873 INFO L273 TraceCheckUtils]: 39: Hoare triple {7682#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,874 INFO L273 TraceCheckUtils]: 40: Hoare triple {7682#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,874 INFO L273 TraceCheckUtils]: 41: Hoare triple {7682#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,874 INFO L273 TraceCheckUtils]: 42: Hoare triple {7682#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,874 INFO L273 TraceCheckUtils]: 43: Hoare triple {7682#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,874 INFO L273 TraceCheckUtils]: 44: Hoare triple {7682#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,875 INFO L273 TraceCheckUtils]: 45: Hoare triple {7682#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,875 INFO L273 TraceCheckUtils]: 46: Hoare triple {7682#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,875 INFO L273 TraceCheckUtils]: 47: Hoare triple {7682#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,875 INFO L273 TraceCheckUtils]: 48: Hoare triple {7682#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,876 INFO L273 TraceCheckUtils]: 49: Hoare triple {7682#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,876 INFO L273 TraceCheckUtils]: 50: Hoare triple {7682#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,876 INFO L273 TraceCheckUtils]: 51: Hoare triple {7682#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,876 INFO L273 TraceCheckUtils]: 52: Hoare triple {7682#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,877 INFO L273 TraceCheckUtils]: 53: Hoare triple {7682#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,877 INFO L273 TraceCheckUtils]: 54: Hoare triple {7682#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,877 INFO L273 TraceCheckUtils]: 55: Hoare triple {7682#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,877 INFO L273 TraceCheckUtils]: 56: Hoare triple {7682#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,878 INFO L273 TraceCheckUtils]: 57: Hoare triple {7682#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,878 INFO L273 TraceCheckUtils]: 58: Hoare triple {7682#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,878 INFO L273 TraceCheckUtils]: 59: Hoare triple {7682#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,878 INFO L273 TraceCheckUtils]: 60: Hoare triple {7682#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,879 INFO L273 TraceCheckUtils]: 61: Hoare triple {7682#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,879 INFO L273 TraceCheckUtils]: 62: Hoare triple {7682#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,879 INFO L273 TraceCheckUtils]: 63: Hoare triple {7682#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {7682#false} is VALID [2018-11-23 12:47:15,879 INFO L273 TraceCheckUtils]: 64: Hoare triple {7682#false} assume 8672 == #t~mem56;havoc #t~mem56; {7682#false} is VALID [2018-11-23 12:47:15,880 INFO L273 TraceCheckUtils]: 65: Hoare triple {7682#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {7682#false} is VALID [2018-11-23 12:47:15,880 INFO L273 TraceCheckUtils]: 66: Hoare triple {7682#false} assume 4 == ~blastFlag~0; {7682#false} is VALID [2018-11-23 12:47:15,880 INFO L273 TraceCheckUtils]: 67: Hoare triple {7682#false} assume !false; {7682#false} is VALID [2018-11-23 12:47:15,893 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:15,894 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:15,894 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:15,894 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 68 [2018-11-23 12:47:15,895 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:15,895 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:16,171 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 68 edges. 68 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:16,171 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:16,172 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:16,172 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:16,172 INFO L87 Difference]: Start difference. First operand 189 states and 280 transitions. Second operand 4 states. [2018-11-23 12:47:17,364 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:17,365 INFO L93 Difference]: Finished difference Result 366 states and 546 transitions. [2018-11-23 12:47:17,365 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:17,365 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 68 [2018-11-23 12:47:17,365 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:17,365 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:17,369 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 418 transitions. [2018-11-23 12:47:17,369 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:17,372 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 418 transitions. [2018-11-23 12:47:17,372 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 418 transitions. [2018-11-23 12:47:18,628 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 418 edges. 418 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:18,633 INFO L225 Difference]: With dead ends: 366 [2018-11-23 12:47:18,633 INFO L226 Difference]: Without dead ends: 202 [2018-11-23 12:47:18,634 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:18,635 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 202 states. [2018-11-23 12:47:18,731 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 202 to 189. [2018-11-23 12:47:18,731 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:18,731 INFO L82 GeneralOperation]: Start isEquivalent. First operand 202 states. Second operand 189 states. [2018-11-23 12:47:18,731 INFO L74 IsIncluded]: Start isIncluded. First operand 202 states. Second operand 189 states. [2018-11-23 12:47:18,731 INFO L87 Difference]: Start difference. First operand 202 states. Second operand 189 states. [2018-11-23 12:47:18,737 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:18,737 INFO L93 Difference]: Finished difference Result 202 states and 295 transitions. [2018-11-23 12:47:18,737 INFO L276 IsEmpty]: Start isEmpty. Operand 202 states and 295 transitions. [2018-11-23 12:47:18,738 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:18,738 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:18,738 INFO L74 IsIncluded]: Start isIncluded. First operand 189 states. Second operand 202 states. [2018-11-23 12:47:18,738 INFO L87 Difference]: Start difference. First operand 189 states. Second operand 202 states. [2018-11-23 12:47:18,743 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:18,743 INFO L93 Difference]: Finished difference Result 202 states and 295 transitions. [2018-11-23 12:47:18,743 INFO L276 IsEmpty]: Start isEmpty. Operand 202 states and 295 transitions. [2018-11-23 12:47:18,744 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:18,744 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:18,744 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:18,745 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:18,745 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 189 states. [2018-11-23 12:47:18,749 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 279 transitions. [2018-11-23 12:47:18,749 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 279 transitions. Word has length 68 [2018-11-23 12:47:18,749 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:18,750 INFO L480 AbstractCegarLoop]: Abstraction has 189 states and 279 transitions. [2018-11-23 12:47:18,750 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:18,750 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 279 transitions. [2018-11-23 12:47:18,751 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2018-11-23 12:47:18,751 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:18,751 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:18,751 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:18,751 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:18,752 INFO L82 PathProgramCache]: Analyzing trace with hash -1853127775, now seen corresponding path program 1 times [2018-11-23 12:47:18,752 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:18,752 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:18,753 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:18,753 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:18,753 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:18,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:19,464 INFO L256 TraceCheckUtils]: 0: Hoare triple {8748#true} call ULTIMATE.init(); {8748#true} is VALID [2018-11-23 12:47:19,464 INFO L273 TraceCheckUtils]: 1: Hoare triple {8748#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {8748#true} is VALID [2018-11-23 12:47:19,465 INFO L273 TraceCheckUtils]: 2: Hoare triple {8748#true} assume true; {8748#true} is VALID [2018-11-23 12:47:19,465 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {8748#true} {8748#true} #604#return; {8748#true} is VALID [2018-11-23 12:47:19,465 INFO L256 TraceCheckUtils]: 4: Hoare triple {8748#true} call #t~ret138 := main(); {8748#true} is VALID [2018-11-23 12:47:19,465 INFO L273 TraceCheckUtils]: 5: Hoare triple {8748#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {8748#true} is VALID [2018-11-23 12:47:19,465 INFO L256 TraceCheckUtils]: 6: Hoare triple {8748#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {8748#true} is VALID [2018-11-23 12:47:19,467 INFO L273 TraceCheckUtils]: 7: Hoare triple {8748#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {8750#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:19,469 INFO L273 TraceCheckUtils]: 8: Hoare triple {8750#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {8750#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:19,470 INFO L273 TraceCheckUtils]: 9: Hoare triple {8750#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {8750#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:19,471 INFO L273 TraceCheckUtils]: 10: Hoare triple {8750#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {8750#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:19,471 INFO L273 TraceCheckUtils]: 11: Hoare triple {8750#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {8750#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:19,471 INFO L273 TraceCheckUtils]: 12: Hoare triple {8750#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {8750#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:19,472 INFO L273 TraceCheckUtils]: 13: Hoare triple {8750#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {8750#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:19,472 INFO L273 TraceCheckUtils]: 14: Hoare triple {8750#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {8750#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:19,473 INFO L273 TraceCheckUtils]: 15: Hoare triple {8750#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {8750#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:19,473 INFO L273 TraceCheckUtils]: 16: Hoare triple {8750#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {8750#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:19,474 INFO L273 TraceCheckUtils]: 17: Hoare triple {8750#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {8750#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:19,475 INFO L273 TraceCheckUtils]: 18: Hoare triple {8750#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {8751#(= |ssl3_accept_#t~mem28| 8464)} is VALID [2018-11-23 12:47:19,475 INFO L273 TraceCheckUtils]: 19: Hoare triple {8751#(= |ssl3_accept_#t~mem28| 8464)} assume 8195 == #t~mem28;havoc #t~mem28; {8749#false} is VALID [2018-11-23 12:47:19,476 INFO L273 TraceCheckUtils]: 20: Hoare triple {8749#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,476 INFO L273 TraceCheckUtils]: 21: Hoare triple {8749#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {8749#false} is VALID [2018-11-23 12:47:19,476 INFO L273 TraceCheckUtils]: 22: Hoare triple {8749#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,476 INFO L273 TraceCheckUtils]: 23: Hoare triple {8749#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,476 INFO L273 TraceCheckUtils]: 24: Hoare triple {8749#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {8749#false} is VALID [2018-11-23 12:47:19,477 INFO L273 TraceCheckUtils]: 25: Hoare triple {8749#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,477 INFO L273 TraceCheckUtils]: 26: Hoare triple {8749#false} assume 12292 != #t~mem62;havoc #t~mem62; {8749#false} is VALID [2018-11-23 12:47:19,477 INFO L273 TraceCheckUtils]: 27: Hoare triple {8749#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {8749#false} is VALID [2018-11-23 12:47:19,477 INFO L273 TraceCheckUtils]: 28: Hoare triple {8749#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,478 INFO L273 TraceCheckUtils]: 29: Hoare triple {8749#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {8749#false} is VALID [2018-11-23 12:47:19,478 INFO L273 TraceCheckUtils]: 30: Hoare triple {8749#false} ~skip~0 := 0; {8749#false} is VALID [2018-11-23 12:47:19,478 INFO L273 TraceCheckUtils]: 31: Hoare triple {8749#false} assume !false; {8749#false} is VALID [2018-11-23 12:47:19,478 INFO L273 TraceCheckUtils]: 32: Hoare triple {8749#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,478 INFO L273 TraceCheckUtils]: 33: Hoare triple {8749#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,479 INFO L273 TraceCheckUtils]: 34: Hoare triple {8749#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,479 INFO L273 TraceCheckUtils]: 35: Hoare triple {8749#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,479 INFO L273 TraceCheckUtils]: 36: Hoare triple {8749#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,479 INFO L273 TraceCheckUtils]: 37: Hoare triple {8749#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,479 INFO L273 TraceCheckUtils]: 38: Hoare triple {8749#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,480 INFO L273 TraceCheckUtils]: 39: Hoare triple {8749#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,480 INFO L273 TraceCheckUtils]: 40: Hoare triple {8749#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,480 INFO L273 TraceCheckUtils]: 41: Hoare triple {8749#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,480 INFO L273 TraceCheckUtils]: 42: Hoare triple {8749#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,480 INFO L273 TraceCheckUtils]: 43: Hoare triple {8749#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,480 INFO L273 TraceCheckUtils]: 44: Hoare triple {8749#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,481 INFO L273 TraceCheckUtils]: 45: Hoare triple {8749#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,481 INFO L273 TraceCheckUtils]: 46: Hoare triple {8749#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,481 INFO L273 TraceCheckUtils]: 47: Hoare triple {8749#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,481 INFO L273 TraceCheckUtils]: 48: Hoare triple {8749#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,481 INFO L273 TraceCheckUtils]: 49: Hoare triple {8749#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,481 INFO L273 TraceCheckUtils]: 50: Hoare triple {8749#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,481 INFO L273 TraceCheckUtils]: 51: Hoare triple {8749#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,481 INFO L273 TraceCheckUtils]: 52: Hoare triple {8749#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,482 INFO L273 TraceCheckUtils]: 53: Hoare triple {8749#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,482 INFO L273 TraceCheckUtils]: 54: Hoare triple {8749#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,482 INFO L273 TraceCheckUtils]: 55: Hoare triple {8749#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,482 INFO L273 TraceCheckUtils]: 56: Hoare triple {8749#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,482 INFO L273 TraceCheckUtils]: 57: Hoare triple {8749#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,482 INFO L273 TraceCheckUtils]: 58: Hoare triple {8749#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,482 INFO L273 TraceCheckUtils]: 59: Hoare triple {8749#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,482 INFO L273 TraceCheckUtils]: 60: Hoare triple {8749#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,483 INFO L273 TraceCheckUtils]: 61: Hoare triple {8749#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,483 INFO L273 TraceCheckUtils]: 62: Hoare triple {8749#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,483 INFO L273 TraceCheckUtils]: 63: Hoare triple {8749#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,483 INFO L273 TraceCheckUtils]: 64: Hoare triple {8749#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {8749#false} is VALID [2018-11-23 12:47:19,483 INFO L273 TraceCheckUtils]: 65: Hoare triple {8749#false} assume 8672 == #t~mem56;havoc #t~mem56; {8749#false} is VALID [2018-11-23 12:47:19,483 INFO L273 TraceCheckUtils]: 66: Hoare triple {8749#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {8749#false} is VALID [2018-11-23 12:47:19,483 INFO L273 TraceCheckUtils]: 67: Hoare triple {8749#false} assume 4 == ~blastFlag~0; {8749#false} is VALID [2018-11-23 12:47:19,483 INFO L273 TraceCheckUtils]: 68: Hoare triple {8749#false} assume !false; {8749#false} is VALID [2018-11-23 12:47:19,488 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:19,488 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:19,488 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:19,488 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 69 [2018-11-23 12:47:19,488 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:19,489 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:19,563 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 69 edges. 69 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:19,564 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:19,564 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:19,564 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:19,565 INFO L87 Difference]: Start difference. First operand 189 states and 279 transitions. Second operand 4 states. [2018-11-23 12:47:20,662 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:20,662 INFO L93 Difference]: Finished difference Result 356 states and 533 transitions. [2018-11-23 12:47:20,662 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:20,662 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 69 [2018-11-23 12:47:20,663 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:20,663 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:20,665 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 405 transitions. [2018-11-23 12:47:20,666 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:20,668 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 405 transitions. [2018-11-23 12:47:20,668 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 405 transitions. [2018-11-23 12:47:21,671 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 405 edges. 405 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:21,675 INFO L225 Difference]: With dead ends: 356 [2018-11-23 12:47:21,675 INFO L226 Difference]: Without dead ends: 192 [2018-11-23 12:47:21,676 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:21,677 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 192 states. [2018-11-23 12:47:21,756 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 192 to 189. [2018-11-23 12:47:21,756 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:21,756 INFO L82 GeneralOperation]: Start isEquivalent. First operand 192 states. Second operand 189 states. [2018-11-23 12:47:21,757 INFO L74 IsIncluded]: Start isIncluded. First operand 192 states. Second operand 189 states. [2018-11-23 12:47:21,757 INFO L87 Difference]: Start difference. First operand 192 states. Second operand 189 states. [2018-11-23 12:47:21,763 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:21,763 INFO L93 Difference]: Finished difference Result 192 states and 282 transitions. [2018-11-23 12:47:21,764 INFO L276 IsEmpty]: Start isEmpty. Operand 192 states and 282 transitions. [2018-11-23 12:47:21,764 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:21,764 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:21,765 INFO L74 IsIncluded]: Start isIncluded. First operand 189 states. Second operand 192 states. [2018-11-23 12:47:21,765 INFO L87 Difference]: Start difference. First operand 189 states. Second operand 192 states. [2018-11-23 12:47:21,769 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:21,769 INFO L93 Difference]: Finished difference Result 192 states and 282 transitions. [2018-11-23 12:47:21,769 INFO L276 IsEmpty]: Start isEmpty. Operand 192 states and 282 transitions. [2018-11-23 12:47:21,770 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:21,770 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:21,770 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:21,770 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:21,770 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 189 states. [2018-11-23 12:47:21,774 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 278 transitions. [2018-11-23 12:47:21,775 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 278 transitions. Word has length 69 [2018-11-23 12:47:21,775 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:21,775 INFO L480 AbstractCegarLoop]: Abstraction has 189 states and 278 transitions. [2018-11-23 12:47:21,775 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:21,775 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 278 transitions. [2018-11-23 12:47:21,776 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2018-11-23 12:47:21,776 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:21,776 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:21,777 INFO L423 AbstractCegarLoop]: === Iteration 11 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:21,777 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:21,777 INFO L82 PathProgramCache]: Analyzing trace with hash -1935018135, now seen corresponding path program 1 times [2018-11-23 12:47:21,777 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:21,777 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:21,778 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:21,778 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:21,779 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:21,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:22,045 WARN L180 SmtUtils]: Spent 101.00 ms on a formula simplification. DAG size of input: 12 DAG size of output: 9 [2018-11-23 12:47:22,110 INFO L256 TraceCheckUtils]: 0: Hoare triple {9784#true} call ULTIMATE.init(); {9784#true} is VALID [2018-11-23 12:47:22,110 INFO L273 TraceCheckUtils]: 1: Hoare triple {9784#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {9784#true} is VALID [2018-11-23 12:47:22,110 INFO L273 TraceCheckUtils]: 2: Hoare triple {9784#true} assume true; {9784#true} is VALID [2018-11-23 12:47:22,111 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {9784#true} {9784#true} #604#return; {9784#true} is VALID [2018-11-23 12:47:22,111 INFO L256 TraceCheckUtils]: 4: Hoare triple {9784#true} call #t~ret138 := main(); {9784#true} is VALID [2018-11-23 12:47:22,111 INFO L273 TraceCheckUtils]: 5: Hoare triple {9784#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {9784#true} is VALID [2018-11-23 12:47:22,112 INFO L256 TraceCheckUtils]: 6: Hoare triple {9784#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {9784#true} is VALID [2018-11-23 12:47:22,112 INFO L273 TraceCheckUtils]: 7: Hoare triple {9784#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {9784#true} is VALID [2018-11-23 12:47:22,112 INFO L273 TraceCheckUtils]: 8: Hoare triple {9784#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {9784#true} is VALID [2018-11-23 12:47:22,113 INFO L273 TraceCheckUtils]: 9: Hoare triple {9784#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {9784#true} is VALID [2018-11-23 12:47:22,113 INFO L273 TraceCheckUtils]: 10: Hoare triple {9784#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {9784#true} is VALID [2018-11-23 12:47:22,113 INFO L273 TraceCheckUtils]: 11: Hoare triple {9784#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {9784#true} is VALID [2018-11-23 12:47:22,114 INFO L273 TraceCheckUtils]: 12: Hoare triple {9784#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {9784#true} is VALID [2018-11-23 12:47:22,114 INFO L273 TraceCheckUtils]: 13: Hoare triple {9784#true} assume !false; {9784#true} is VALID [2018-11-23 12:47:22,114 INFO L273 TraceCheckUtils]: 14: Hoare triple {9784#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {9784#true} is VALID [2018-11-23 12:47:22,114 INFO L273 TraceCheckUtils]: 15: Hoare triple {9784#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {9784#true} is VALID [2018-11-23 12:47:22,114 INFO L273 TraceCheckUtils]: 16: Hoare triple {9784#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {9784#true} is VALID [2018-11-23 12:47:22,115 INFO L273 TraceCheckUtils]: 17: Hoare triple {9784#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {9784#true} is VALID [2018-11-23 12:47:22,115 INFO L273 TraceCheckUtils]: 18: Hoare triple {9784#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {9784#true} is VALID [2018-11-23 12:47:22,115 INFO L273 TraceCheckUtils]: 19: Hoare triple {9784#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {9784#true} is VALID [2018-11-23 12:47:22,115 INFO L273 TraceCheckUtils]: 20: Hoare triple {9784#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {9784#true} is VALID [2018-11-23 12:47:22,115 INFO L273 TraceCheckUtils]: 21: Hoare triple {9784#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {9784#true} is VALID [2018-11-23 12:47:22,115 INFO L273 TraceCheckUtils]: 22: Hoare triple {9784#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {9784#true} is VALID [2018-11-23 12:47:22,116 INFO L273 TraceCheckUtils]: 23: Hoare triple {9784#true} assume 8464 == #t~mem32;havoc #t~mem32; {9784#true} is VALID [2018-11-23 12:47:22,116 INFO L273 TraceCheckUtils]: 24: Hoare triple {9784#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {9784#true} is VALID [2018-11-23 12:47:22,116 INFO L273 TraceCheckUtils]: 25: Hoare triple {9784#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {9784#true} is VALID [2018-11-23 12:47:22,132 INFO L273 TraceCheckUtils]: 26: Hoare triple {9784#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {9786#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:22,139 INFO L273 TraceCheckUtils]: 27: Hoare triple {9786#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {9786#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:22,139 INFO L273 TraceCheckUtils]: 28: Hoare triple {9786#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {9786#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:22,141 INFO L273 TraceCheckUtils]: 29: Hoare triple {9786#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {9786#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:22,141 INFO L273 TraceCheckUtils]: 30: Hoare triple {9786#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {9786#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:22,143 INFO L273 TraceCheckUtils]: 31: Hoare triple {9786#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {9786#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:22,143 INFO L273 TraceCheckUtils]: 32: Hoare triple {9786#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {9786#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:22,145 INFO L273 TraceCheckUtils]: 33: Hoare triple {9786#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {9786#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:22,145 INFO L273 TraceCheckUtils]: 34: Hoare triple {9786#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {9786#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:22,145 INFO L273 TraceCheckUtils]: 35: Hoare triple {9786#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {9786#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:22,146 INFO L273 TraceCheckUtils]: 36: Hoare triple {9786#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {9787#(= |ssl3_accept_#t~mem29| 8496)} is VALID [2018-11-23 12:47:22,146 INFO L273 TraceCheckUtils]: 37: Hoare triple {9787#(= |ssl3_accept_#t~mem29| 8496)} assume 8480 == #t~mem29;havoc #t~mem29; {9785#false} is VALID [2018-11-23 12:47:22,146 INFO L273 TraceCheckUtils]: 38: Hoare triple {9785#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {9785#false} is VALID [2018-11-23 12:47:22,147 INFO L273 TraceCheckUtils]: 39: Hoare triple {9785#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,147 INFO L273 TraceCheckUtils]: 40: Hoare triple {9785#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,147 INFO L273 TraceCheckUtils]: 41: Hoare triple {9785#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {9785#false} is VALID [2018-11-23 12:47:22,147 INFO L273 TraceCheckUtils]: 42: Hoare triple {9785#false} ~skip~0 := 0; {9785#false} is VALID [2018-11-23 12:47:22,147 INFO L273 TraceCheckUtils]: 43: Hoare triple {9785#false} assume !false; {9785#false} is VALID [2018-11-23 12:47:22,147 INFO L273 TraceCheckUtils]: 44: Hoare triple {9785#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,147 INFO L273 TraceCheckUtils]: 45: Hoare triple {9785#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,147 INFO L273 TraceCheckUtils]: 46: Hoare triple {9785#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,148 INFO L273 TraceCheckUtils]: 47: Hoare triple {9785#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,148 INFO L273 TraceCheckUtils]: 48: Hoare triple {9785#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,148 INFO L273 TraceCheckUtils]: 49: Hoare triple {9785#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,148 INFO L273 TraceCheckUtils]: 50: Hoare triple {9785#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,148 INFO L273 TraceCheckUtils]: 51: Hoare triple {9785#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,148 INFO L273 TraceCheckUtils]: 52: Hoare triple {9785#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,148 INFO L273 TraceCheckUtils]: 53: Hoare triple {9785#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,148 INFO L273 TraceCheckUtils]: 54: Hoare triple {9785#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,149 INFO L273 TraceCheckUtils]: 55: Hoare triple {9785#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,149 INFO L273 TraceCheckUtils]: 56: Hoare triple {9785#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,149 INFO L273 TraceCheckUtils]: 57: Hoare triple {9785#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,149 INFO L273 TraceCheckUtils]: 58: Hoare triple {9785#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,149 INFO L273 TraceCheckUtils]: 59: Hoare triple {9785#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,149 INFO L273 TraceCheckUtils]: 60: Hoare triple {9785#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,149 INFO L273 TraceCheckUtils]: 61: Hoare triple {9785#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,149 INFO L273 TraceCheckUtils]: 62: Hoare triple {9785#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,150 INFO L273 TraceCheckUtils]: 63: Hoare triple {9785#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,150 INFO L273 TraceCheckUtils]: 64: Hoare triple {9785#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,150 INFO L273 TraceCheckUtils]: 65: Hoare triple {9785#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,150 INFO L273 TraceCheckUtils]: 66: Hoare triple {9785#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,150 INFO L273 TraceCheckUtils]: 67: Hoare triple {9785#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,150 INFO L273 TraceCheckUtils]: 68: Hoare triple {9785#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,150 INFO L273 TraceCheckUtils]: 69: Hoare triple {9785#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,150 INFO L273 TraceCheckUtils]: 70: Hoare triple {9785#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,151 INFO L273 TraceCheckUtils]: 71: Hoare triple {9785#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,151 INFO L273 TraceCheckUtils]: 72: Hoare triple {9785#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,151 INFO L273 TraceCheckUtils]: 73: Hoare triple {9785#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,151 INFO L273 TraceCheckUtils]: 74: Hoare triple {9785#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,151 INFO L273 TraceCheckUtils]: 75: Hoare triple {9785#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,151 INFO L273 TraceCheckUtils]: 76: Hoare triple {9785#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {9785#false} is VALID [2018-11-23 12:47:22,151 INFO L273 TraceCheckUtils]: 77: Hoare triple {9785#false} assume 8672 == #t~mem56;havoc #t~mem56; {9785#false} is VALID [2018-11-23 12:47:22,151 INFO L273 TraceCheckUtils]: 78: Hoare triple {9785#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {9785#false} is VALID [2018-11-23 12:47:22,152 INFO L273 TraceCheckUtils]: 79: Hoare triple {9785#false} assume 4 == ~blastFlag~0; {9785#false} is VALID [2018-11-23 12:47:22,152 INFO L273 TraceCheckUtils]: 80: Hoare triple {9785#false} assume !false; {9785#false} is VALID [2018-11-23 12:47:22,155 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:22,156 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:22,156 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:22,156 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 12:47:22,156 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:22,157 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:22,241 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 81 edges. 81 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:22,241 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:22,242 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:22,242 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:22,242 INFO L87 Difference]: Start difference. First operand 189 states and 278 transitions. Second operand 4 states. [2018-11-23 12:47:23,714 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:23,714 INFO L93 Difference]: Finished difference Result 373 states and 553 transitions. [2018-11-23 12:47:23,714 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:23,714 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 12:47:23,715 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:23,715 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:23,718 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 451 transitions. [2018-11-23 12:47:23,718 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:23,720 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 451 transitions. [2018-11-23 12:47:23,721 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 451 transitions. [2018-11-23 12:47:24,156 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 451 edges. 451 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:24,161 INFO L225 Difference]: With dead ends: 373 [2018-11-23 12:47:24,162 INFO L226 Difference]: Without dead ends: 209 [2018-11-23 12:47:24,162 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:24,163 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 209 states. [2018-11-23 12:47:24,255 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 209 to 189. [2018-11-23 12:47:24,255 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:24,255 INFO L82 GeneralOperation]: Start isEquivalent. First operand 209 states. Second operand 189 states. [2018-11-23 12:47:24,255 INFO L74 IsIncluded]: Start isIncluded. First operand 209 states. Second operand 189 states. [2018-11-23 12:47:24,255 INFO L87 Difference]: Start difference. First operand 209 states. Second operand 189 states. [2018-11-23 12:47:24,260 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:24,260 INFO L93 Difference]: Finished difference Result 209 states and 302 transitions. [2018-11-23 12:47:24,260 INFO L276 IsEmpty]: Start isEmpty. Operand 209 states and 302 transitions. [2018-11-23 12:47:24,261 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:24,261 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:24,261 INFO L74 IsIncluded]: Start isIncluded. First operand 189 states. Second operand 209 states. [2018-11-23 12:47:24,262 INFO L87 Difference]: Start difference. First operand 189 states. Second operand 209 states. [2018-11-23 12:47:24,266 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:24,266 INFO L93 Difference]: Finished difference Result 209 states and 302 transitions. [2018-11-23 12:47:24,266 INFO L276 IsEmpty]: Start isEmpty. Operand 209 states and 302 transitions. [2018-11-23 12:47:24,267 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:24,267 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:24,267 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:24,267 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:24,267 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 189 states. [2018-11-23 12:47:24,271 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 277 transitions. [2018-11-23 12:47:24,271 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 277 transitions. Word has length 81 [2018-11-23 12:47:24,271 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:24,271 INFO L480 AbstractCegarLoop]: Abstraction has 189 states and 277 transitions. [2018-11-23 12:47:24,271 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:24,272 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 277 transitions. [2018-11-23 12:47:24,272 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2018-11-23 12:47:24,273 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:24,273 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:24,273 INFO L423 AbstractCegarLoop]: === Iteration 12 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:24,273 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:24,273 INFO L82 PathProgramCache]: Analyzing trace with hash 977683494, now seen corresponding path program 1 times [2018-11-23 12:47:24,274 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:24,274 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:24,275 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:24,275 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:24,275 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:24,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:24,476 INFO L256 TraceCheckUtils]: 0: Hoare triple {10875#true} call ULTIMATE.init(); {10875#true} is VALID [2018-11-23 12:47:24,476 INFO L273 TraceCheckUtils]: 1: Hoare triple {10875#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {10875#true} is VALID [2018-11-23 12:47:24,476 INFO L273 TraceCheckUtils]: 2: Hoare triple {10875#true} assume true; {10875#true} is VALID [2018-11-23 12:47:24,476 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {10875#true} {10875#true} #604#return; {10875#true} is VALID [2018-11-23 12:47:24,477 INFO L256 TraceCheckUtils]: 4: Hoare triple {10875#true} call #t~ret138 := main(); {10875#true} is VALID [2018-11-23 12:47:24,477 INFO L273 TraceCheckUtils]: 5: Hoare triple {10875#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {10875#true} is VALID [2018-11-23 12:47:24,477 INFO L256 TraceCheckUtils]: 6: Hoare triple {10875#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {10875#true} is VALID [2018-11-23 12:47:24,477 INFO L273 TraceCheckUtils]: 7: Hoare triple {10875#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {10875#true} is VALID [2018-11-23 12:47:24,477 INFO L273 TraceCheckUtils]: 8: Hoare triple {10875#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {10875#true} is VALID [2018-11-23 12:47:24,478 INFO L273 TraceCheckUtils]: 9: Hoare triple {10875#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {10875#true} is VALID [2018-11-23 12:47:24,478 INFO L273 TraceCheckUtils]: 10: Hoare triple {10875#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {10875#true} is VALID [2018-11-23 12:47:24,478 INFO L273 TraceCheckUtils]: 11: Hoare triple {10875#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {10875#true} is VALID [2018-11-23 12:47:24,478 INFO L273 TraceCheckUtils]: 12: Hoare triple {10875#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {10875#true} is VALID [2018-11-23 12:47:24,479 INFO L273 TraceCheckUtils]: 13: Hoare triple {10875#true} assume !false; {10875#true} is VALID [2018-11-23 12:47:24,479 INFO L273 TraceCheckUtils]: 14: Hoare triple {10875#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {10875#true} is VALID [2018-11-23 12:47:24,479 INFO L273 TraceCheckUtils]: 15: Hoare triple {10875#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {10875#true} is VALID [2018-11-23 12:47:24,479 INFO L273 TraceCheckUtils]: 16: Hoare triple {10875#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {10875#true} is VALID [2018-11-23 12:47:24,479 INFO L273 TraceCheckUtils]: 17: Hoare triple {10875#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {10875#true} is VALID [2018-11-23 12:47:24,480 INFO L273 TraceCheckUtils]: 18: Hoare triple {10875#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {10875#true} is VALID [2018-11-23 12:47:24,480 INFO L273 TraceCheckUtils]: 19: Hoare triple {10875#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {10875#true} is VALID [2018-11-23 12:47:24,480 INFO L273 TraceCheckUtils]: 20: Hoare triple {10875#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {10875#true} is VALID [2018-11-23 12:47:24,480 INFO L273 TraceCheckUtils]: 21: Hoare triple {10875#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {10875#true} is VALID [2018-11-23 12:47:24,480 INFO L273 TraceCheckUtils]: 22: Hoare triple {10875#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {10875#true} is VALID [2018-11-23 12:47:24,481 INFO L273 TraceCheckUtils]: 23: Hoare triple {10875#true} assume 8464 == #t~mem32;havoc #t~mem32; {10875#true} is VALID [2018-11-23 12:47:24,481 INFO L273 TraceCheckUtils]: 24: Hoare triple {10875#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {10875#true} is VALID [2018-11-23 12:47:24,481 INFO L273 TraceCheckUtils]: 25: Hoare triple {10875#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {10875#true} is VALID [2018-11-23 12:47:24,497 INFO L273 TraceCheckUtils]: 26: Hoare triple {10875#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {10877#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:24,506 INFO L273 TraceCheckUtils]: 27: Hoare triple {10877#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {10877#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:24,515 INFO L273 TraceCheckUtils]: 28: Hoare triple {10877#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {10877#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:24,516 INFO L273 TraceCheckUtils]: 29: Hoare triple {10877#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {10877#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:24,521 INFO L273 TraceCheckUtils]: 30: Hoare triple {10877#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {10877#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:24,521 INFO L273 TraceCheckUtils]: 31: Hoare triple {10877#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {10877#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:24,521 INFO L273 TraceCheckUtils]: 32: Hoare triple {10877#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {10877#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:24,522 INFO L273 TraceCheckUtils]: 33: Hoare triple {10877#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {10877#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:24,522 INFO L273 TraceCheckUtils]: 34: Hoare triple {10877#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {10877#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:24,522 INFO L273 TraceCheckUtils]: 35: Hoare triple {10877#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {10877#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:24,523 INFO L273 TraceCheckUtils]: 36: Hoare triple {10877#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {10877#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:24,523 INFO L273 TraceCheckUtils]: 37: Hoare triple {10877#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {10878#(= |ssl3_accept_#t~mem30| 8496)} is VALID [2018-11-23 12:47:24,523 INFO L273 TraceCheckUtils]: 38: Hoare triple {10878#(= |ssl3_accept_#t~mem30| 8496)} assume 8481 == #t~mem30;havoc #t~mem30; {10876#false} is VALID [2018-11-23 12:47:24,524 INFO L273 TraceCheckUtils]: 39: Hoare triple {10876#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {10876#false} is VALID [2018-11-23 12:47:24,524 INFO L273 TraceCheckUtils]: 40: Hoare triple {10876#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,524 INFO L273 TraceCheckUtils]: 41: Hoare triple {10876#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,524 INFO L273 TraceCheckUtils]: 42: Hoare triple {10876#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {10876#false} is VALID [2018-11-23 12:47:24,524 INFO L273 TraceCheckUtils]: 43: Hoare triple {10876#false} ~skip~0 := 0; {10876#false} is VALID [2018-11-23 12:47:24,524 INFO L273 TraceCheckUtils]: 44: Hoare triple {10876#false} assume !false; {10876#false} is VALID [2018-11-23 12:47:24,524 INFO L273 TraceCheckUtils]: 45: Hoare triple {10876#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,524 INFO L273 TraceCheckUtils]: 46: Hoare triple {10876#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,525 INFO L273 TraceCheckUtils]: 47: Hoare triple {10876#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,525 INFO L273 TraceCheckUtils]: 48: Hoare triple {10876#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,525 INFO L273 TraceCheckUtils]: 49: Hoare triple {10876#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,525 INFO L273 TraceCheckUtils]: 50: Hoare triple {10876#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,526 INFO L273 TraceCheckUtils]: 51: Hoare triple {10876#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,528 INFO L273 TraceCheckUtils]: 52: Hoare triple {10876#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,528 INFO L273 TraceCheckUtils]: 53: Hoare triple {10876#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,528 INFO L273 TraceCheckUtils]: 54: Hoare triple {10876#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,528 INFO L273 TraceCheckUtils]: 55: Hoare triple {10876#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,528 INFO L273 TraceCheckUtils]: 56: Hoare triple {10876#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,529 INFO L273 TraceCheckUtils]: 57: Hoare triple {10876#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,529 INFO L273 TraceCheckUtils]: 58: Hoare triple {10876#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,529 INFO L273 TraceCheckUtils]: 59: Hoare triple {10876#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,529 INFO L273 TraceCheckUtils]: 60: Hoare triple {10876#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,529 INFO L273 TraceCheckUtils]: 61: Hoare triple {10876#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,530 INFO L273 TraceCheckUtils]: 62: Hoare triple {10876#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,530 INFO L273 TraceCheckUtils]: 63: Hoare triple {10876#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,530 INFO L273 TraceCheckUtils]: 64: Hoare triple {10876#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,530 INFO L273 TraceCheckUtils]: 65: Hoare triple {10876#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,530 INFO L273 TraceCheckUtils]: 66: Hoare triple {10876#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,530 INFO L273 TraceCheckUtils]: 67: Hoare triple {10876#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,531 INFO L273 TraceCheckUtils]: 68: Hoare triple {10876#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,531 INFO L273 TraceCheckUtils]: 69: Hoare triple {10876#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,531 INFO L273 TraceCheckUtils]: 70: Hoare triple {10876#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,531 INFO L273 TraceCheckUtils]: 71: Hoare triple {10876#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,531 INFO L273 TraceCheckUtils]: 72: Hoare triple {10876#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,532 INFO L273 TraceCheckUtils]: 73: Hoare triple {10876#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,532 INFO L273 TraceCheckUtils]: 74: Hoare triple {10876#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,532 INFO L273 TraceCheckUtils]: 75: Hoare triple {10876#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,532 INFO L273 TraceCheckUtils]: 76: Hoare triple {10876#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,532 INFO L273 TraceCheckUtils]: 77: Hoare triple {10876#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {10876#false} is VALID [2018-11-23 12:47:24,532 INFO L273 TraceCheckUtils]: 78: Hoare triple {10876#false} assume 8672 == #t~mem56;havoc #t~mem56; {10876#false} is VALID [2018-11-23 12:47:24,533 INFO L273 TraceCheckUtils]: 79: Hoare triple {10876#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {10876#false} is VALID [2018-11-23 12:47:24,533 INFO L273 TraceCheckUtils]: 80: Hoare triple {10876#false} assume 4 == ~blastFlag~0; {10876#false} is VALID [2018-11-23 12:47:24,533 INFO L273 TraceCheckUtils]: 81: Hoare triple {10876#false} assume !false; {10876#false} is VALID [2018-11-23 12:47:24,538 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 32 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:24,538 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:24,538 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:24,539 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-23 12:47:24,539 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:24,539 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:24,701 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 82 edges. 82 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:24,701 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:24,701 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:24,701 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:24,702 INFO L87 Difference]: Start difference. First operand 189 states and 277 transitions. Second operand 4 states. [2018-11-23 12:47:25,747 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:25,747 INFO L93 Difference]: Finished difference Result 371 states and 549 transitions. [2018-11-23 12:47:25,748 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:25,748 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-23 12:47:25,748 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:25,748 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:25,750 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 448 transitions. [2018-11-23 12:47:25,751 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:25,753 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 448 transitions. [2018-11-23 12:47:25,753 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 448 transitions. [2018-11-23 12:47:26,335 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 448 edges. 448 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:26,340 INFO L225 Difference]: With dead ends: 371 [2018-11-23 12:47:26,340 INFO L226 Difference]: Without dead ends: 207 [2018-11-23 12:47:26,340 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:26,341 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 207 states. [2018-11-23 12:47:26,424 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 207 to 189. [2018-11-23 12:47:26,424 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:26,425 INFO L82 GeneralOperation]: Start isEquivalent. First operand 207 states. Second operand 189 states. [2018-11-23 12:47:26,425 INFO L74 IsIncluded]: Start isIncluded. First operand 207 states. Second operand 189 states. [2018-11-23 12:47:26,425 INFO L87 Difference]: Start difference. First operand 207 states. Second operand 189 states. [2018-11-23 12:47:26,429 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:26,429 INFO L93 Difference]: Finished difference Result 207 states and 299 transitions. [2018-11-23 12:47:26,430 INFO L276 IsEmpty]: Start isEmpty. Operand 207 states and 299 transitions. [2018-11-23 12:47:26,430 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:26,430 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:26,430 INFO L74 IsIncluded]: Start isIncluded. First operand 189 states. Second operand 207 states. [2018-11-23 12:47:26,431 INFO L87 Difference]: Start difference. First operand 189 states. Second operand 207 states. [2018-11-23 12:47:26,435 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:26,435 INFO L93 Difference]: Finished difference Result 207 states and 299 transitions. [2018-11-23 12:47:26,435 INFO L276 IsEmpty]: Start isEmpty. Operand 207 states and 299 transitions. [2018-11-23 12:47:26,436 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:26,436 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:26,436 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:26,436 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:26,436 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 189 states. [2018-11-23 12:47:26,440 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 276 transitions. [2018-11-23 12:47:26,440 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 276 transitions. Word has length 82 [2018-11-23 12:47:26,440 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:26,440 INFO L480 AbstractCegarLoop]: Abstraction has 189 states and 276 transitions. [2018-11-23 12:47:26,440 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:26,440 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 276 transitions. [2018-11-23 12:47:26,441 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2018-11-23 12:47:26,441 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:26,442 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:26,442 INFO L423 AbstractCegarLoop]: === Iteration 13 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:26,442 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:26,442 INFO L82 PathProgramCache]: Analyzing trace with hash 1478335015, now seen corresponding path program 1 times [2018-11-23 12:47:26,442 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:26,442 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:26,443 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:26,444 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:26,444 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:26,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:26,612 INFO L256 TraceCheckUtils]: 0: Hoare triple {11959#true} call ULTIMATE.init(); {11959#true} is VALID [2018-11-23 12:47:26,612 INFO L273 TraceCheckUtils]: 1: Hoare triple {11959#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {11959#true} is VALID [2018-11-23 12:47:26,612 INFO L273 TraceCheckUtils]: 2: Hoare triple {11959#true} assume true; {11959#true} is VALID [2018-11-23 12:47:26,613 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {11959#true} {11959#true} #604#return; {11959#true} is VALID [2018-11-23 12:47:26,613 INFO L256 TraceCheckUtils]: 4: Hoare triple {11959#true} call #t~ret138 := main(); {11959#true} is VALID [2018-11-23 12:47:26,613 INFO L273 TraceCheckUtils]: 5: Hoare triple {11959#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {11959#true} is VALID [2018-11-23 12:47:26,613 INFO L256 TraceCheckUtils]: 6: Hoare triple {11959#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {11959#true} is VALID [2018-11-23 12:47:26,613 INFO L273 TraceCheckUtils]: 7: Hoare triple {11959#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {11959#true} is VALID [2018-11-23 12:47:26,614 INFO L273 TraceCheckUtils]: 8: Hoare triple {11959#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {11959#true} is VALID [2018-11-23 12:47:26,614 INFO L273 TraceCheckUtils]: 9: Hoare triple {11959#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {11959#true} is VALID [2018-11-23 12:47:26,614 INFO L273 TraceCheckUtils]: 10: Hoare triple {11959#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {11959#true} is VALID [2018-11-23 12:47:26,614 INFO L273 TraceCheckUtils]: 11: Hoare triple {11959#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {11959#true} is VALID [2018-11-23 12:47:26,614 INFO L273 TraceCheckUtils]: 12: Hoare triple {11959#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {11959#true} is VALID [2018-11-23 12:47:26,615 INFO L273 TraceCheckUtils]: 13: Hoare triple {11959#true} assume !false; {11959#true} is VALID [2018-11-23 12:47:26,615 INFO L273 TraceCheckUtils]: 14: Hoare triple {11959#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {11959#true} is VALID [2018-11-23 12:47:26,615 INFO L273 TraceCheckUtils]: 15: Hoare triple {11959#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {11959#true} is VALID [2018-11-23 12:47:26,615 INFO L273 TraceCheckUtils]: 16: Hoare triple {11959#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {11959#true} is VALID [2018-11-23 12:47:26,615 INFO L273 TraceCheckUtils]: 17: Hoare triple {11959#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {11959#true} is VALID [2018-11-23 12:47:26,615 INFO L273 TraceCheckUtils]: 18: Hoare triple {11959#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {11959#true} is VALID [2018-11-23 12:47:26,615 INFO L273 TraceCheckUtils]: 19: Hoare triple {11959#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {11959#true} is VALID [2018-11-23 12:47:26,615 INFO L273 TraceCheckUtils]: 20: Hoare triple {11959#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {11959#true} is VALID [2018-11-23 12:47:26,616 INFO L273 TraceCheckUtils]: 21: Hoare triple {11959#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {11959#true} is VALID [2018-11-23 12:47:26,616 INFO L273 TraceCheckUtils]: 22: Hoare triple {11959#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {11959#true} is VALID [2018-11-23 12:47:26,616 INFO L273 TraceCheckUtils]: 23: Hoare triple {11959#true} assume 8464 == #t~mem32;havoc #t~mem32; {11959#true} is VALID [2018-11-23 12:47:26,616 INFO L273 TraceCheckUtils]: 24: Hoare triple {11959#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {11959#true} is VALID [2018-11-23 12:47:26,616 INFO L273 TraceCheckUtils]: 25: Hoare triple {11959#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {11959#true} is VALID [2018-11-23 12:47:26,617 INFO L273 TraceCheckUtils]: 26: Hoare triple {11959#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:26,617 INFO L273 TraceCheckUtils]: 27: Hoare triple {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:26,618 INFO L273 TraceCheckUtils]: 28: Hoare triple {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:26,618 INFO L273 TraceCheckUtils]: 29: Hoare triple {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:26,618 INFO L273 TraceCheckUtils]: 30: Hoare triple {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:26,619 INFO L273 TraceCheckUtils]: 31: Hoare triple {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:26,619 INFO L273 TraceCheckUtils]: 32: Hoare triple {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:26,619 INFO L273 TraceCheckUtils]: 33: Hoare triple {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:26,620 INFO L273 TraceCheckUtils]: 34: Hoare triple {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:26,620 INFO L273 TraceCheckUtils]: 35: Hoare triple {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:26,621 INFO L273 TraceCheckUtils]: 36: Hoare triple {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:26,621 INFO L273 TraceCheckUtils]: 37: Hoare triple {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:26,622 INFO L273 TraceCheckUtils]: 38: Hoare triple {11961#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {11962#(= |ssl3_accept_#t~mem31| 8496)} is VALID [2018-11-23 12:47:26,622 INFO L273 TraceCheckUtils]: 39: Hoare triple {11962#(= |ssl3_accept_#t~mem31| 8496)} assume 8482 == #t~mem31;havoc #t~mem31; {11960#false} is VALID [2018-11-23 12:47:26,623 INFO L273 TraceCheckUtils]: 40: Hoare triple {11960#false} call write~int(3, ~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,623 INFO L273 TraceCheckUtils]: 41: Hoare triple {11960#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,623 INFO L273 TraceCheckUtils]: 42: Hoare triple {11960#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {11960#false} is VALID [2018-11-23 12:47:26,623 INFO L273 TraceCheckUtils]: 43: Hoare triple {11960#false} ~skip~0 := 0; {11960#false} is VALID [2018-11-23 12:47:26,624 INFO L273 TraceCheckUtils]: 44: Hoare triple {11960#false} assume !false; {11960#false} is VALID [2018-11-23 12:47:26,624 INFO L273 TraceCheckUtils]: 45: Hoare triple {11960#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,624 INFO L273 TraceCheckUtils]: 46: Hoare triple {11960#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,624 INFO L273 TraceCheckUtils]: 47: Hoare triple {11960#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,624 INFO L273 TraceCheckUtils]: 48: Hoare triple {11960#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,624 INFO L273 TraceCheckUtils]: 49: Hoare triple {11960#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,625 INFO L273 TraceCheckUtils]: 50: Hoare triple {11960#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,625 INFO L273 TraceCheckUtils]: 51: Hoare triple {11960#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,625 INFO L273 TraceCheckUtils]: 52: Hoare triple {11960#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,625 INFO L273 TraceCheckUtils]: 53: Hoare triple {11960#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,625 INFO L273 TraceCheckUtils]: 54: Hoare triple {11960#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,626 INFO L273 TraceCheckUtils]: 55: Hoare triple {11960#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,626 INFO L273 TraceCheckUtils]: 56: Hoare triple {11960#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,626 INFO L273 TraceCheckUtils]: 57: Hoare triple {11960#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,626 INFO L273 TraceCheckUtils]: 58: Hoare triple {11960#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,626 INFO L273 TraceCheckUtils]: 59: Hoare triple {11960#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,626 INFO L273 TraceCheckUtils]: 60: Hoare triple {11960#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,626 INFO L273 TraceCheckUtils]: 61: Hoare triple {11960#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,626 INFO L273 TraceCheckUtils]: 62: Hoare triple {11960#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,626 INFO L273 TraceCheckUtils]: 63: Hoare triple {11960#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,627 INFO L273 TraceCheckUtils]: 64: Hoare triple {11960#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,627 INFO L273 TraceCheckUtils]: 65: Hoare triple {11960#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,627 INFO L273 TraceCheckUtils]: 66: Hoare triple {11960#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,627 INFO L273 TraceCheckUtils]: 67: Hoare triple {11960#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,627 INFO L273 TraceCheckUtils]: 68: Hoare triple {11960#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,627 INFO L273 TraceCheckUtils]: 69: Hoare triple {11960#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,627 INFO L273 TraceCheckUtils]: 70: Hoare triple {11960#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,627 INFO L273 TraceCheckUtils]: 71: Hoare triple {11960#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,628 INFO L273 TraceCheckUtils]: 72: Hoare triple {11960#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,628 INFO L273 TraceCheckUtils]: 73: Hoare triple {11960#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,628 INFO L273 TraceCheckUtils]: 74: Hoare triple {11960#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,628 INFO L273 TraceCheckUtils]: 75: Hoare triple {11960#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,628 INFO L273 TraceCheckUtils]: 76: Hoare triple {11960#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,628 INFO L273 TraceCheckUtils]: 77: Hoare triple {11960#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {11960#false} is VALID [2018-11-23 12:47:26,628 INFO L273 TraceCheckUtils]: 78: Hoare triple {11960#false} assume 8672 == #t~mem56;havoc #t~mem56; {11960#false} is VALID [2018-11-23 12:47:26,628 INFO L273 TraceCheckUtils]: 79: Hoare triple {11960#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {11960#false} is VALID [2018-11-23 12:47:26,629 INFO L273 TraceCheckUtils]: 80: Hoare triple {11960#false} assume 4 == ~blastFlag~0; {11960#false} is VALID [2018-11-23 12:47:26,629 INFO L273 TraceCheckUtils]: 81: Hoare triple {11960#false} assume !false; {11960#false} is VALID [2018-11-23 12:47:26,634 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 34 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:26,634 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:26,634 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:26,635 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-23 12:47:26,635 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:26,635 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:26,716 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 82 edges. 82 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:26,717 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:26,717 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:26,717 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:26,717 INFO L87 Difference]: Start difference. First operand 189 states and 276 transitions. Second operand 4 states. [2018-11-23 12:47:27,674 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:27,675 INFO L93 Difference]: Finished difference Result 370 states and 546 transitions. [2018-11-23 12:47:27,675 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:27,675 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-23 12:47:27,675 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:27,675 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:27,678 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 446 transitions. [2018-11-23 12:47:27,678 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:27,680 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 446 transitions. [2018-11-23 12:47:27,680 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 446 transitions. [2018-11-23 12:47:28,125 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 446 edges. 446 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:28,130 INFO L225 Difference]: With dead ends: 370 [2018-11-23 12:47:28,131 INFO L226 Difference]: Without dead ends: 206 [2018-11-23 12:47:28,131 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:28,132 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 206 states. [2018-11-23 12:47:28,218 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 206 to 189. [2018-11-23 12:47:28,219 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:28,219 INFO L82 GeneralOperation]: Start isEquivalent. First operand 206 states. Second operand 189 states. [2018-11-23 12:47:28,219 INFO L74 IsIncluded]: Start isIncluded. First operand 206 states. Second operand 189 states. [2018-11-23 12:47:28,219 INFO L87 Difference]: Start difference. First operand 206 states. Second operand 189 states. [2018-11-23 12:47:28,223 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:28,223 INFO L93 Difference]: Finished difference Result 206 states and 297 transitions. [2018-11-23 12:47:28,224 INFO L276 IsEmpty]: Start isEmpty. Operand 206 states and 297 transitions. [2018-11-23 12:47:28,224 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:28,224 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:28,224 INFO L74 IsIncluded]: Start isIncluded. First operand 189 states. Second operand 206 states. [2018-11-23 12:47:28,224 INFO L87 Difference]: Start difference. First operand 189 states. Second operand 206 states. [2018-11-23 12:47:28,229 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:28,229 INFO L93 Difference]: Finished difference Result 206 states and 297 transitions. [2018-11-23 12:47:28,229 INFO L276 IsEmpty]: Start isEmpty. Operand 206 states and 297 transitions. [2018-11-23 12:47:28,229 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:28,230 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:28,230 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:28,230 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:28,230 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 189 states. [2018-11-23 12:47:28,234 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 275 transitions. [2018-11-23 12:47:28,234 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 275 transitions. Word has length 82 [2018-11-23 12:47:28,234 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:28,234 INFO L480 AbstractCegarLoop]: Abstraction has 189 states and 275 transitions. [2018-11-23 12:47:28,234 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:28,235 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 275 transitions. [2018-11-23 12:47:28,235 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2018-11-23 12:47:28,236 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:28,236 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:28,236 INFO L423 AbstractCegarLoop]: === Iteration 14 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:28,236 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:28,237 INFO L82 PathProgramCache]: Analyzing trace with hash 775884646, now seen corresponding path program 1 times [2018-11-23 12:47:28,237 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:28,237 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:28,238 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:28,238 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:28,238 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:28,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:28,444 INFO L256 TraceCheckUtils]: 0: Hoare triple {13039#true} call ULTIMATE.init(); {13039#true} is VALID [2018-11-23 12:47:28,445 INFO L273 TraceCheckUtils]: 1: Hoare triple {13039#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {13039#true} is VALID [2018-11-23 12:47:28,445 INFO L273 TraceCheckUtils]: 2: Hoare triple {13039#true} assume true; {13039#true} is VALID [2018-11-23 12:47:28,445 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {13039#true} {13039#true} #604#return; {13039#true} is VALID [2018-11-23 12:47:28,445 INFO L256 TraceCheckUtils]: 4: Hoare triple {13039#true} call #t~ret138 := main(); {13039#true} is VALID [2018-11-23 12:47:28,445 INFO L273 TraceCheckUtils]: 5: Hoare triple {13039#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {13039#true} is VALID [2018-11-23 12:47:28,446 INFO L256 TraceCheckUtils]: 6: Hoare triple {13039#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {13039#true} is VALID [2018-11-23 12:47:28,446 INFO L273 TraceCheckUtils]: 7: Hoare triple {13039#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {13039#true} is VALID [2018-11-23 12:47:28,446 INFO L273 TraceCheckUtils]: 8: Hoare triple {13039#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {13039#true} is VALID [2018-11-23 12:47:28,446 INFO L273 TraceCheckUtils]: 9: Hoare triple {13039#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {13039#true} is VALID [2018-11-23 12:47:28,446 INFO L273 TraceCheckUtils]: 10: Hoare triple {13039#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {13039#true} is VALID [2018-11-23 12:47:28,447 INFO L273 TraceCheckUtils]: 11: Hoare triple {13039#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {13039#true} is VALID [2018-11-23 12:47:28,447 INFO L273 TraceCheckUtils]: 12: Hoare triple {13039#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {13039#true} is VALID [2018-11-23 12:47:28,447 INFO L273 TraceCheckUtils]: 13: Hoare triple {13039#true} assume !false; {13039#true} is VALID [2018-11-23 12:47:28,447 INFO L273 TraceCheckUtils]: 14: Hoare triple {13039#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {13039#true} is VALID [2018-11-23 12:47:28,447 INFO L273 TraceCheckUtils]: 15: Hoare triple {13039#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {13039#true} is VALID [2018-11-23 12:47:28,447 INFO L273 TraceCheckUtils]: 16: Hoare triple {13039#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {13039#true} is VALID [2018-11-23 12:47:28,447 INFO L273 TraceCheckUtils]: 17: Hoare triple {13039#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {13039#true} is VALID [2018-11-23 12:47:28,448 INFO L273 TraceCheckUtils]: 18: Hoare triple {13039#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {13039#true} is VALID [2018-11-23 12:47:28,448 INFO L273 TraceCheckUtils]: 19: Hoare triple {13039#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {13039#true} is VALID [2018-11-23 12:47:28,448 INFO L273 TraceCheckUtils]: 20: Hoare triple {13039#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {13039#true} is VALID [2018-11-23 12:47:28,448 INFO L273 TraceCheckUtils]: 21: Hoare triple {13039#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {13039#true} is VALID [2018-11-23 12:47:28,448 INFO L273 TraceCheckUtils]: 22: Hoare triple {13039#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {13039#true} is VALID [2018-11-23 12:47:28,448 INFO L273 TraceCheckUtils]: 23: Hoare triple {13039#true} assume 8464 == #t~mem32;havoc #t~mem32; {13039#true} is VALID [2018-11-23 12:47:28,448 INFO L273 TraceCheckUtils]: 24: Hoare triple {13039#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {13039#true} is VALID [2018-11-23 12:47:28,448 INFO L273 TraceCheckUtils]: 25: Hoare triple {13039#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {13039#true} is VALID [2018-11-23 12:47:28,449 INFO L273 TraceCheckUtils]: 26: Hoare triple {13039#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {13041#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:28,450 INFO L273 TraceCheckUtils]: 27: Hoare triple {13041#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {13041#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:28,450 INFO L273 TraceCheckUtils]: 28: Hoare triple {13041#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {13041#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:28,450 INFO L273 TraceCheckUtils]: 29: Hoare triple {13041#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {13041#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:28,451 INFO L273 TraceCheckUtils]: 30: Hoare triple {13041#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {13041#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:28,451 INFO L273 TraceCheckUtils]: 31: Hoare triple {13041#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {13041#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:28,452 INFO L273 TraceCheckUtils]: 32: Hoare triple {13041#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {13042#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem25| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:47:28,452 INFO L273 TraceCheckUtils]: 33: Hoare triple {13042#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem25| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume 16384 == #t~mem25;havoc #t~mem25; {13040#false} is VALID [2018-11-23 12:47:28,452 INFO L273 TraceCheckUtils]: 34: Hoare triple {13040#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,452 INFO L273 TraceCheckUtils]: 35: Hoare triple {13040#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {13040#false} is VALID [2018-11-23 12:47:28,453 INFO L273 TraceCheckUtils]: 36: Hoare triple {13040#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,453 INFO L273 TraceCheckUtils]: 37: Hoare triple {13040#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,453 INFO L273 TraceCheckUtils]: 38: Hoare triple {13040#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {13040#false} is VALID [2018-11-23 12:47:28,453 INFO L273 TraceCheckUtils]: 39: Hoare triple {13040#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,453 INFO L273 TraceCheckUtils]: 40: Hoare triple {13040#false} assume 12292 != #t~mem62;havoc #t~mem62; {13040#false} is VALID [2018-11-23 12:47:28,454 INFO L273 TraceCheckUtils]: 41: Hoare triple {13040#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {13040#false} is VALID [2018-11-23 12:47:28,454 INFO L273 TraceCheckUtils]: 42: Hoare triple {13040#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,454 INFO L273 TraceCheckUtils]: 43: Hoare triple {13040#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {13040#false} is VALID [2018-11-23 12:47:28,454 INFO L273 TraceCheckUtils]: 44: Hoare triple {13040#false} ~skip~0 := 0; {13040#false} is VALID [2018-11-23 12:47:28,454 INFO L273 TraceCheckUtils]: 45: Hoare triple {13040#false} assume !false; {13040#false} is VALID [2018-11-23 12:47:28,455 INFO L273 TraceCheckUtils]: 46: Hoare triple {13040#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,455 INFO L273 TraceCheckUtils]: 47: Hoare triple {13040#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,455 INFO L273 TraceCheckUtils]: 48: Hoare triple {13040#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,455 INFO L273 TraceCheckUtils]: 49: Hoare triple {13040#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,455 INFO L273 TraceCheckUtils]: 50: Hoare triple {13040#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,455 INFO L273 TraceCheckUtils]: 51: Hoare triple {13040#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,455 INFO L273 TraceCheckUtils]: 52: Hoare triple {13040#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,455 INFO L273 TraceCheckUtils]: 53: Hoare triple {13040#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,456 INFO L273 TraceCheckUtils]: 54: Hoare triple {13040#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,456 INFO L273 TraceCheckUtils]: 55: Hoare triple {13040#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,456 INFO L273 TraceCheckUtils]: 56: Hoare triple {13040#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,456 INFO L273 TraceCheckUtils]: 57: Hoare triple {13040#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,456 INFO L273 TraceCheckUtils]: 58: Hoare triple {13040#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,456 INFO L273 TraceCheckUtils]: 59: Hoare triple {13040#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,456 INFO L273 TraceCheckUtils]: 60: Hoare triple {13040#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,456 INFO L273 TraceCheckUtils]: 61: Hoare triple {13040#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,457 INFO L273 TraceCheckUtils]: 62: Hoare triple {13040#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,457 INFO L273 TraceCheckUtils]: 63: Hoare triple {13040#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,457 INFO L273 TraceCheckUtils]: 64: Hoare triple {13040#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,457 INFO L273 TraceCheckUtils]: 65: Hoare triple {13040#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,457 INFO L273 TraceCheckUtils]: 66: Hoare triple {13040#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,457 INFO L273 TraceCheckUtils]: 67: Hoare triple {13040#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,457 INFO L273 TraceCheckUtils]: 68: Hoare triple {13040#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,457 INFO L273 TraceCheckUtils]: 69: Hoare triple {13040#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,457 INFO L273 TraceCheckUtils]: 70: Hoare triple {13040#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,458 INFO L273 TraceCheckUtils]: 71: Hoare triple {13040#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,458 INFO L273 TraceCheckUtils]: 72: Hoare triple {13040#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,458 INFO L273 TraceCheckUtils]: 73: Hoare triple {13040#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,458 INFO L273 TraceCheckUtils]: 74: Hoare triple {13040#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,458 INFO L273 TraceCheckUtils]: 75: Hoare triple {13040#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,458 INFO L273 TraceCheckUtils]: 76: Hoare triple {13040#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,458 INFO L273 TraceCheckUtils]: 77: Hoare triple {13040#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,458 INFO L273 TraceCheckUtils]: 78: Hoare triple {13040#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {13040#false} is VALID [2018-11-23 12:47:28,459 INFO L273 TraceCheckUtils]: 79: Hoare triple {13040#false} assume 8672 == #t~mem56;havoc #t~mem56; {13040#false} is VALID [2018-11-23 12:47:28,459 INFO L273 TraceCheckUtils]: 80: Hoare triple {13040#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {13040#false} is VALID [2018-11-23 12:47:28,459 INFO L273 TraceCheckUtils]: 81: Hoare triple {13040#false} assume 4 == ~blastFlag~0; {13040#false} is VALID [2018-11-23 12:47:28,459 INFO L273 TraceCheckUtils]: 82: Hoare triple {13040#false} assume !false; {13040#false} is VALID [2018-11-23 12:47:28,463 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:28,464 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:28,464 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:28,464 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 83 [2018-11-23 12:47:28,464 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:28,464 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:28,544 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 83 edges. 83 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:28,544 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:28,544 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:28,545 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:28,545 INFO L87 Difference]: Start difference. First operand 189 states and 275 transitions. Second operand 4 states. [2018-11-23 12:47:29,473 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:29,473 INFO L93 Difference]: Finished difference Result 370 states and 544 transitions. [2018-11-23 12:47:29,473 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:29,474 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 83 [2018-11-23 12:47:29,474 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:29,474 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:29,476 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 445 transitions. [2018-11-23 12:47:29,476 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:29,478 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 445 transitions. [2018-11-23 12:47:29,478 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 445 transitions. [2018-11-23 12:47:29,897 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 445 edges. 445 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:29,901 INFO L225 Difference]: With dead ends: 370 [2018-11-23 12:47:29,901 INFO L226 Difference]: Without dead ends: 206 [2018-11-23 12:47:29,902 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:29,902 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 206 states. [2018-11-23 12:47:29,964 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 206 to 189. [2018-11-23 12:47:29,964 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:29,965 INFO L82 GeneralOperation]: Start isEquivalent. First operand 206 states. Second operand 189 states. [2018-11-23 12:47:29,965 INFO L74 IsIncluded]: Start isIncluded. First operand 206 states. Second operand 189 states. [2018-11-23 12:47:29,965 INFO L87 Difference]: Start difference. First operand 206 states. Second operand 189 states. [2018-11-23 12:47:29,969 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:29,969 INFO L93 Difference]: Finished difference Result 206 states and 296 transitions. [2018-11-23 12:47:29,970 INFO L276 IsEmpty]: Start isEmpty. Operand 206 states and 296 transitions. [2018-11-23 12:47:29,970 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:29,970 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:29,970 INFO L74 IsIncluded]: Start isIncluded. First operand 189 states. Second operand 206 states. [2018-11-23 12:47:29,970 INFO L87 Difference]: Start difference. First operand 189 states. Second operand 206 states. [2018-11-23 12:47:29,975 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:29,975 INFO L93 Difference]: Finished difference Result 206 states and 296 transitions. [2018-11-23 12:47:29,975 INFO L276 IsEmpty]: Start isEmpty. Operand 206 states and 296 transitions. [2018-11-23 12:47:29,975 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:29,975 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:29,975 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:29,975 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:29,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 189 states. [2018-11-23 12:47:29,978 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 274 transitions. [2018-11-23 12:47:29,978 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 274 transitions. Word has length 83 [2018-11-23 12:47:29,979 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:29,979 INFO L480 AbstractCegarLoop]: Abstraction has 189 states and 274 transitions. [2018-11-23 12:47:29,979 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:29,979 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 274 transitions. [2018-11-23 12:47:29,979 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2018-11-23 12:47:29,980 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:29,980 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:29,980 INFO L423 AbstractCegarLoop]: === Iteration 15 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:29,980 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:29,980 INFO L82 PathProgramCache]: Analyzing trace with hash -593661405, now seen corresponding path program 1 times [2018-11-23 12:47:29,981 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:29,981 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:29,982 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:29,982 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:29,982 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:29,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:30,604 WARN L180 SmtUtils]: Spent 167.00 ms on a formula simplification. DAG size of input: 20 DAG size of output: 17 [2018-11-23 12:47:30,626 INFO L256 TraceCheckUtils]: 0: Hoare triple {14117#true} call ULTIMATE.init(); {14117#true} is VALID [2018-11-23 12:47:30,626 INFO L273 TraceCheckUtils]: 1: Hoare triple {14117#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {14117#true} is VALID [2018-11-23 12:47:30,626 INFO L273 TraceCheckUtils]: 2: Hoare triple {14117#true} assume true; {14117#true} is VALID [2018-11-23 12:47:30,626 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {14117#true} {14117#true} #604#return; {14117#true} is VALID [2018-11-23 12:47:30,627 INFO L256 TraceCheckUtils]: 4: Hoare triple {14117#true} call #t~ret138 := main(); {14117#true} is VALID [2018-11-23 12:47:30,627 INFO L273 TraceCheckUtils]: 5: Hoare triple {14117#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {14117#true} is VALID [2018-11-23 12:47:30,627 INFO L256 TraceCheckUtils]: 6: Hoare triple {14117#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {14117#true} is VALID [2018-11-23 12:47:30,627 INFO L273 TraceCheckUtils]: 7: Hoare triple {14117#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {14117#true} is VALID [2018-11-23 12:47:30,628 INFO L273 TraceCheckUtils]: 8: Hoare triple {14117#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {14117#true} is VALID [2018-11-23 12:47:30,628 INFO L273 TraceCheckUtils]: 9: Hoare triple {14117#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {14117#true} is VALID [2018-11-23 12:47:30,628 INFO L273 TraceCheckUtils]: 10: Hoare triple {14117#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {14117#true} is VALID [2018-11-23 12:47:30,628 INFO L273 TraceCheckUtils]: 11: Hoare triple {14117#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {14117#true} is VALID [2018-11-23 12:47:30,628 INFO L273 TraceCheckUtils]: 12: Hoare triple {14117#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {14117#true} is VALID [2018-11-23 12:47:30,629 INFO L273 TraceCheckUtils]: 13: Hoare triple {14117#true} assume !false; {14117#true} is VALID [2018-11-23 12:47:30,629 INFO L273 TraceCheckUtils]: 14: Hoare triple {14117#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {14117#true} is VALID [2018-11-23 12:47:30,629 INFO L273 TraceCheckUtils]: 15: Hoare triple {14117#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {14117#true} is VALID [2018-11-23 12:47:30,629 INFO L273 TraceCheckUtils]: 16: Hoare triple {14117#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {14117#true} is VALID [2018-11-23 12:47:30,629 INFO L273 TraceCheckUtils]: 17: Hoare triple {14117#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {14117#true} is VALID [2018-11-23 12:47:30,629 INFO L273 TraceCheckUtils]: 18: Hoare triple {14117#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {14117#true} is VALID [2018-11-23 12:47:30,629 INFO L273 TraceCheckUtils]: 19: Hoare triple {14117#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {14117#true} is VALID [2018-11-23 12:47:30,630 INFO L273 TraceCheckUtils]: 20: Hoare triple {14117#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {14117#true} is VALID [2018-11-23 12:47:30,630 INFO L273 TraceCheckUtils]: 21: Hoare triple {14117#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {14117#true} is VALID [2018-11-23 12:47:30,630 INFO L273 TraceCheckUtils]: 22: Hoare triple {14117#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {14117#true} is VALID [2018-11-23 12:47:30,630 INFO L273 TraceCheckUtils]: 23: Hoare triple {14117#true} assume 8464 == #t~mem32;havoc #t~mem32; {14117#true} is VALID [2018-11-23 12:47:30,630 INFO L273 TraceCheckUtils]: 24: Hoare triple {14117#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {14117#true} is VALID [2018-11-23 12:47:30,630 INFO L273 TraceCheckUtils]: 25: Hoare triple {14117#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {14117#true} is VALID [2018-11-23 12:47:30,632 INFO L273 TraceCheckUtils]: 26: Hoare triple {14117#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {14119#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:30,632 INFO L273 TraceCheckUtils]: 27: Hoare triple {14119#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {14119#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:30,632 INFO L273 TraceCheckUtils]: 28: Hoare triple {14119#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {14119#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:30,633 INFO L273 TraceCheckUtils]: 29: Hoare triple {14119#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {14119#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:30,633 INFO L273 TraceCheckUtils]: 30: Hoare triple {14119#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {14119#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:30,633 INFO L273 TraceCheckUtils]: 31: Hoare triple {14119#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {14119#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:30,634 INFO L273 TraceCheckUtils]: 32: Hoare triple {14119#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {14119#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:30,634 INFO L273 TraceCheckUtils]: 33: Hoare triple {14119#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {14120#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem26| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:47:30,635 INFO L273 TraceCheckUtils]: 34: Hoare triple {14120#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem26| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume 8192 == #t~mem26;havoc #t~mem26; {14118#false} is VALID [2018-11-23 12:47:30,635 INFO L273 TraceCheckUtils]: 35: Hoare triple {14118#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,635 INFO L273 TraceCheckUtils]: 36: Hoare triple {14118#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {14118#false} is VALID [2018-11-23 12:47:30,636 INFO L273 TraceCheckUtils]: 37: Hoare triple {14118#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,636 INFO L273 TraceCheckUtils]: 38: Hoare triple {14118#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,636 INFO L273 TraceCheckUtils]: 39: Hoare triple {14118#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {14118#false} is VALID [2018-11-23 12:47:30,636 INFO L273 TraceCheckUtils]: 40: Hoare triple {14118#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,636 INFO L273 TraceCheckUtils]: 41: Hoare triple {14118#false} assume 12292 != #t~mem62;havoc #t~mem62; {14118#false} is VALID [2018-11-23 12:47:30,637 INFO L273 TraceCheckUtils]: 42: Hoare triple {14118#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {14118#false} is VALID [2018-11-23 12:47:30,637 INFO L273 TraceCheckUtils]: 43: Hoare triple {14118#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,637 INFO L273 TraceCheckUtils]: 44: Hoare triple {14118#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {14118#false} is VALID [2018-11-23 12:47:30,637 INFO L273 TraceCheckUtils]: 45: Hoare triple {14118#false} ~skip~0 := 0; {14118#false} is VALID [2018-11-23 12:47:30,637 INFO L273 TraceCheckUtils]: 46: Hoare triple {14118#false} assume !false; {14118#false} is VALID [2018-11-23 12:47:30,638 INFO L273 TraceCheckUtils]: 47: Hoare triple {14118#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,638 INFO L273 TraceCheckUtils]: 48: Hoare triple {14118#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,638 INFO L273 TraceCheckUtils]: 49: Hoare triple {14118#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,638 INFO L273 TraceCheckUtils]: 50: Hoare triple {14118#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,638 INFO L273 TraceCheckUtils]: 51: Hoare triple {14118#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,639 INFO L273 TraceCheckUtils]: 52: Hoare triple {14118#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,639 INFO L273 TraceCheckUtils]: 53: Hoare triple {14118#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,639 INFO L273 TraceCheckUtils]: 54: Hoare triple {14118#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,639 INFO L273 TraceCheckUtils]: 55: Hoare triple {14118#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,639 INFO L273 TraceCheckUtils]: 56: Hoare triple {14118#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,640 INFO L273 TraceCheckUtils]: 57: Hoare triple {14118#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,640 INFO L273 TraceCheckUtils]: 58: Hoare triple {14118#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,640 INFO L273 TraceCheckUtils]: 59: Hoare triple {14118#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,640 INFO L273 TraceCheckUtils]: 60: Hoare triple {14118#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,640 INFO L273 TraceCheckUtils]: 61: Hoare triple {14118#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,640 INFO L273 TraceCheckUtils]: 62: Hoare triple {14118#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,640 INFO L273 TraceCheckUtils]: 63: Hoare triple {14118#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,641 INFO L273 TraceCheckUtils]: 64: Hoare triple {14118#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,641 INFO L273 TraceCheckUtils]: 65: Hoare triple {14118#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,641 INFO L273 TraceCheckUtils]: 66: Hoare triple {14118#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,641 INFO L273 TraceCheckUtils]: 67: Hoare triple {14118#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,641 INFO L273 TraceCheckUtils]: 68: Hoare triple {14118#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,641 INFO L273 TraceCheckUtils]: 69: Hoare triple {14118#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,641 INFO L273 TraceCheckUtils]: 70: Hoare triple {14118#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,641 INFO L273 TraceCheckUtils]: 71: Hoare triple {14118#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,641 INFO L273 TraceCheckUtils]: 72: Hoare triple {14118#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,642 INFO L273 TraceCheckUtils]: 73: Hoare triple {14118#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,642 INFO L273 TraceCheckUtils]: 74: Hoare triple {14118#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,642 INFO L273 TraceCheckUtils]: 75: Hoare triple {14118#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,642 INFO L273 TraceCheckUtils]: 76: Hoare triple {14118#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,642 INFO L273 TraceCheckUtils]: 77: Hoare triple {14118#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,642 INFO L273 TraceCheckUtils]: 78: Hoare triple {14118#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,642 INFO L273 TraceCheckUtils]: 79: Hoare triple {14118#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {14118#false} is VALID [2018-11-23 12:47:30,642 INFO L273 TraceCheckUtils]: 80: Hoare triple {14118#false} assume 8672 == #t~mem56;havoc #t~mem56; {14118#false} is VALID [2018-11-23 12:47:30,642 INFO L273 TraceCheckUtils]: 81: Hoare triple {14118#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {14118#false} is VALID [2018-11-23 12:47:30,643 INFO L273 TraceCheckUtils]: 82: Hoare triple {14118#false} assume 4 == ~blastFlag~0; {14118#false} is VALID [2018-11-23 12:47:30,643 INFO L273 TraceCheckUtils]: 83: Hoare triple {14118#false} assume !false; {14118#false} is VALID [2018-11-23 12:47:30,649 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:30,650 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:30,650 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:30,650 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 84 [2018-11-23 12:47:30,650 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:30,650 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:30,750 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 84 edges. 84 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:30,751 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:30,751 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:30,751 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:30,752 INFO L87 Difference]: Start difference. First operand 189 states and 274 transitions. Second operand 4 states. [2018-11-23 12:47:31,672 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:31,673 INFO L93 Difference]: Finished difference Result 370 states and 542 transitions. [2018-11-23 12:47:31,673 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:31,673 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 84 [2018-11-23 12:47:31,673 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:31,673 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:31,675 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 444 transitions. [2018-11-23 12:47:31,676 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:31,677 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 444 transitions. [2018-11-23 12:47:31,678 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 444 transitions. [2018-11-23 12:47:32,130 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 444 edges. 444 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:32,134 INFO L225 Difference]: With dead ends: 370 [2018-11-23 12:47:32,134 INFO L226 Difference]: Without dead ends: 206 [2018-11-23 12:47:32,135 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:32,136 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 206 states. [2018-11-23 12:47:32,200 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 206 to 189. [2018-11-23 12:47:32,201 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:32,201 INFO L82 GeneralOperation]: Start isEquivalent. First operand 206 states. Second operand 189 states. [2018-11-23 12:47:32,201 INFO L74 IsIncluded]: Start isIncluded. First operand 206 states. Second operand 189 states. [2018-11-23 12:47:32,201 INFO L87 Difference]: Start difference. First operand 206 states. Second operand 189 states. [2018-11-23 12:47:32,204 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:32,204 INFO L93 Difference]: Finished difference Result 206 states and 295 transitions. [2018-11-23 12:47:32,204 INFO L276 IsEmpty]: Start isEmpty. Operand 206 states and 295 transitions. [2018-11-23 12:47:32,205 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:32,205 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:32,205 INFO L74 IsIncluded]: Start isIncluded. First operand 189 states. Second operand 206 states. [2018-11-23 12:47:32,205 INFO L87 Difference]: Start difference. First operand 189 states. Second operand 206 states. [2018-11-23 12:47:32,209 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:32,210 INFO L93 Difference]: Finished difference Result 206 states and 295 transitions. [2018-11-23 12:47:32,210 INFO L276 IsEmpty]: Start isEmpty. Operand 206 states and 295 transitions. [2018-11-23 12:47:32,210 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:32,211 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:32,211 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:32,211 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:32,211 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 189 states. [2018-11-23 12:47:32,214 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 273 transitions. [2018-11-23 12:47:32,215 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 273 transitions. Word has length 84 [2018-11-23 12:47:32,215 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:32,215 INFO L480 AbstractCegarLoop]: Abstraction has 189 states and 273 transitions. [2018-11-23 12:47:32,215 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:32,215 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 273 transitions. [2018-11-23 12:47:32,216 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2018-11-23 12:47:32,216 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:32,216 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:32,217 INFO L423 AbstractCegarLoop]: === Iteration 16 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:32,217 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:32,217 INFO L82 PathProgramCache]: Analyzing trace with hash -1302616671, now seen corresponding path program 1 times [2018-11-23 12:47:32,217 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:32,217 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:32,218 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:32,218 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:32,219 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:32,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:32,435 INFO L256 TraceCheckUtils]: 0: Hoare triple {15195#true} call ULTIMATE.init(); {15195#true} is VALID [2018-11-23 12:47:32,436 INFO L273 TraceCheckUtils]: 1: Hoare triple {15195#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {15195#true} is VALID [2018-11-23 12:47:32,436 INFO L273 TraceCheckUtils]: 2: Hoare triple {15195#true} assume true; {15195#true} is VALID [2018-11-23 12:47:32,436 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {15195#true} {15195#true} #604#return; {15195#true} is VALID [2018-11-23 12:47:32,436 INFO L256 TraceCheckUtils]: 4: Hoare triple {15195#true} call #t~ret138 := main(); {15195#true} is VALID [2018-11-23 12:47:32,436 INFO L273 TraceCheckUtils]: 5: Hoare triple {15195#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {15195#true} is VALID [2018-11-23 12:47:32,437 INFO L256 TraceCheckUtils]: 6: Hoare triple {15195#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {15195#true} is VALID [2018-11-23 12:47:32,437 INFO L273 TraceCheckUtils]: 7: Hoare triple {15195#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {15195#true} is VALID [2018-11-23 12:47:32,437 INFO L273 TraceCheckUtils]: 8: Hoare triple {15195#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {15195#true} is VALID [2018-11-23 12:47:32,437 INFO L273 TraceCheckUtils]: 9: Hoare triple {15195#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {15195#true} is VALID [2018-11-23 12:47:32,437 INFO L273 TraceCheckUtils]: 10: Hoare triple {15195#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {15195#true} is VALID [2018-11-23 12:47:32,437 INFO L273 TraceCheckUtils]: 11: Hoare triple {15195#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {15195#true} is VALID [2018-11-23 12:47:32,438 INFO L273 TraceCheckUtils]: 12: Hoare triple {15195#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {15195#true} is VALID [2018-11-23 12:47:32,438 INFO L273 TraceCheckUtils]: 13: Hoare triple {15195#true} assume !false; {15195#true} is VALID [2018-11-23 12:47:32,438 INFO L273 TraceCheckUtils]: 14: Hoare triple {15195#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {15195#true} is VALID [2018-11-23 12:47:32,438 INFO L273 TraceCheckUtils]: 15: Hoare triple {15195#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {15195#true} is VALID [2018-11-23 12:47:32,438 INFO L273 TraceCheckUtils]: 16: Hoare triple {15195#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {15195#true} is VALID [2018-11-23 12:47:32,438 INFO L273 TraceCheckUtils]: 17: Hoare triple {15195#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {15195#true} is VALID [2018-11-23 12:47:32,438 INFO L273 TraceCheckUtils]: 18: Hoare triple {15195#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {15195#true} is VALID [2018-11-23 12:47:32,438 INFO L273 TraceCheckUtils]: 19: Hoare triple {15195#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {15195#true} is VALID [2018-11-23 12:47:32,439 INFO L273 TraceCheckUtils]: 20: Hoare triple {15195#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {15195#true} is VALID [2018-11-23 12:47:32,439 INFO L273 TraceCheckUtils]: 21: Hoare triple {15195#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {15195#true} is VALID [2018-11-23 12:47:32,439 INFO L273 TraceCheckUtils]: 22: Hoare triple {15195#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {15195#true} is VALID [2018-11-23 12:47:32,439 INFO L273 TraceCheckUtils]: 23: Hoare triple {15195#true} assume 8464 == #t~mem32;havoc #t~mem32; {15195#true} is VALID [2018-11-23 12:47:32,439 INFO L273 TraceCheckUtils]: 24: Hoare triple {15195#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {15195#true} is VALID [2018-11-23 12:47:32,439 INFO L273 TraceCheckUtils]: 25: Hoare triple {15195#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {15195#true} is VALID [2018-11-23 12:47:32,440 INFO L273 TraceCheckUtils]: 26: Hoare triple {15195#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {15197#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:32,441 INFO L273 TraceCheckUtils]: 27: Hoare triple {15197#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {15197#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:32,441 INFO L273 TraceCheckUtils]: 28: Hoare triple {15197#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {15197#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:32,441 INFO L273 TraceCheckUtils]: 29: Hoare triple {15197#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {15197#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:32,441 INFO L273 TraceCheckUtils]: 30: Hoare triple {15197#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {15197#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:32,442 INFO L273 TraceCheckUtils]: 31: Hoare triple {15197#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {15197#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:32,442 INFO L273 TraceCheckUtils]: 32: Hoare triple {15197#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {15197#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:32,442 INFO L273 TraceCheckUtils]: 33: Hoare triple {15197#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {15197#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:32,443 INFO L273 TraceCheckUtils]: 34: Hoare triple {15197#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {15198#(= |ssl3_accept_#t~mem27| 8496)} is VALID [2018-11-23 12:47:32,443 INFO L273 TraceCheckUtils]: 35: Hoare triple {15198#(= |ssl3_accept_#t~mem27| 8496)} assume 24576 == #t~mem27;havoc #t~mem27; {15196#false} is VALID [2018-11-23 12:47:32,443 INFO L273 TraceCheckUtils]: 36: Hoare triple {15196#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,444 INFO L273 TraceCheckUtils]: 37: Hoare triple {15196#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {15196#false} is VALID [2018-11-23 12:47:32,444 INFO L273 TraceCheckUtils]: 38: Hoare triple {15196#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,444 INFO L273 TraceCheckUtils]: 39: Hoare triple {15196#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,444 INFO L273 TraceCheckUtils]: 40: Hoare triple {15196#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {15196#false} is VALID [2018-11-23 12:47:32,444 INFO L273 TraceCheckUtils]: 41: Hoare triple {15196#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,445 INFO L273 TraceCheckUtils]: 42: Hoare triple {15196#false} assume 12292 != #t~mem62;havoc #t~mem62; {15196#false} is VALID [2018-11-23 12:47:32,445 INFO L273 TraceCheckUtils]: 43: Hoare triple {15196#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {15196#false} is VALID [2018-11-23 12:47:32,445 INFO L273 TraceCheckUtils]: 44: Hoare triple {15196#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,445 INFO L273 TraceCheckUtils]: 45: Hoare triple {15196#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {15196#false} is VALID [2018-11-23 12:47:32,445 INFO L273 TraceCheckUtils]: 46: Hoare triple {15196#false} ~skip~0 := 0; {15196#false} is VALID [2018-11-23 12:47:32,445 INFO L273 TraceCheckUtils]: 47: Hoare triple {15196#false} assume !false; {15196#false} is VALID [2018-11-23 12:47:32,446 INFO L273 TraceCheckUtils]: 48: Hoare triple {15196#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,446 INFO L273 TraceCheckUtils]: 49: Hoare triple {15196#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,446 INFO L273 TraceCheckUtils]: 50: Hoare triple {15196#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,446 INFO L273 TraceCheckUtils]: 51: Hoare triple {15196#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,446 INFO L273 TraceCheckUtils]: 52: Hoare triple {15196#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,447 INFO L273 TraceCheckUtils]: 53: Hoare triple {15196#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,447 INFO L273 TraceCheckUtils]: 54: Hoare triple {15196#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,447 INFO L273 TraceCheckUtils]: 55: Hoare triple {15196#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,447 INFO L273 TraceCheckUtils]: 56: Hoare triple {15196#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,447 INFO L273 TraceCheckUtils]: 57: Hoare triple {15196#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,447 INFO L273 TraceCheckUtils]: 58: Hoare triple {15196#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,447 INFO L273 TraceCheckUtils]: 59: Hoare triple {15196#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,447 INFO L273 TraceCheckUtils]: 60: Hoare triple {15196#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,447 INFO L273 TraceCheckUtils]: 61: Hoare triple {15196#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,448 INFO L273 TraceCheckUtils]: 62: Hoare triple {15196#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,448 INFO L273 TraceCheckUtils]: 63: Hoare triple {15196#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,448 INFO L273 TraceCheckUtils]: 64: Hoare triple {15196#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,448 INFO L273 TraceCheckUtils]: 65: Hoare triple {15196#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,448 INFO L273 TraceCheckUtils]: 66: Hoare triple {15196#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,448 INFO L273 TraceCheckUtils]: 67: Hoare triple {15196#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,448 INFO L273 TraceCheckUtils]: 68: Hoare triple {15196#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,448 INFO L273 TraceCheckUtils]: 69: Hoare triple {15196#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,449 INFO L273 TraceCheckUtils]: 70: Hoare triple {15196#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,449 INFO L273 TraceCheckUtils]: 71: Hoare triple {15196#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,449 INFO L273 TraceCheckUtils]: 72: Hoare triple {15196#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,449 INFO L273 TraceCheckUtils]: 73: Hoare triple {15196#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,449 INFO L273 TraceCheckUtils]: 74: Hoare triple {15196#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,449 INFO L273 TraceCheckUtils]: 75: Hoare triple {15196#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,449 INFO L273 TraceCheckUtils]: 76: Hoare triple {15196#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,449 INFO L273 TraceCheckUtils]: 77: Hoare triple {15196#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,449 INFO L273 TraceCheckUtils]: 78: Hoare triple {15196#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,450 INFO L273 TraceCheckUtils]: 79: Hoare triple {15196#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,450 INFO L273 TraceCheckUtils]: 80: Hoare triple {15196#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {15196#false} is VALID [2018-11-23 12:47:32,450 INFO L273 TraceCheckUtils]: 81: Hoare triple {15196#false} assume 8672 == #t~mem56;havoc #t~mem56; {15196#false} is VALID [2018-11-23 12:47:32,450 INFO L273 TraceCheckUtils]: 82: Hoare triple {15196#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {15196#false} is VALID [2018-11-23 12:47:32,450 INFO L273 TraceCheckUtils]: 83: Hoare triple {15196#false} assume 4 == ~blastFlag~0; {15196#false} is VALID [2018-11-23 12:47:32,450 INFO L273 TraceCheckUtils]: 84: Hoare triple {15196#false} assume !false; {15196#false} is VALID [2018-11-23 12:47:32,454 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:32,454 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:32,454 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:32,454 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 85 [2018-11-23 12:47:32,455 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:32,455 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:32,541 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 85 edges. 85 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:32,541 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:32,542 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:32,542 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:32,542 INFO L87 Difference]: Start difference. First operand 189 states and 273 transitions. Second operand 4 states. [2018-11-23 12:47:33,612 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:33,612 INFO L93 Difference]: Finished difference Result 370 states and 540 transitions. [2018-11-23 12:47:33,612 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:33,612 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 85 [2018-11-23 12:47:33,613 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:33,613 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:33,614 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 443 transitions. [2018-11-23 12:47:33,615 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:33,616 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 443 transitions. [2018-11-23 12:47:33,616 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 443 transitions. [2018-11-23 12:47:34,042 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 443 edges. 443 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:34,047 INFO L225 Difference]: With dead ends: 370 [2018-11-23 12:47:34,047 INFO L226 Difference]: Without dead ends: 206 [2018-11-23 12:47:34,048 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:34,048 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 206 states. [2018-11-23 12:47:34,441 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 206 to 189. [2018-11-23 12:47:34,441 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:34,441 INFO L82 GeneralOperation]: Start isEquivalent. First operand 206 states. Second operand 189 states. [2018-11-23 12:47:34,442 INFO L74 IsIncluded]: Start isIncluded. First operand 206 states. Second operand 189 states. [2018-11-23 12:47:34,442 INFO L87 Difference]: Start difference. First operand 206 states. Second operand 189 states. [2018-11-23 12:47:34,446 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:34,447 INFO L93 Difference]: Finished difference Result 206 states and 294 transitions. [2018-11-23 12:47:34,447 INFO L276 IsEmpty]: Start isEmpty. Operand 206 states and 294 transitions. [2018-11-23 12:47:34,447 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:34,448 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:34,448 INFO L74 IsIncluded]: Start isIncluded. First operand 189 states. Second operand 206 states. [2018-11-23 12:47:34,448 INFO L87 Difference]: Start difference. First operand 189 states. Second operand 206 states. [2018-11-23 12:47:34,452 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:34,452 INFO L93 Difference]: Finished difference Result 206 states and 294 transitions. [2018-11-23 12:47:34,452 INFO L276 IsEmpty]: Start isEmpty. Operand 206 states and 294 transitions. [2018-11-23 12:47:34,453 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:34,453 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:34,453 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:34,453 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:34,453 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 189 states. [2018-11-23 12:47:34,456 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 272 transitions. [2018-11-23 12:47:34,456 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 272 transitions. Word has length 85 [2018-11-23 12:47:34,457 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:34,457 INFO L480 AbstractCegarLoop]: Abstraction has 189 states and 272 transitions. [2018-11-23 12:47:34,457 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:34,457 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 272 transitions. [2018-11-23 12:47:34,457 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2018-11-23 12:47:34,458 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:34,458 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:34,458 INFO L423 AbstractCegarLoop]: === Iteration 17 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:34,458 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:34,458 INFO L82 PathProgramCache]: Analyzing trace with hash 1286873214, now seen corresponding path program 1 times [2018-11-23 12:47:34,459 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:34,459 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:34,460 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:34,460 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:34,460 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:34,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:34,691 INFO L256 TraceCheckUtils]: 0: Hoare triple {16275#true} call ULTIMATE.init(); {16275#true} is VALID [2018-11-23 12:47:34,692 INFO L273 TraceCheckUtils]: 1: Hoare triple {16275#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {16275#true} is VALID [2018-11-23 12:47:34,692 INFO L273 TraceCheckUtils]: 2: Hoare triple {16275#true} assume true; {16275#true} is VALID [2018-11-23 12:47:34,692 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {16275#true} {16275#true} #604#return; {16275#true} is VALID [2018-11-23 12:47:34,692 INFO L256 TraceCheckUtils]: 4: Hoare triple {16275#true} call #t~ret138 := main(); {16275#true} is VALID [2018-11-23 12:47:34,693 INFO L273 TraceCheckUtils]: 5: Hoare triple {16275#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {16275#true} is VALID [2018-11-23 12:47:34,693 INFO L256 TraceCheckUtils]: 6: Hoare triple {16275#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {16275#true} is VALID [2018-11-23 12:47:34,693 INFO L273 TraceCheckUtils]: 7: Hoare triple {16275#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {16275#true} is VALID [2018-11-23 12:47:34,693 INFO L273 TraceCheckUtils]: 8: Hoare triple {16275#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {16275#true} is VALID [2018-11-23 12:47:34,693 INFO L273 TraceCheckUtils]: 9: Hoare triple {16275#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {16275#true} is VALID [2018-11-23 12:47:34,694 INFO L273 TraceCheckUtils]: 10: Hoare triple {16275#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {16275#true} is VALID [2018-11-23 12:47:34,694 INFO L273 TraceCheckUtils]: 11: Hoare triple {16275#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {16275#true} is VALID [2018-11-23 12:47:34,694 INFO L273 TraceCheckUtils]: 12: Hoare triple {16275#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {16275#true} is VALID [2018-11-23 12:47:34,694 INFO L273 TraceCheckUtils]: 13: Hoare triple {16275#true} assume !false; {16275#true} is VALID [2018-11-23 12:47:34,694 INFO L273 TraceCheckUtils]: 14: Hoare triple {16275#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {16275#true} is VALID [2018-11-23 12:47:34,695 INFO L273 TraceCheckUtils]: 15: Hoare triple {16275#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {16275#true} is VALID [2018-11-23 12:47:34,695 INFO L273 TraceCheckUtils]: 16: Hoare triple {16275#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {16275#true} is VALID [2018-11-23 12:47:34,695 INFO L273 TraceCheckUtils]: 17: Hoare triple {16275#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {16275#true} is VALID [2018-11-23 12:47:34,695 INFO L273 TraceCheckUtils]: 18: Hoare triple {16275#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {16275#true} is VALID [2018-11-23 12:47:34,695 INFO L273 TraceCheckUtils]: 19: Hoare triple {16275#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {16275#true} is VALID [2018-11-23 12:47:34,695 INFO L273 TraceCheckUtils]: 20: Hoare triple {16275#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {16275#true} is VALID [2018-11-23 12:47:34,696 INFO L273 TraceCheckUtils]: 21: Hoare triple {16275#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {16275#true} is VALID [2018-11-23 12:47:34,696 INFO L273 TraceCheckUtils]: 22: Hoare triple {16275#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {16275#true} is VALID [2018-11-23 12:47:34,696 INFO L273 TraceCheckUtils]: 23: Hoare triple {16275#true} assume 8464 == #t~mem32;havoc #t~mem32; {16275#true} is VALID [2018-11-23 12:47:34,696 INFO L273 TraceCheckUtils]: 24: Hoare triple {16275#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {16275#true} is VALID [2018-11-23 12:47:34,696 INFO L273 TraceCheckUtils]: 25: Hoare triple {16275#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {16275#true} is VALID [2018-11-23 12:47:34,697 INFO L273 TraceCheckUtils]: 26: Hoare triple {16275#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {16277#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:34,698 INFO L273 TraceCheckUtils]: 27: Hoare triple {16277#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {16277#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:34,698 INFO L273 TraceCheckUtils]: 28: Hoare triple {16277#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {16277#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:34,698 INFO L273 TraceCheckUtils]: 29: Hoare triple {16277#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {16277#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:34,698 INFO L273 TraceCheckUtils]: 30: Hoare triple {16277#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {16277#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:34,699 INFO L273 TraceCheckUtils]: 31: Hoare triple {16277#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {16277#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:34,699 INFO L273 TraceCheckUtils]: 32: Hoare triple {16277#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {16277#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:34,699 INFO L273 TraceCheckUtils]: 33: Hoare triple {16277#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {16277#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:34,700 INFO L273 TraceCheckUtils]: 34: Hoare triple {16277#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {16277#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:34,700 INFO L273 TraceCheckUtils]: 35: Hoare triple {16277#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {16278#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem28| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:47:34,701 INFO L273 TraceCheckUtils]: 36: Hoare triple {16278#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem28| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume 8195 == #t~mem28;havoc #t~mem28; {16276#false} is VALID [2018-11-23 12:47:34,701 INFO L273 TraceCheckUtils]: 37: Hoare triple {16276#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,701 INFO L273 TraceCheckUtils]: 38: Hoare triple {16276#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {16276#false} is VALID [2018-11-23 12:47:34,701 INFO L273 TraceCheckUtils]: 39: Hoare triple {16276#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,702 INFO L273 TraceCheckUtils]: 40: Hoare triple {16276#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,702 INFO L273 TraceCheckUtils]: 41: Hoare triple {16276#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {16276#false} is VALID [2018-11-23 12:47:34,702 INFO L273 TraceCheckUtils]: 42: Hoare triple {16276#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,702 INFO L273 TraceCheckUtils]: 43: Hoare triple {16276#false} assume 12292 != #t~mem62;havoc #t~mem62; {16276#false} is VALID [2018-11-23 12:47:34,702 INFO L273 TraceCheckUtils]: 44: Hoare triple {16276#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {16276#false} is VALID [2018-11-23 12:47:34,702 INFO L273 TraceCheckUtils]: 45: Hoare triple {16276#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,703 INFO L273 TraceCheckUtils]: 46: Hoare triple {16276#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {16276#false} is VALID [2018-11-23 12:47:34,703 INFO L273 TraceCheckUtils]: 47: Hoare triple {16276#false} ~skip~0 := 0; {16276#false} is VALID [2018-11-23 12:47:34,703 INFO L273 TraceCheckUtils]: 48: Hoare triple {16276#false} assume !false; {16276#false} is VALID [2018-11-23 12:47:34,703 INFO L273 TraceCheckUtils]: 49: Hoare triple {16276#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,703 INFO L273 TraceCheckUtils]: 50: Hoare triple {16276#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,704 INFO L273 TraceCheckUtils]: 51: Hoare triple {16276#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,704 INFO L273 TraceCheckUtils]: 52: Hoare triple {16276#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,704 INFO L273 TraceCheckUtils]: 53: Hoare triple {16276#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,704 INFO L273 TraceCheckUtils]: 54: Hoare triple {16276#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,704 INFO L273 TraceCheckUtils]: 55: Hoare triple {16276#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,705 INFO L273 TraceCheckUtils]: 56: Hoare triple {16276#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,705 INFO L273 TraceCheckUtils]: 57: Hoare triple {16276#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,705 INFO L273 TraceCheckUtils]: 58: Hoare triple {16276#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,705 INFO L273 TraceCheckUtils]: 59: Hoare triple {16276#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,705 INFO L273 TraceCheckUtils]: 60: Hoare triple {16276#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,705 INFO L273 TraceCheckUtils]: 61: Hoare triple {16276#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,706 INFO L273 TraceCheckUtils]: 62: Hoare triple {16276#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,706 INFO L273 TraceCheckUtils]: 63: Hoare triple {16276#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,706 INFO L273 TraceCheckUtils]: 64: Hoare triple {16276#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,706 INFO L273 TraceCheckUtils]: 65: Hoare triple {16276#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,706 INFO L273 TraceCheckUtils]: 66: Hoare triple {16276#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,706 INFO L273 TraceCheckUtils]: 67: Hoare triple {16276#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,706 INFO L273 TraceCheckUtils]: 68: Hoare triple {16276#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,706 INFO L273 TraceCheckUtils]: 69: Hoare triple {16276#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,707 INFO L273 TraceCheckUtils]: 70: Hoare triple {16276#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,707 INFO L273 TraceCheckUtils]: 71: Hoare triple {16276#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,707 INFO L273 TraceCheckUtils]: 72: Hoare triple {16276#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,707 INFO L273 TraceCheckUtils]: 73: Hoare triple {16276#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,707 INFO L273 TraceCheckUtils]: 74: Hoare triple {16276#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,707 INFO L273 TraceCheckUtils]: 75: Hoare triple {16276#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,707 INFO L273 TraceCheckUtils]: 76: Hoare triple {16276#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,707 INFO L273 TraceCheckUtils]: 77: Hoare triple {16276#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,708 INFO L273 TraceCheckUtils]: 78: Hoare triple {16276#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,708 INFO L273 TraceCheckUtils]: 79: Hoare triple {16276#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,708 INFO L273 TraceCheckUtils]: 80: Hoare triple {16276#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,708 INFO L273 TraceCheckUtils]: 81: Hoare triple {16276#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {16276#false} is VALID [2018-11-23 12:47:34,708 INFO L273 TraceCheckUtils]: 82: Hoare triple {16276#false} assume 8672 == #t~mem56;havoc #t~mem56; {16276#false} is VALID [2018-11-23 12:47:34,708 INFO L273 TraceCheckUtils]: 83: Hoare triple {16276#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {16276#false} is VALID [2018-11-23 12:47:34,708 INFO L273 TraceCheckUtils]: 84: Hoare triple {16276#false} assume 4 == ~blastFlag~0; {16276#false} is VALID [2018-11-23 12:47:34,708 INFO L273 TraceCheckUtils]: 85: Hoare triple {16276#false} assume !false; {16276#false} is VALID [2018-11-23 12:47:34,713 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:34,713 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:34,714 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:34,714 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 86 [2018-11-23 12:47:34,714 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:34,714 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:34,795 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 86 edges. 86 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:34,796 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:34,796 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:34,796 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:34,796 INFO L87 Difference]: Start difference. First operand 189 states and 272 transitions. Second operand 4 states. [2018-11-23 12:47:35,609 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:35,609 INFO L93 Difference]: Finished difference Result 360 states and 526 transitions. [2018-11-23 12:47:35,609 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:35,609 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 86 [2018-11-23 12:47:35,610 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:35,610 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:35,612 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 430 transitions. [2018-11-23 12:47:35,612 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:35,613 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 430 transitions. [2018-11-23 12:47:35,614 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 430 transitions. [2018-11-23 12:47:36,019 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 430 edges. 430 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:36,024 INFO L225 Difference]: With dead ends: 360 [2018-11-23 12:47:36,024 INFO L226 Difference]: Without dead ends: 196 [2018-11-23 12:47:36,025 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:36,026 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 196 states. [2018-11-23 12:47:36,234 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 196 to 189. [2018-11-23 12:47:36,234 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:36,234 INFO L82 GeneralOperation]: Start isEquivalent. First operand 196 states. Second operand 189 states. [2018-11-23 12:47:36,234 INFO L74 IsIncluded]: Start isIncluded. First operand 196 states. Second operand 189 states. [2018-11-23 12:47:36,235 INFO L87 Difference]: Start difference. First operand 196 states. Second operand 189 states. [2018-11-23 12:47:36,238 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:36,238 INFO L93 Difference]: Finished difference Result 196 states and 281 transitions. [2018-11-23 12:47:36,238 INFO L276 IsEmpty]: Start isEmpty. Operand 196 states and 281 transitions. [2018-11-23 12:47:36,238 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:36,238 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:36,238 INFO L74 IsIncluded]: Start isIncluded. First operand 189 states. Second operand 196 states. [2018-11-23 12:47:36,238 INFO L87 Difference]: Start difference. First operand 189 states. Second operand 196 states. [2018-11-23 12:47:36,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:36,242 INFO L93 Difference]: Finished difference Result 196 states and 281 transitions. [2018-11-23 12:47:36,242 INFO L276 IsEmpty]: Start isEmpty. Operand 196 states and 281 transitions. [2018-11-23 12:47:36,243 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:36,243 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:36,243 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:36,243 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:36,243 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 189 states. [2018-11-23 12:47:36,247 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 271 transitions. [2018-11-23 12:47:36,247 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 271 transitions. Word has length 86 [2018-11-23 12:47:36,247 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:36,248 INFO L480 AbstractCegarLoop]: Abstraction has 189 states and 271 transitions. [2018-11-23 12:47:36,248 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:36,248 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 271 transitions. [2018-11-23 12:47:36,248 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2018-11-23 12:47:36,248 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:36,249 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:36,249 INFO L423 AbstractCegarLoop]: === Iteration 18 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:36,249 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:36,249 INFO L82 PathProgramCache]: Analyzing trace with hash 1227843542, now seen corresponding path program 1 times [2018-11-23 12:47:36,249 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:36,249 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:36,250 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:36,251 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:36,251 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:36,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:36,439 INFO L256 TraceCheckUtils]: 0: Hoare triple {17322#true} call ULTIMATE.init(); {17322#true} is VALID [2018-11-23 12:47:36,439 INFO L273 TraceCheckUtils]: 1: Hoare triple {17322#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,439 INFO L273 TraceCheckUtils]: 2: Hoare triple {17322#true} assume true; {17322#true} is VALID [2018-11-23 12:47:36,439 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {17322#true} {17322#true} #604#return; {17322#true} is VALID [2018-11-23 12:47:36,440 INFO L256 TraceCheckUtils]: 4: Hoare triple {17322#true} call #t~ret138 := main(); {17322#true} is VALID [2018-11-23 12:47:36,440 INFO L273 TraceCheckUtils]: 5: Hoare triple {17322#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,440 INFO L256 TraceCheckUtils]: 6: Hoare triple {17322#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {17322#true} is VALID [2018-11-23 12:47:36,440 INFO L273 TraceCheckUtils]: 7: Hoare triple {17322#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,440 INFO L273 TraceCheckUtils]: 8: Hoare triple {17322#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {17322#true} is VALID [2018-11-23 12:47:36,440 INFO L273 TraceCheckUtils]: 9: Hoare triple {17322#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {17322#true} is VALID [2018-11-23 12:47:36,440 INFO L273 TraceCheckUtils]: 10: Hoare triple {17322#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {17322#true} is VALID [2018-11-23 12:47:36,440 INFO L273 TraceCheckUtils]: 11: Hoare triple {17322#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,441 INFO L273 TraceCheckUtils]: 12: Hoare triple {17322#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {17322#true} is VALID [2018-11-23 12:47:36,441 INFO L273 TraceCheckUtils]: 13: Hoare triple {17322#true} assume !false; {17322#true} is VALID [2018-11-23 12:47:36,441 INFO L273 TraceCheckUtils]: 14: Hoare triple {17322#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,441 INFO L273 TraceCheckUtils]: 15: Hoare triple {17322#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,441 INFO L273 TraceCheckUtils]: 16: Hoare triple {17322#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,441 INFO L273 TraceCheckUtils]: 17: Hoare triple {17322#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,442 INFO L273 TraceCheckUtils]: 18: Hoare triple {17322#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,442 INFO L273 TraceCheckUtils]: 19: Hoare triple {17322#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,442 INFO L273 TraceCheckUtils]: 20: Hoare triple {17322#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,442 INFO L273 TraceCheckUtils]: 21: Hoare triple {17322#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,442 INFO L273 TraceCheckUtils]: 22: Hoare triple {17322#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,443 INFO L273 TraceCheckUtils]: 23: Hoare triple {17322#true} assume 8464 == #t~mem32;havoc #t~mem32; {17322#true} is VALID [2018-11-23 12:47:36,443 INFO L273 TraceCheckUtils]: 24: Hoare triple {17322#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {17322#true} is VALID [2018-11-23 12:47:36,443 INFO L273 TraceCheckUtils]: 25: Hoare triple {17322#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {17322#true} is VALID [2018-11-23 12:47:36,443 INFO L273 TraceCheckUtils]: 26: Hoare triple {17322#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,443 INFO L273 TraceCheckUtils]: 27: Hoare triple {17322#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,443 INFO L273 TraceCheckUtils]: 28: Hoare triple {17322#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {17322#true} is VALID [2018-11-23 12:47:36,443 INFO L273 TraceCheckUtils]: 29: Hoare triple {17322#true} ~skip~0 := 0; {17322#true} is VALID [2018-11-23 12:47:36,444 INFO L273 TraceCheckUtils]: 30: Hoare triple {17322#true} assume !false; {17322#true} is VALID [2018-11-23 12:47:36,444 INFO L273 TraceCheckUtils]: 31: Hoare triple {17322#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,444 INFO L273 TraceCheckUtils]: 32: Hoare triple {17322#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,444 INFO L273 TraceCheckUtils]: 33: Hoare triple {17322#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,444 INFO L273 TraceCheckUtils]: 34: Hoare triple {17322#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,444 INFO L273 TraceCheckUtils]: 35: Hoare triple {17322#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,444 INFO L273 TraceCheckUtils]: 36: Hoare triple {17322#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,444 INFO L273 TraceCheckUtils]: 37: Hoare triple {17322#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,444 INFO L273 TraceCheckUtils]: 38: Hoare triple {17322#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,445 INFO L273 TraceCheckUtils]: 39: Hoare triple {17322#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,445 INFO L273 TraceCheckUtils]: 40: Hoare triple {17322#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,445 INFO L273 TraceCheckUtils]: 41: Hoare triple {17322#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,445 INFO L273 TraceCheckUtils]: 42: Hoare triple {17322#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,445 INFO L273 TraceCheckUtils]: 43: Hoare triple {17322#true} assume 8496 == #t~mem35;havoc #t~mem35; {17322#true} is VALID [2018-11-23 12:47:36,445 INFO L273 TraceCheckUtils]: 44: Hoare triple {17322#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {17322#true} is VALID [2018-11-23 12:47:36,445 INFO L273 TraceCheckUtils]: 45: Hoare triple {17322#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {17322#true} is VALID [2018-11-23 12:47:36,445 INFO L273 TraceCheckUtils]: 46: Hoare triple {17322#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {17322#true} is VALID [2018-11-23 12:47:36,446 INFO L273 TraceCheckUtils]: 47: Hoare triple {17322#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,451 INFO L273 TraceCheckUtils]: 48: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,451 INFO L273 TraceCheckUtils]: 49: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,451 INFO L273 TraceCheckUtils]: 50: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,452 INFO L273 TraceCheckUtils]: 51: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,452 INFO L273 TraceCheckUtils]: 52: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,452 INFO L273 TraceCheckUtils]: 53: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,458 INFO L273 TraceCheckUtils]: 54: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,458 INFO L273 TraceCheckUtils]: 55: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,458 INFO L273 TraceCheckUtils]: 56: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,459 INFO L273 TraceCheckUtils]: 57: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,459 INFO L273 TraceCheckUtils]: 58: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,459 INFO L273 TraceCheckUtils]: 59: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,460 INFO L273 TraceCheckUtils]: 60: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,460 INFO L273 TraceCheckUtils]: 61: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,460 INFO L273 TraceCheckUtils]: 62: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,460 INFO L273 TraceCheckUtils]: 63: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,461 INFO L273 TraceCheckUtils]: 64: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,461 INFO L273 TraceCheckUtils]: 65: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,461 INFO L273 TraceCheckUtils]: 66: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,462 INFO L273 TraceCheckUtils]: 67: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,462 INFO L273 TraceCheckUtils]: 68: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,463 INFO L273 TraceCheckUtils]: 69: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,463 INFO L273 TraceCheckUtils]: 70: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,464 INFO L273 TraceCheckUtils]: 71: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,464 INFO L273 TraceCheckUtils]: 72: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,465 INFO L273 TraceCheckUtils]: 73: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,465 INFO L273 TraceCheckUtils]: 74: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,466 INFO L273 TraceCheckUtils]: 75: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,466 INFO L273 TraceCheckUtils]: 76: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,467 INFO L273 TraceCheckUtils]: 77: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,467 INFO L273 TraceCheckUtils]: 78: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,468 INFO L273 TraceCheckUtils]: 79: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,468 INFO L273 TraceCheckUtils]: 80: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,469 INFO L273 TraceCheckUtils]: 81: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,470 INFO L273 TraceCheckUtils]: 82: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:36,470 INFO L273 TraceCheckUtils]: 83: Hoare triple {17324#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {17325#(= 8656 |ssl3_accept_#t~mem54|)} is VALID [2018-11-23 12:47:36,471 INFO L273 TraceCheckUtils]: 84: Hoare triple {17325#(= 8656 |ssl3_accept_#t~mem54|)} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {17323#false} is VALID [2018-11-23 12:47:36,471 INFO L273 TraceCheckUtils]: 85: Hoare triple {17323#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {17323#false} is VALID [2018-11-23 12:47:36,471 INFO L273 TraceCheckUtils]: 86: Hoare triple {17323#false} assume 8672 == #t~mem56;havoc #t~mem56; {17323#false} is VALID [2018-11-23 12:47:36,472 INFO L273 TraceCheckUtils]: 87: Hoare triple {17323#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {17323#false} is VALID [2018-11-23 12:47:36,472 INFO L273 TraceCheckUtils]: 88: Hoare triple {17323#false} assume 4 == ~blastFlag~0; {17323#false} is VALID [2018-11-23 12:47:36,472 INFO L273 TraceCheckUtils]: 89: Hoare triple {17323#false} assume !false; {17323#false} is VALID [2018-11-23 12:47:36,484 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:36,485 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:36,485 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:36,485 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 90 [2018-11-23 12:47:36,485 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:36,485 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:36,569 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 80 edges. 80 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:36,569 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:36,569 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:36,569 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:36,570 INFO L87 Difference]: Start difference. First operand 189 states and 271 transitions. Second operand 4 states. [2018-11-23 12:47:38,056 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:38,057 INFO L93 Difference]: Finished difference Result 447 states and 658 transitions. [2018-11-23 12:47:38,057 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:38,057 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 90 [2018-11-23 12:47:38,057 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:38,057 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:38,061 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 533 transitions. [2018-11-23 12:47:38,061 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:38,064 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 533 transitions. [2018-11-23 12:47:38,065 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 533 transitions. [2018-11-23 12:47:38,613 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 533 edges. 533 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:38,619 INFO L225 Difference]: With dead ends: 447 [2018-11-23 12:47:38,619 INFO L226 Difference]: Without dead ends: 283 [2018-11-23 12:47:38,620 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:38,621 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 283 states. [2018-11-23 12:47:38,700 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 283 to 232. [2018-11-23 12:47:38,700 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:38,700 INFO L82 GeneralOperation]: Start isEquivalent. First operand 283 states. Second operand 232 states. [2018-11-23 12:47:38,700 INFO L74 IsIncluded]: Start isIncluded. First operand 283 states. Second operand 232 states. [2018-11-23 12:47:38,700 INFO L87 Difference]: Start difference. First operand 283 states. Second operand 232 states. [2018-11-23 12:47:38,705 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:38,705 INFO L93 Difference]: Finished difference Result 283 states and 414 transitions. [2018-11-23 12:47:38,705 INFO L276 IsEmpty]: Start isEmpty. Operand 283 states and 414 transitions. [2018-11-23 12:47:38,706 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:38,706 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:38,706 INFO L74 IsIncluded]: Start isIncluded. First operand 232 states. Second operand 283 states. [2018-11-23 12:47:38,706 INFO L87 Difference]: Start difference. First operand 232 states. Second operand 283 states. [2018-11-23 12:47:38,712 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:38,712 INFO L93 Difference]: Finished difference Result 283 states and 414 transitions. [2018-11-23 12:47:38,712 INFO L276 IsEmpty]: Start isEmpty. Operand 283 states and 414 transitions. [2018-11-23 12:47:38,712 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:38,713 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:38,713 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:38,713 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:38,713 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 232 states. [2018-11-23 12:47:38,717 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 232 states to 232 states and 348 transitions. [2018-11-23 12:47:38,718 INFO L78 Accepts]: Start accepts. Automaton has 232 states and 348 transitions. Word has length 90 [2018-11-23 12:47:38,718 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:38,718 INFO L480 AbstractCegarLoop]: Abstraction has 232 states and 348 transitions. [2018-11-23 12:47:38,718 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:38,718 INFO L276 IsEmpty]: Start isEmpty. Operand 232 states and 348 transitions. [2018-11-23 12:47:38,719 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2018-11-23 12:47:38,719 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:38,719 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:38,719 INFO L423 AbstractCegarLoop]: === Iteration 19 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:38,719 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:38,720 INFO L82 PathProgramCache]: Analyzing trace with hash 330450264, now seen corresponding path program 1 times [2018-11-23 12:47:38,720 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:38,720 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:38,721 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:38,721 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:38,721 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:38,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:39,465 INFO L256 TraceCheckUtils]: 0: Hoare triple {18694#true} call ULTIMATE.init(); {18694#true} is VALID [2018-11-23 12:47:39,466 INFO L273 TraceCheckUtils]: 1: Hoare triple {18694#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,466 INFO L273 TraceCheckUtils]: 2: Hoare triple {18694#true} assume true; {18694#true} is VALID [2018-11-23 12:47:39,466 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {18694#true} {18694#true} #604#return; {18694#true} is VALID [2018-11-23 12:47:39,467 INFO L256 TraceCheckUtils]: 4: Hoare triple {18694#true} call #t~ret138 := main(); {18694#true} is VALID [2018-11-23 12:47:39,467 INFO L273 TraceCheckUtils]: 5: Hoare triple {18694#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,467 INFO L256 TraceCheckUtils]: 6: Hoare triple {18694#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {18694#true} is VALID [2018-11-23 12:47:39,467 INFO L273 TraceCheckUtils]: 7: Hoare triple {18694#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,467 INFO L273 TraceCheckUtils]: 8: Hoare triple {18694#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {18694#true} is VALID [2018-11-23 12:47:39,467 INFO L273 TraceCheckUtils]: 9: Hoare triple {18694#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {18694#true} is VALID [2018-11-23 12:47:39,468 INFO L273 TraceCheckUtils]: 10: Hoare triple {18694#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {18694#true} is VALID [2018-11-23 12:47:39,468 INFO L273 TraceCheckUtils]: 11: Hoare triple {18694#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,468 INFO L273 TraceCheckUtils]: 12: Hoare triple {18694#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {18694#true} is VALID [2018-11-23 12:47:39,468 INFO L273 TraceCheckUtils]: 13: Hoare triple {18694#true} assume !false; {18694#true} is VALID [2018-11-23 12:47:39,468 INFO L273 TraceCheckUtils]: 14: Hoare triple {18694#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,468 INFO L273 TraceCheckUtils]: 15: Hoare triple {18694#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,469 INFO L273 TraceCheckUtils]: 16: Hoare triple {18694#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,469 INFO L273 TraceCheckUtils]: 17: Hoare triple {18694#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,469 INFO L273 TraceCheckUtils]: 18: Hoare triple {18694#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,469 INFO L273 TraceCheckUtils]: 19: Hoare triple {18694#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,469 INFO L273 TraceCheckUtils]: 20: Hoare triple {18694#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,469 INFO L273 TraceCheckUtils]: 21: Hoare triple {18694#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,470 INFO L273 TraceCheckUtils]: 22: Hoare triple {18694#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,470 INFO L273 TraceCheckUtils]: 23: Hoare triple {18694#true} assume 8464 == #t~mem32;havoc #t~mem32; {18694#true} is VALID [2018-11-23 12:47:39,470 INFO L273 TraceCheckUtils]: 24: Hoare triple {18694#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {18694#true} is VALID [2018-11-23 12:47:39,470 INFO L273 TraceCheckUtils]: 25: Hoare triple {18694#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {18694#true} is VALID [2018-11-23 12:47:39,470 INFO L273 TraceCheckUtils]: 26: Hoare triple {18694#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,471 INFO L273 TraceCheckUtils]: 27: Hoare triple {18694#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,471 INFO L273 TraceCheckUtils]: 28: Hoare triple {18694#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {18694#true} is VALID [2018-11-23 12:47:39,471 INFO L273 TraceCheckUtils]: 29: Hoare triple {18694#true} ~skip~0 := 0; {18694#true} is VALID [2018-11-23 12:47:39,471 INFO L273 TraceCheckUtils]: 30: Hoare triple {18694#true} assume !false; {18694#true} is VALID [2018-11-23 12:47:39,471 INFO L273 TraceCheckUtils]: 31: Hoare triple {18694#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,472 INFO L273 TraceCheckUtils]: 32: Hoare triple {18694#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,472 INFO L273 TraceCheckUtils]: 33: Hoare triple {18694#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,472 INFO L273 TraceCheckUtils]: 34: Hoare triple {18694#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,472 INFO L273 TraceCheckUtils]: 35: Hoare triple {18694#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,472 INFO L273 TraceCheckUtils]: 36: Hoare triple {18694#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,472 INFO L273 TraceCheckUtils]: 37: Hoare triple {18694#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,473 INFO L273 TraceCheckUtils]: 38: Hoare triple {18694#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,473 INFO L273 TraceCheckUtils]: 39: Hoare triple {18694#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,473 INFO L273 TraceCheckUtils]: 40: Hoare triple {18694#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,473 INFO L273 TraceCheckUtils]: 41: Hoare triple {18694#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,473 INFO L273 TraceCheckUtils]: 42: Hoare triple {18694#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,474 INFO L273 TraceCheckUtils]: 43: Hoare triple {18694#true} assume 8496 == #t~mem35;havoc #t~mem35; {18694#true} is VALID [2018-11-23 12:47:39,474 INFO L273 TraceCheckUtils]: 44: Hoare triple {18694#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {18694#true} is VALID [2018-11-23 12:47:39,474 INFO L273 TraceCheckUtils]: 45: Hoare triple {18694#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {18694#true} is VALID [2018-11-23 12:47:39,474 INFO L273 TraceCheckUtils]: 46: Hoare triple {18694#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {18694#true} is VALID [2018-11-23 12:47:39,484 INFO L273 TraceCheckUtils]: 47: Hoare triple {18694#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:39,496 INFO L273 TraceCheckUtils]: 48: Hoare triple {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:39,509 INFO L273 TraceCheckUtils]: 49: Hoare triple {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:39,521 INFO L273 TraceCheckUtils]: 50: Hoare triple {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:39,534 INFO L273 TraceCheckUtils]: 51: Hoare triple {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:39,548 INFO L273 TraceCheckUtils]: 52: Hoare triple {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:39,557 INFO L273 TraceCheckUtils]: 53: Hoare triple {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:39,569 INFO L273 TraceCheckUtils]: 54: Hoare triple {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:39,582 INFO L273 TraceCheckUtils]: 55: Hoare triple {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:39,598 INFO L273 TraceCheckUtils]: 56: Hoare triple {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:39,611 INFO L273 TraceCheckUtils]: 57: Hoare triple {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:39,614 INFO L273 TraceCheckUtils]: 58: Hoare triple {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:39,615 INFO L273 TraceCheckUtils]: 59: Hoare triple {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:39,617 INFO L273 TraceCheckUtils]: 60: Hoare triple {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:39,617 INFO L273 TraceCheckUtils]: 61: Hoare triple {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:39,620 INFO L273 TraceCheckUtils]: 62: Hoare triple {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:39,620 INFO L273 TraceCheckUtils]: 63: Hoare triple {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:39,623 INFO L273 TraceCheckUtils]: 64: Hoare triple {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:39,623 INFO L273 TraceCheckUtils]: 65: Hoare triple {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:39,626 INFO L273 TraceCheckUtils]: 66: Hoare triple {18696#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {18697#(= 8512 |ssl3_accept_#t~mem37|)} is VALID [2018-11-23 12:47:39,626 INFO L273 TraceCheckUtils]: 67: Hoare triple {18697#(= 8512 |ssl3_accept_#t~mem37|)} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {18695#false} is VALID [2018-11-23 12:47:39,626 INFO L273 TraceCheckUtils]: 68: Hoare triple {18695#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {18695#false} is VALID [2018-11-23 12:47:39,626 INFO L273 TraceCheckUtils]: 69: Hoare triple {18695#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {18695#false} is VALID [2018-11-23 12:47:39,626 INFO L273 TraceCheckUtils]: 70: Hoare triple {18695#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {18695#false} is VALID [2018-11-23 12:47:39,626 INFO L273 TraceCheckUtils]: 71: Hoare triple {18695#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {18695#false} is VALID [2018-11-23 12:47:39,627 INFO L273 TraceCheckUtils]: 72: Hoare triple {18695#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {18695#false} is VALID [2018-11-23 12:47:39,627 INFO L273 TraceCheckUtils]: 73: Hoare triple {18695#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {18695#false} is VALID [2018-11-23 12:47:39,627 INFO L273 TraceCheckUtils]: 74: Hoare triple {18695#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {18695#false} is VALID [2018-11-23 12:47:39,627 INFO L273 TraceCheckUtils]: 75: Hoare triple {18695#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {18695#false} is VALID [2018-11-23 12:47:39,627 INFO L273 TraceCheckUtils]: 76: Hoare triple {18695#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {18695#false} is VALID [2018-11-23 12:47:39,627 INFO L273 TraceCheckUtils]: 77: Hoare triple {18695#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {18695#false} is VALID [2018-11-23 12:47:39,627 INFO L273 TraceCheckUtils]: 78: Hoare triple {18695#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {18695#false} is VALID [2018-11-23 12:47:39,627 INFO L273 TraceCheckUtils]: 79: Hoare triple {18695#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {18695#false} is VALID [2018-11-23 12:47:39,628 INFO L273 TraceCheckUtils]: 80: Hoare triple {18695#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {18695#false} is VALID [2018-11-23 12:47:39,628 INFO L273 TraceCheckUtils]: 81: Hoare triple {18695#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {18695#false} is VALID [2018-11-23 12:47:39,628 INFO L273 TraceCheckUtils]: 82: Hoare triple {18695#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {18695#false} is VALID [2018-11-23 12:47:39,628 INFO L273 TraceCheckUtils]: 83: Hoare triple {18695#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {18695#false} is VALID [2018-11-23 12:47:39,628 INFO L273 TraceCheckUtils]: 84: Hoare triple {18695#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {18695#false} is VALID [2018-11-23 12:47:39,628 INFO L273 TraceCheckUtils]: 85: Hoare triple {18695#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {18695#false} is VALID [2018-11-23 12:47:39,628 INFO L273 TraceCheckUtils]: 86: Hoare triple {18695#false} assume 8672 == #t~mem56;havoc #t~mem56; {18695#false} is VALID [2018-11-23 12:47:39,628 INFO L273 TraceCheckUtils]: 87: Hoare triple {18695#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {18695#false} is VALID [2018-11-23 12:47:39,629 INFO L273 TraceCheckUtils]: 88: Hoare triple {18695#false} assume 4 == ~blastFlag~0; {18695#false} is VALID [2018-11-23 12:47:39,629 INFO L273 TraceCheckUtils]: 89: Hoare triple {18695#false} assume !false; {18695#false} is VALID [2018-11-23 12:47:39,637 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:39,637 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:39,638 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:39,638 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 90 [2018-11-23 12:47:39,638 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:39,638 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:39,747 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 80 edges. 80 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:39,747 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:39,747 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:39,748 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:39,748 INFO L87 Difference]: Start difference. First operand 232 states and 348 transitions. Second operand 4 states. [2018-11-23 12:47:41,002 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:41,003 INFO L93 Difference]: Finished difference Result 487 states and 740 transitions. [2018-11-23 12:47:41,003 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:41,003 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 90 [2018-11-23 12:47:41,003 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:41,004 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:41,006 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 462 transitions. [2018-11-23 12:47:41,006 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:41,009 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 462 transitions. [2018-11-23 12:47:41,009 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 462 transitions. [2018-11-23 12:47:41,655 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 462 edges. 462 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:41,662 INFO L225 Difference]: With dead ends: 487 [2018-11-23 12:47:41,662 INFO L226 Difference]: Without dead ends: 280 [2018-11-23 12:47:41,663 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:41,664 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 280 states. [2018-11-23 12:47:41,788 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 280 to 256. [2018-11-23 12:47:41,789 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:41,789 INFO L82 GeneralOperation]: Start isEquivalent. First operand 280 states. Second operand 256 states. [2018-11-23 12:47:41,789 INFO L74 IsIncluded]: Start isIncluded. First operand 280 states. Second operand 256 states. [2018-11-23 12:47:41,789 INFO L87 Difference]: Start difference. First operand 280 states. Second operand 256 states. [2018-11-23 12:47:41,795 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:41,795 INFO L93 Difference]: Finished difference Result 280 states and 419 transitions. [2018-11-23 12:47:41,795 INFO L276 IsEmpty]: Start isEmpty. Operand 280 states and 419 transitions. [2018-11-23 12:47:41,796 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:41,796 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:41,796 INFO L74 IsIncluded]: Start isIncluded. First operand 256 states. Second operand 280 states. [2018-11-23 12:47:41,796 INFO L87 Difference]: Start difference. First operand 256 states. Second operand 280 states. [2018-11-23 12:47:41,802 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:41,803 INFO L93 Difference]: Finished difference Result 280 states and 419 transitions. [2018-11-23 12:47:41,803 INFO L276 IsEmpty]: Start isEmpty. Operand 280 states and 419 transitions. [2018-11-23 12:47:41,803 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:41,803 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:41,803 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:41,804 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:41,804 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 12:47:41,809 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 389 transitions. [2018-11-23 12:47:41,809 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 389 transitions. Word has length 90 [2018-11-23 12:47:41,809 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:41,809 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 389 transitions. [2018-11-23 12:47:41,809 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:41,810 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 389 transitions. [2018-11-23 12:47:41,810 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2018-11-23 12:47:41,810 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:41,811 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:41,811 INFO L423 AbstractCegarLoop]: === Iteration 20 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:41,811 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:41,811 INFO L82 PathProgramCache]: Analyzing trace with hash -847975184, now seen corresponding path program 1 times [2018-11-23 12:47:41,811 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:41,811 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:41,812 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:41,813 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:41,813 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:41,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:42,096 INFO L256 TraceCheckUtils]: 0: Hoare triple {20119#true} call ULTIMATE.init(); {20119#true} is VALID [2018-11-23 12:47:42,096 INFO L273 TraceCheckUtils]: 1: Hoare triple {20119#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,097 INFO L273 TraceCheckUtils]: 2: Hoare triple {20119#true} assume true; {20119#true} is VALID [2018-11-23 12:47:42,097 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {20119#true} {20119#true} #604#return; {20119#true} is VALID [2018-11-23 12:47:42,097 INFO L256 TraceCheckUtils]: 4: Hoare triple {20119#true} call #t~ret138 := main(); {20119#true} is VALID [2018-11-23 12:47:42,097 INFO L273 TraceCheckUtils]: 5: Hoare triple {20119#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,098 INFO L256 TraceCheckUtils]: 6: Hoare triple {20119#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {20119#true} is VALID [2018-11-23 12:47:42,098 INFO L273 TraceCheckUtils]: 7: Hoare triple {20119#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,098 INFO L273 TraceCheckUtils]: 8: Hoare triple {20119#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {20119#true} is VALID [2018-11-23 12:47:42,098 INFO L273 TraceCheckUtils]: 9: Hoare triple {20119#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {20119#true} is VALID [2018-11-23 12:47:42,099 INFO L273 TraceCheckUtils]: 10: Hoare triple {20119#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {20119#true} is VALID [2018-11-23 12:47:42,099 INFO L273 TraceCheckUtils]: 11: Hoare triple {20119#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,099 INFO L273 TraceCheckUtils]: 12: Hoare triple {20119#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {20119#true} is VALID [2018-11-23 12:47:42,099 INFO L273 TraceCheckUtils]: 13: Hoare triple {20119#true} assume !false; {20119#true} is VALID [2018-11-23 12:47:42,099 INFO L273 TraceCheckUtils]: 14: Hoare triple {20119#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,099 INFO L273 TraceCheckUtils]: 15: Hoare triple {20119#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,099 INFO L273 TraceCheckUtils]: 16: Hoare triple {20119#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,099 INFO L273 TraceCheckUtils]: 17: Hoare triple {20119#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,100 INFO L273 TraceCheckUtils]: 18: Hoare triple {20119#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,100 INFO L273 TraceCheckUtils]: 19: Hoare triple {20119#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,100 INFO L273 TraceCheckUtils]: 20: Hoare triple {20119#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,100 INFO L273 TraceCheckUtils]: 21: Hoare triple {20119#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,100 INFO L273 TraceCheckUtils]: 22: Hoare triple {20119#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,100 INFO L273 TraceCheckUtils]: 23: Hoare triple {20119#true} assume 8464 == #t~mem32;havoc #t~mem32; {20119#true} is VALID [2018-11-23 12:47:42,100 INFO L273 TraceCheckUtils]: 24: Hoare triple {20119#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {20119#true} is VALID [2018-11-23 12:47:42,100 INFO L273 TraceCheckUtils]: 25: Hoare triple {20119#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {20119#true} is VALID [2018-11-23 12:47:42,100 INFO L273 TraceCheckUtils]: 26: Hoare triple {20119#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,101 INFO L273 TraceCheckUtils]: 27: Hoare triple {20119#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,101 INFO L273 TraceCheckUtils]: 28: Hoare triple {20119#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {20119#true} is VALID [2018-11-23 12:47:42,101 INFO L273 TraceCheckUtils]: 29: Hoare triple {20119#true} ~skip~0 := 0; {20119#true} is VALID [2018-11-23 12:47:42,101 INFO L273 TraceCheckUtils]: 30: Hoare triple {20119#true} assume !false; {20119#true} is VALID [2018-11-23 12:47:42,101 INFO L273 TraceCheckUtils]: 31: Hoare triple {20119#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,101 INFO L273 TraceCheckUtils]: 32: Hoare triple {20119#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,101 INFO L273 TraceCheckUtils]: 33: Hoare triple {20119#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,101 INFO L273 TraceCheckUtils]: 34: Hoare triple {20119#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,102 INFO L273 TraceCheckUtils]: 35: Hoare triple {20119#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,102 INFO L273 TraceCheckUtils]: 36: Hoare triple {20119#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,102 INFO L273 TraceCheckUtils]: 37: Hoare triple {20119#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,102 INFO L273 TraceCheckUtils]: 38: Hoare triple {20119#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,102 INFO L273 TraceCheckUtils]: 39: Hoare triple {20119#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,102 INFO L273 TraceCheckUtils]: 40: Hoare triple {20119#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,102 INFO L273 TraceCheckUtils]: 41: Hoare triple {20119#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,102 INFO L273 TraceCheckUtils]: 42: Hoare triple {20119#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,102 INFO L273 TraceCheckUtils]: 43: Hoare triple {20119#true} assume 8496 == #t~mem35;havoc #t~mem35; {20119#true} is VALID [2018-11-23 12:47:42,103 INFO L273 TraceCheckUtils]: 44: Hoare triple {20119#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {20119#true} is VALID [2018-11-23 12:47:42,103 INFO L273 TraceCheckUtils]: 45: Hoare triple {20119#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {20119#true} is VALID [2018-11-23 12:47:42,103 INFO L273 TraceCheckUtils]: 46: Hoare triple {20119#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {20119#true} is VALID [2018-11-23 12:47:42,104 INFO L273 TraceCheckUtils]: 47: Hoare triple {20119#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {20121#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,104 INFO L273 TraceCheckUtils]: 48: Hoare triple {20121#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {20121#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,105 INFO L273 TraceCheckUtils]: 49: Hoare triple {20121#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {20121#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,105 INFO L273 TraceCheckUtils]: 50: Hoare triple {20121#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {20121#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,105 INFO L273 TraceCheckUtils]: 51: Hoare triple {20121#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {20121#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,106 INFO L273 TraceCheckUtils]: 52: Hoare triple {20121#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {20121#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,106 INFO L273 TraceCheckUtils]: 53: Hoare triple {20121#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20121#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,107 INFO L273 TraceCheckUtils]: 54: Hoare triple {20121#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20121#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,107 INFO L273 TraceCheckUtils]: 55: Hoare triple {20121#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20121#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,108 INFO L273 TraceCheckUtils]: 56: Hoare triple {20121#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20121#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,108 INFO L273 TraceCheckUtils]: 57: Hoare triple {20121#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {20121#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,109 INFO L273 TraceCheckUtils]: 58: Hoare triple {20121#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {20122#(= 8656 |ssl3_accept_#t~mem29|)} is VALID [2018-11-23 12:47:42,110 INFO L273 TraceCheckUtils]: 59: Hoare triple {20122#(= 8656 |ssl3_accept_#t~mem29|)} assume 8480 == #t~mem29;havoc #t~mem29; {20120#false} is VALID [2018-11-23 12:47:42,110 INFO L273 TraceCheckUtils]: 60: Hoare triple {20120#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {20120#false} is VALID [2018-11-23 12:47:42,110 INFO L273 TraceCheckUtils]: 61: Hoare triple {20120#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,110 INFO L273 TraceCheckUtils]: 62: Hoare triple {20120#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,110 INFO L273 TraceCheckUtils]: 63: Hoare triple {20120#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {20120#false} is VALID [2018-11-23 12:47:42,111 INFO L273 TraceCheckUtils]: 64: Hoare triple {20120#false} ~skip~0 := 0; {20120#false} is VALID [2018-11-23 12:47:42,111 INFO L273 TraceCheckUtils]: 65: Hoare triple {20120#false} assume !false; {20120#false} is VALID [2018-11-23 12:47:42,111 INFO L273 TraceCheckUtils]: 66: Hoare triple {20120#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,111 INFO L273 TraceCheckUtils]: 67: Hoare triple {20120#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,111 INFO L273 TraceCheckUtils]: 68: Hoare triple {20120#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,112 INFO L273 TraceCheckUtils]: 69: Hoare triple {20120#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,112 INFO L273 TraceCheckUtils]: 70: Hoare triple {20120#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,112 INFO L273 TraceCheckUtils]: 71: Hoare triple {20120#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,112 INFO L273 TraceCheckUtils]: 72: Hoare triple {20120#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,112 INFO L273 TraceCheckUtils]: 73: Hoare triple {20120#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,112 INFO L273 TraceCheckUtils]: 74: Hoare triple {20120#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,113 INFO L273 TraceCheckUtils]: 75: Hoare triple {20120#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,113 INFO L273 TraceCheckUtils]: 76: Hoare triple {20120#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,113 INFO L273 TraceCheckUtils]: 77: Hoare triple {20120#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,113 INFO L273 TraceCheckUtils]: 78: Hoare triple {20120#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,113 INFO L273 TraceCheckUtils]: 79: Hoare triple {20120#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,114 INFO L273 TraceCheckUtils]: 80: Hoare triple {20120#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,114 INFO L273 TraceCheckUtils]: 81: Hoare triple {20120#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,114 INFO L273 TraceCheckUtils]: 82: Hoare triple {20120#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,114 INFO L273 TraceCheckUtils]: 83: Hoare triple {20120#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,114 INFO L273 TraceCheckUtils]: 84: Hoare triple {20120#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,114 INFO L273 TraceCheckUtils]: 85: Hoare triple {20120#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,115 INFO L273 TraceCheckUtils]: 86: Hoare triple {20120#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,115 INFO L273 TraceCheckUtils]: 87: Hoare triple {20120#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,115 INFO L273 TraceCheckUtils]: 88: Hoare triple {20120#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,115 INFO L273 TraceCheckUtils]: 89: Hoare triple {20120#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,115 INFO L273 TraceCheckUtils]: 90: Hoare triple {20120#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,115 INFO L273 TraceCheckUtils]: 91: Hoare triple {20120#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,115 INFO L273 TraceCheckUtils]: 92: Hoare triple {20120#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,115 INFO L273 TraceCheckUtils]: 93: Hoare triple {20120#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,116 INFO L273 TraceCheckUtils]: 94: Hoare triple {20120#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,116 INFO L273 TraceCheckUtils]: 95: Hoare triple {20120#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,116 INFO L273 TraceCheckUtils]: 96: Hoare triple {20120#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,116 INFO L273 TraceCheckUtils]: 97: Hoare triple {20120#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,116 INFO L273 TraceCheckUtils]: 98: Hoare triple {20120#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {20120#false} is VALID [2018-11-23 12:47:42,116 INFO L273 TraceCheckUtils]: 99: Hoare triple {20120#false} assume 8672 == #t~mem56;havoc #t~mem56; {20120#false} is VALID [2018-11-23 12:47:42,116 INFO L273 TraceCheckUtils]: 100: Hoare triple {20120#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {20120#false} is VALID [2018-11-23 12:47:42,116 INFO L273 TraceCheckUtils]: 101: Hoare triple {20120#false} assume 4 == ~blastFlag~0; {20120#false} is VALID [2018-11-23 12:47:42,116 INFO L273 TraceCheckUtils]: 102: Hoare triple {20120#false} assume !false; {20120#false} is VALID [2018-11-23 12:47:42,123 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 58 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:42,123 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:42,123 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:42,123 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 103 [2018-11-23 12:47:42,124 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:42,124 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:42,211 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 93 edges. 93 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:42,211 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:42,212 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:42,212 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:42,212 INFO L87 Difference]: Start difference. First operand 256 states and 389 transitions. Second operand 4 states. [2018-11-23 12:47:43,685 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:43,685 INFO L93 Difference]: Finished difference Result 538 states and 816 transitions. [2018-11-23 12:47:43,685 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:43,686 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 103 [2018-11-23 12:47:43,686 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:43,686 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:43,688 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 532 transitions. [2018-11-23 12:47:43,688 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:43,691 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 532 transitions. [2018-11-23 12:47:43,691 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 532 transitions. [2018-11-23 12:47:44,233 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 532 edges. 532 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:44,242 INFO L225 Difference]: With dead ends: 538 [2018-11-23 12:47:44,242 INFO L226 Difference]: Without dead ends: 307 [2018-11-23 12:47:44,243 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:44,243 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 307 states. [2018-11-23 12:47:44,351 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 307 to 256. [2018-11-23 12:47:44,351 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:44,352 INFO L82 GeneralOperation]: Start isEquivalent. First operand 307 states. Second operand 256 states. [2018-11-23 12:47:44,352 INFO L74 IsIncluded]: Start isIncluded. First operand 307 states. Second operand 256 states. [2018-11-23 12:47:44,352 INFO L87 Difference]: Start difference. First operand 307 states. Second operand 256 states. [2018-11-23 12:47:44,359 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:44,359 INFO L93 Difference]: Finished difference Result 307 states and 454 transitions. [2018-11-23 12:47:44,359 INFO L276 IsEmpty]: Start isEmpty. Operand 307 states and 454 transitions. [2018-11-23 12:47:44,359 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:44,359 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:44,359 INFO L74 IsIncluded]: Start isIncluded. First operand 256 states. Second operand 307 states. [2018-11-23 12:47:44,360 INFO L87 Difference]: Start difference. First operand 256 states. Second operand 307 states. [2018-11-23 12:47:44,366 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:44,366 INFO L93 Difference]: Finished difference Result 307 states and 454 transitions. [2018-11-23 12:47:44,366 INFO L276 IsEmpty]: Start isEmpty. Operand 307 states and 454 transitions. [2018-11-23 12:47:44,367 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:44,367 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:44,367 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:44,367 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:44,367 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 12:47:44,372 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 388 transitions. [2018-11-23 12:47:44,373 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 388 transitions. Word has length 103 [2018-11-23 12:47:44,373 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:44,373 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 388 transitions. [2018-11-23 12:47:44,373 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:44,373 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 388 transitions. [2018-11-23 12:47:44,374 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2018-11-23 12:47:44,374 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:44,374 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:44,375 INFO L423 AbstractCegarLoop]: === Iteration 21 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:44,375 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:44,375 INFO L82 PathProgramCache]: Analyzing trace with hash -807300434, now seen corresponding path program 1 times [2018-11-23 12:47:44,375 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:44,375 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:44,376 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:44,376 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:44,376 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:44,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:45,017 WARN L180 SmtUtils]: Spent 101.00 ms on a formula simplification. DAG size of input: 6 DAG size of output: 3 [2018-11-23 12:47:45,136 INFO L256 TraceCheckUtils]: 0: Hoare triple {21662#true} call ULTIMATE.init(); {21662#true} is VALID [2018-11-23 12:47:45,136 INFO L273 TraceCheckUtils]: 1: Hoare triple {21662#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,136 INFO L273 TraceCheckUtils]: 2: Hoare triple {21662#true} assume true; {21662#true} is VALID [2018-11-23 12:47:45,137 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {21662#true} {21662#true} #604#return; {21662#true} is VALID [2018-11-23 12:47:45,137 INFO L256 TraceCheckUtils]: 4: Hoare triple {21662#true} call #t~ret138 := main(); {21662#true} is VALID [2018-11-23 12:47:45,137 INFO L273 TraceCheckUtils]: 5: Hoare triple {21662#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,137 INFO L256 TraceCheckUtils]: 6: Hoare triple {21662#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {21662#true} is VALID [2018-11-23 12:47:45,137 INFO L273 TraceCheckUtils]: 7: Hoare triple {21662#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,138 INFO L273 TraceCheckUtils]: 8: Hoare triple {21662#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {21662#true} is VALID [2018-11-23 12:47:45,138 INFO L273 TraceCheckUtils]: 9: Hoare triple {21662#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {21662#true} is VALID [2018-11-23 12:47:45,138 INFO L273 TraceCheckUtils]: 10: Hoare triple {21662#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {21662#true} is VALID [2018-11-23 12:47:45,138 INFO L273 TraceCheckUtils]: 11: Hoare triple {21662#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,138 INFO L273 TraceCheckUtils]: 12: Hoare triple {21662#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {21662#true} is VALID [2018-11-23 12:47:45,139 INFO L273 TraceCheckUtils]: 13: Hoare triple {21662#true} assume !false; {21662#true} is VALID [2018-11-23 12:47:45,139 INFO L273 TraceCheckUtils]: 14: Hoare triple {21662#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,139 INFO L273 TraceCheckUtils]: 15: Hoare triple {21662#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,139 INFO L273 TraceCheckUtils]: 16: Hoare triple {21662#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,139 INFO L273 TraceCheckUtils]: 17: Hoare triple {21662#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,139 INFO L273 TraceCheckUtils]: 18: Hoare triple {21662#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,139 INFO L273 TraceCheckUtils]: 19: Hoare triple {21662#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,140 INFO L273 TraceCheckUtils]: 20: Hoare triple {21662#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,140 INFO L273 TraceCheckUtils]: 21: Hoare triple {21662#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,140 INFO L273 TraceCheckUtils]: 22: Hoare triple {21662#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,140 INFO L273 TraceCheckUtils]: 23: Hoare triple {21662#true} assume 8464 == #t~mem32;havoc #t~mem32; {21662#true} is VALID [2018-11-23 12:47:45,140 INFO L273 TraceCheckUtils]: 24: Hoare triple {21662#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {21662#true} is VALID [2018-11-23 12:47:45,141 INFO L273 TraceCheckUtils]: 25: Hoare triple {21662#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {21662#true} is VALID [2018-11-23 12:47:45,141 INFO L273 TraceCheckUtils]: 26: Hoare triple {21662#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,141 INFO L273 TraceCheckUtils]: 27: Hoare triple {21662#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,141 INFO L273 TraceCheckUtils]: 28: Hoare triple {21662#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {21662#true} is VALID [2018-11-23 12:47:45,141 INFO L273 TraceCheckUtils]: 29: Hoare triple {21662#true} ~skip~0 := 0; {21662#true} is VALID [2018-11-23 12:47:45,141 INFO L273 TraceCheckUtils]: 30: Hoare triple {21662#true} assume !false; {21662#true} is VALID [2018-11-23 12:47:45,142 INFO L273 TraceCheckUtils]: 31: Hoare triple {21662#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,142 INFO L273 TraceCheckUtils]: 32: Hoare triple {21662#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,142 INFO L273 TraceCheckUtils]: 33: Hoare triple {21662#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,142 INFO L273 TraceCheckUtils]: 34: Hoare triple {21662#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,142 INFO L273 TraceCheckUtils]: 35: Hoare triple {21662#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,142 INFO L273 TraceCheckUtils]: 36: Hoare triple {21662#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,143 INFO L273 TraceCheckUtils]: 37: Hoare triple {21662#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,143 INFO L273 TraceCheckUtils]: 38: Hoare triple {21662#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,143 INFO L273 TraceCheckUtils]: 39: Hoare triple {21662#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,143 INFO L273 TraceCheckUtils]: 40: Hoare triple {21662#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,143 INFO L273 TraceCheckUtils]: 41: Hoare triple {21662#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,143 INFO L273 TraceCheckUtils]: 42: Hoare triple {21662#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,143 INFO L273 TraceCheckUtils]: 43: Hoare triple {21662#true} assume 8496 == #t~mem35;havoc #t~mem35; {21662#true} is VALID [2018-11-23 12:47:45,144 INFO L273 TraceCheckUtils]: 44: Hoare triple {21662#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {21662#true} is VALID [2018-11-23 12:47:45,144 INFO L273 TraceCheckUtils]: 45: Hoare triple {21662#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {21662#true} is VALID [2018-11-23 12:47:45,144 INFO L273 TraceCheckUtils]: 46: Hoare triple {21662#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {21662#true} is VALID [2018-11-23 12:47:45,157 INFO L273 TraceCheckUtils]: 47: Hoare triple {21662#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {21664#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,169 INFO L273 TraceCheckUtils]: 48: Hoare triple {21664#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {21664#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,182 INFO L273 TraceCheckUtils]: 49: Hoare triple {21664#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {21664#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,199 INFO L273 TraceCheckUtils]: 50: Hoare triple {21664#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {21664#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,208 INFO L273 TraceCheckUtils]: 51: Hoare triple {21664#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {21664#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,220 INFO L273 TraceCheckUtils]: 52: Hoare triple {21664#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {21664#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,233 INFO L273 TraceCheckUtils]: 53: Hoare triple {21664#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {21664#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,246 INFO L273 TraceCheckUtils]: 54: Hoare triple {21664#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {21664#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,255 INFO L273 TraceCheckUtils]: 55: Hoare triple {21664#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {21664#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,268 INFO L273 TraceCheckUtils]: 56: Hoare triple {21664#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {21664#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,277 INFO L273 TraceCheckUtils]: 57: Hoare triple {21664#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {21664#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,289 INFO L273 TraceCheckUtils]: 58: Hoare triple {21664#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {21665#(= 8512 |ssl3_accept_#t~mem29|)} is VALID [2018-11-23 12:47:45,302 INFO L273 TraceCheckUtils]: 59: Hoare triple {21665#(= 8512 |ssl3_accept_#t~mem29|)} assume 8480 == #t~mem29;havoc #t~mem29; {21663#false} is VALID [2018-11-23 12:47:45,302 INFO L273 TraceCheckUtils]: 60: Hoare triple {21663#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {21663#false} is VALID [2018-11-23 12:47:45,302 INFO L273 TraceCheckUtils]: 61: Hoare triple {21663#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,303 INFO L273 TraceCheckUtils]: 62: Hoare triple {21663#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,303 INFO L273 TraceCheckUtils]: 63: Hoare triple {21663#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {21663#false} is VALID [2018-11-23 12:47:45,303 INFO L273 TraceCheckUtils]: 64: Hoare triple {21663#false} ~skip~0 := 0; {21663#false} is VALID [2018-11-23 12:47:45,303 INFO L273 TraceCheckUtils]: 65: Hoare triple {21663#false} assume !false; {21663#false} is VALID [2018-11-23 12:47:45,303 INFO L273 TraceCheckUtils]: 66: Hoare triple {21663#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,304 INFO L273 TraceCheckUtils]: 67: Hoare triple {21663#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,304 INFO L273 TraceCheckUtils]: 68: Hoare triple {21663#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,304 INFO L273 TraceCheckUtils]: 69: Hoare triple {21663#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,304 INFO L273 TraceCheckUtils]: 70: Hoare triple {21663#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,304 INFO L273 TraceCheckUtils]: 71: Hoare triple {21663#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,304 INFO L273 TraceCheckUtils]: 72: Hoare triple {21663#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,305 INFO L273 TraceCheckUtils]: 73: Hoare triple {21663#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,305 INFO L273 TraceCheckUtils]: 74: Hoare triple {21663#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,305 INFO L273 TraceCheckUtils]: 75: Hoare triple {21663#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,305 INFO L273 TraceCheckUtils]: 76: Hoare triple {21663#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,305 INFO L273 TraceCheckUtils]: 77: Hoare triple {21663#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,305 INFO L273 TraceCheckUtils]: 78: Hoare triple {21663#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,306 INFO L273 TraceCheckUtils]: 79: Hoare triple {21663#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,306 INFO L273 TraceCheckUtils]: 80: Hoare triple {21663#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,306 INFO L273 TraceCheckUtils]: 81: Hoare triple {21663#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,306 INFO L273 TraceCheckUtils]: 82: Hoare triple {21663#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,306 INFO L273 TraceCheckUtils]: 83: Hoare triple {21663#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,307 INFO L273 TraceCheckUtils]: 84: Hoare triple {21663#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,307 INFO L273 TraceCheckUtils]: 85: Hoare triple {21663#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,307 INFO L273 TraceCheckUtils]: 86: Hoare triple {21663#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,307 INFO L273 TraceCheckUtils]: 87: Hoare triple {21663#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,307 INFO L273 TraceCheckUtils]: 88: Hoare triple {21663#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,308 INFO L273 TraceCheckUtils]: 89: Hoare triple {21663#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,308 INFO L273 TraceCheckUtils]: 90: Hoare triple {21663#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,308 INFO L273 TraceCheckUtils]: 91: Hoare triple {21663#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,308 INFO L273 TraceCheckUtils]: 92: Hoare triple {21663#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,308 INFO L273 TraceCheckUtils]: 93: Hoare triple {21663#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,309 INFO L273 TraceCheckUtils]: 94: Hoare triple {21663#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,309 INFO L273 TraceCheckUtils]: 95: Hoare triple {21663#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,309 INFO L273 TraceCheckUtils]: 96: Hoare triple {21663#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,309 INFO L273 TraceCheckUtils]: 97: Hoare triple {21663#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,309 INFO L273 TraceCheckUtils]: 98: Hoare triple {21663#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {21663#false} is VALID [2018-11-23 12:47:45,310 INFO L273 TraceCheckUtils]: 99: Hoare triple {21663#false} assume 8672 == #t~mem56;havoc #t~mem56; {21663#false} is VALID [2018-11-23 12:47:45,310 INFO L273 TraceCheckUtils]: 100: Hoare triple {21663#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {21663#false} is VALID [2018-11-23 12:47:45,310 INFO L273 TraceCheckUtils]: 101: Hoare triple {21663#false} assume 4 == ~blastFlag~0; {21663#false} is VALID [2018-11-23 12:47:45,310 INFO L273 TraceCheckUtils]: 102: Hoare triple {21663#false} assume !false; {21663#false} is VALID [2018-11-23 12:47:45,319 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 58 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:45,320 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:45,320 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:45,320 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 103 [2018-11-23 12:47:45,320 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:45,321 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:45,421 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 93 edges. 93 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:45,421 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:45,421 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:45,421 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:45,422 INFO L87 Difference]: Start difference. First operand 256 states and 388 transitions. Second operand 4 states. [2018-11-23 12:47:47,192 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:47,192 INFO L93 Difference]: Finished difference Result 511 states and 778 transitions. [2018-11-23 12:47:47,192 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:47,192 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 103 [2018-11-23 12:47:47,192 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:47,193 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:47,194 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 461 transitions. [2018-11-23 12:47:47,194 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:47,196 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 461 transitions. [2018-11-23 12:47:47,196 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 461 transitions. [2018-11-23 12:47:47,642 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 461 edges. 461 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:47,649 INFO L225 Difference]: With dead ends: 511 [2018-11-23 12:47:47,649 INFO L226 Difference]: Without dead ends: 280 [2018-11-23 12:47:47,650 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:47,650 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 280 states. [2018-11-23 12:47:47,770 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 280 to 256. [2018-11-23 12:47:47,770 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:47,770 INFO L82 GeneralOperation]: Start isEquivalent. First operand 280 states. Second operand 256 states. [2018-11-23 12:47:47,770 INFO L74 IsIncluded]: Start isIncluded. First operand 280 states. Second operand 256 states. [2018-11-23 12:47:47,771 INFO L87 Difference]: Start difference. First operand 280 states. Second operand 256 states. [2018-11-23 12:47:47,775 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:47,775 INFO L93 Difference]: Finished difference Result 280 states and 417 transitions. [2018-11-23 12:47:47,776 INFO L276 IsEmpty]: Start isEmpty. Operand 280 states and 417 transitions. [2018-11-23 12:47:47,776 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:47,776 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:47,776 INFO L74 IsIncluded]: Start isIncluded. First operand 256 states. Second operand 280 states. [2018-11-23 12:47:47,776 INFO L87 Difference]: Start difference. First operand 256 states. Second operand 280 states. [2018-11-23 12:47:47,782 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:47,782 INFO L93 Difference]: Finished difference Result 280 states and 417 transitions. [2018-11-23 12:47:47,782 INFO L276 IsEmpty]: Start isEmpty. Operand 280 states and 417 transitions. [2018-11-23 12:47:47,783 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:47,783 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:47,783 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:47,783 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:47,783 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 12:47:47,789 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 387 transitions. [2018-11-23 12:47:47,789 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 387 transitions. Word has length 103 [2018-11-23 12:47:47,789 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:47,789 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 387 transitions. [2018-11-23 12:47:47,789 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:47,789 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 387 transitions. [2018-11-23 12:47:47,790 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 12:47:47,790 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:47,790 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:47,791 INFO L423 AbstractCegarLoop]: === Iteration 22 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:47,791 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:47,791 INFO L82 PathProgramCache]: Analyzing trace with hash 316276607, now seen corresponding path program 1 times [2018-11-23 12:47:47,791 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:47,791 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:47,792 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:47,792 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:47,792 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:47,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:47,978 INFO L256 TraceCheckUtils]: 0: Hoare triple {23113#true} call ULTIMATE.init(); {23113#true} is VALID [2018-11-23 12:47:47,979 INFO L273 TraceCheckUtils]: 1: Hoare triple {23113#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,979 INFO L273 TraceCheckUtils]: 2: Hoare triple {23113#true} assume true; {23113#true} is VALID [2018-11-23 12:47:47,979 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {23113#true} {23113#true} #604#return; {23113#true} is VALID [2018-11-23 12:47:47,979 INFO L256 TraceCheckUtils]: 4: Hoare triple {23113#true} call #t~ret138 := main(); {23113#true} is VALID [2018-11-23 12:47:47,980 INFO L273 TraceCheckUtils]: 5: Hoare triple {23113#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,980 INFO L256 TraceCheckUtils]: 6: Hoare triple {23113#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {23113#true} is VALID [2018-11-23 12:47:47,980 INFO L273 TraceCheckUtils]: 7: Hoare triple {23113#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,980 INFO L273 TraceCheckUtils]: 8: Hoare triple {23113#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {23113#true} is VALID [2018-11-23 12:47:47,980 INFO L273 TraceCheckUtils]: 9: Hoare triple {23113#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {23113#true} is VALID [2018-11-23 12:47:47,981 INFO L273 TraceCheckUtils]: 10: Hoare triple {23113#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {23113#true} is VALID [2018-11-23 12:47:47,981 INFO L273 TraceCheckUtils]: 11: Hoare triple {23113#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,981 INFO L273 TraceCheckUtils]: 12: Hoare triple {23113#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {23113#true} is VALID [2018-11-23 12:47:47,981 INFO L273 TraceCheckUtils]: 13: Hoare triple {23113#true} assume !false; {23113#true} is VALID [2018-11-23 12:47:47,981 INFO L273 TraceCheckUtils]: 14: Hoare triple {23113#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,981 INFO L273 TraceCheckUtils]: 15: Hoare triple {23113#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,981 INFO L273 TraceCheckUtils]: 16: Hoare triple {23113#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,981 INFO L273 TraceCheckUtils]: 17: Hoare triple {23113#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,982 INFO L273 TraceCheckUtils]: 18: Hoare triple {23113#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,982 INFO L273 TraceCheckUtils]: 19: Hoare triple {23113#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,982 INFO L273 TraceCheckUtils]: 20: Hoare triple {23113#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,982 INFO L273 TraceCheckUtils]: 21: Hoare triple {23113#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,982 INFO L273 TraceCheckUtils]: 22: Hoare triple {23113#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,982 INFO L273 TraceCheckUtils]: 23: Hoare triple {23113#true} assume 8464 == #t~mem32;havoc #t~mem32; {23113#true} is VALID [2018-11-23 12:47:47,982 INFO L273 TraceCheckUtils]: 24: Hoare triple {23113#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {23113#true} is VALID [2018-11-23 12:47:47,982 INFO L273 TraceCheckUtils]: 25: Hoare triple {23113#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {23113#true} is VALID [2018-11-23 12:47:47,982 INFO L273 TraceCheckUtils]: 26: Hoare triple {23113#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,983 INFO L273 TraceCheckUtils]: 27: Hoare triple {23113#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,983 INFO L273 TraceCheckUtils]: 28: Hoare triple {23113#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {23113#true} is VALID [2018-11-23 12:47:47,983 INFO L273 TraceCheckUtils]: 29: Hoare triple {23113#true} ~skip~0 := 0; {23113#true} is VALID [2018-11-23 12:47:47,983 INFO L273 TraceCheckUtils]: 30: Hoare triple {23113#true} assume !false; {23113#true} is VALID [2018-11-23 12:47:47,983 INFO L273 TraceCheckUtils]: 31: Hoare triple {23113#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,983 INFO L273 TraceCheckUtils]: 32: Hoare triple {23113#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,983 INFO L273 TraceCheckUtils]: 33: Hoare triple {23113#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,983 INFO L273 TraceCheckUtils]: 34: Hoare triple {23113#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,983 INFO L273 TraceCheckUtils]: 35: Hoare triple {23113#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,984 INFO L273 TraceCheckUtils]: 36: Hoare triple {23113#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,984 INFO L273 TraceCheckUtils]: 37: Hoare triple {23113#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,984 INFO L273 TraceCheckUtils]: 38: Hoare triple {23113#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,984 INFO L273 TraceCheckUtils]: 39: Hoare triple {23113#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,984 INFO L273 TraceCheckUtils]: 40: Hoare triple {23113#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,984 INFO L273 TraceCheckUtils]: 41: Hoare triple {23113#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,984 INFO L273 TraceCheckUtils]: 42: Hoare triple {23113#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,984 INFO L273 TraceCheckUtils]: 43: Hoare triple {23113#true} assume 8496 == #t~mem35;havoc #t~mem35; {23113#true} is VALID [2018-11-23 12:47:47,984 INFO L273 TraceCheckUtils]: 44: Hoare triple {23113#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {23113#true} is VALID [2018-11-23 12:47:47,985 INFO L273 TraceCheckUtils]: 45: Hoare triple {23113#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {23113#true} is VALID [2018-11-23 12:47:47,985 INFO L273 TraceCheckUtils]: 46: Hoare triple {23113#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {23113#true} is VALID [2018-11-23 12:47:47,986 INFO L273 TraceCheckUtils]: 47: Hoare triple {23113#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:47,986 INFO L273 TraceCheckUtils]: 48: Hoare triple {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:47,987 INFO L273 TraceCheckUtils]: 49: Hoare triple {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:47,987 INFO L273 TraceCheckUtils]: 50: Hoare triple {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:47,987 INFO L273 TraceCheckUtils]: 51: Hoare triple {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:47,988 INFO L273 TraceCheckUtils]: 52: Hoare triple {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:47,988 INFO L273 TraceCheckUtils]: 53: Hoare triple {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:47,988 INFO L273 TraceCheckUtils]: 54: Hoare triple {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:47,989 INFO L273 TraceCheckUtils]: 55: Hoare triple {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:47,989 INFO L273 TraceCheckUtils]: 56: Hoare triple {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:47,989 INFO L273 TraceCheckUtils]: 57: Hoare triple {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:47,990 INFO L273 TraceCheckUtils]: 58: Hoare triple {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:47,991 INFO L273 TraceCheckUtils]: 59: Hoare triple {23115#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {23116#(= 8656 |ssl3_accept_#t~mem30|)} is VALID [2018-11-23 12:47:47,991 INFO L273 TraceCheckUtils]: 60: Hoare triple {23116#(= 8656 |ssl3_accept_#t~mem30|)} assume 8481 == #t~mem30;havoc #t~mem30; {23114#false} is VALID [2018-11-23 12:47:47,992 INFO L273 TraceCheckUtils]: 61: Hoare triple {23114#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {23114#false} is VALID [2018-11-23 12:47:47,992 INFO L273 TraceCheckUtils]: 62: Hoare triple {23114#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,992 INFO L273 TraceCheckUtils]: 63: Hoare triple {23114#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,992 INFO L273 TraceCheckUtils]: 64: Hoare triple {23114#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {23114#false} is VALID [2018-11-23 12:47:47,992 INFO L273 TraceCheckUtils]: 65: Hoare triple {23114#false} ~skip~0 := 0; {23114#false} is VALID [2018-11-23 12:47:47,993 INFO L273 TraceCheckUtils]: 66: Hoare triple {23114#false} assume !false; {23114#false} is VALID [2018-11-23 12:47:47,993 INFO L273 TraceCheckUtils]: 67: Hoare triple {23114#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,993 INFO L273 TraceCheckUtils]: 68: Hoare triple {23114#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,993 INFO L273 TraceCheckUtils]: 69: Hoare triple {23114#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,993 INFO L273 TraceCheckUtils]: 70: Hoare triple {23114#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,994 INFO L273 TraceCheckUtils]: 71: Hoare triple {23114#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,994 INFO L273 TraceCheckUtils]: 72: Hoare triple {23114#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,994 INFO L273 TraceCheckUtils]: 73: Hoare triple {23114#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,994 INFO L273 TraceCheckUtils]: 74: Hoare triple {23114#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,994 INFO L273 TraceCheckUtils]: 75: Hoare triple {23114#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,995 INFO L273 TraceCheckUtils]: 76: Hoare triple {23114#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,995 INFO L273 TraceCheckUtils]: 77: Hoare triple {23114#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,995 INFO L273 TraceCheckUtils]: 78: Hoare triple {23114#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,995 INFO L273 TraceCheckUtils]: 79: Hoare triple {23114#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,995 INFO L273 TraceCheckUtils]: 80: Hoare triple {23114#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,996 INFO L273 TraceCheckUtils]: 81: Hoare triple {23114#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,996 INFO L273 TraceCheckUtils]: 82: Hoare triple {23114#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,996 INFO L273 TraceCheckUtils]: 83: Hoare triple {23114#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,996 INFO L273 TraceCheckUtils]: 84: Hoare triple {23114#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,996 INFO L273 TraceCheckUtils]: 85: Hoare triple {23114#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,996 INFO L273 TraceCheckUtils]: 86: Hoare triple {23114#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,996 INFO L273 TraceCheckUtils]: 87: Hoare triple {23114#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,997 INFO L273 TraceCheckUtils]: 88: Hoare triple {23114#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,997 INFO L273 TraceCheckUtils]: 89: Hoare triple {23114#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,997 INFO L273 TraceCheckUtils]: 90: Hoare triple {23114#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,997 INFO L273 TraceCheckUtils]: 91: Hoare triple {23114#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,997 INFO L273 TraceCheckUtils]: 92: Hoare triple {23114#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,997 INFO L273 TraceCheckUtils]: 93: Hoare triple {23114#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,998 INFO L273 TraceCheckUtils]: 94: Hoare triple {23114#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,998 INFO L273 TraceCheckUtils]: 95: Hoare triple {23114#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,998 INFO L273 TraceCheckUtils]: 96: Hoare triple {23114#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,998 INFO L273 TraceCheckUtils]: 97: Hoare triple {23114#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,998 INFO L273 TraceCheckUtils]: 98: Hoare triple {23114#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,998 INFO L273 TraceCheckUtils]: 99: Hoare triple {23114#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {23114#false} is VALID [2018-11-23 12:47:47,999 INFO L273 TraceCheckUtils]: 100: Hoare triple {23114#false} assume 8672 == #t~mem56;havoc #t~mem56; {23114#false} is VALID [2018-11-23 12:47:47,999 INFO L273 TraceCheckUtils]: 101: Hoare triple {23114#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {23114#false} is VALID [2018-11-23 12:47:47,999 INFO L273 TraceCheckUtils]: 102: Hoare triple {23114#false} assume 4 == ~blastFlag~0; {23114#false} is VALID [2018-11-23 12:47:47,999 INFO L273 TraceCheckUtils]: 103: Hoare triple {23114#false} assume !false; {23114#false} is VALID [2018-11-23 12:47:48,008 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 61 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:48,008 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:48,008 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:48,008 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 12:47:48,009 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:48,009 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:48,103 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 94 edges. 94 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:48,103 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:48,103 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:48,103 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:48,104 INFO L87 Difference]: Start difference. First operand 256 states and 387 transitions. Second operand 4 states. [2018-11-23 12:47:49,481 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:49,481 INFO L93 Difference]: Finished difference Result 536 states and 810 transitions. [2018-11-23 12:47:49,481 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:49,481 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 12:47:49,481 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:49,482 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:49,484 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 529 transitions. [2018-11-23 12:47:49,484 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:49,486 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 529 transitions. [2018-11-23 12:47:49,486 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 529 transitions. [2018-11-23 12:47:50,019 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 529 edges. 529 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:50,027 INFO L225 Difference]: With dead ends: 536 [2018-11-23 12:47:50,028 INFO L226 Difference]: Without dead ends: 305 [2018-11-23 12:47:50,028 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:50,029 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2018-11-23 12:47:50,194 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 256. [2018-11-23 12:47:50,194 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:50,194 INFO L82 GeneralOperation]: Start isEquivalent. First operand 305 states. Second operand 256 states. [2018-11-23 12:47:50,194 INFO L74 IsIncluded]: Start isIncluded. First operand 305 states. Second operand 256 states. [2018-11-23 12:47:50,194 INFO L87 Difference]: Start difference. First operand 305 states. Second operand 256 states. [2018-11-23 12:47:50,200 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:50,200 INFO L93 Difference]: Finished difference Result 305 states and 450 transitions. [2018-11-23 12:47:50,200 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 450 transitions. [2018-11-23 12:47:50,201 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:50,201 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:50,201 INFO L74 IsIncluded]: Start isIncluded. First operand 256 states. Second operand 305 states. [2018-11-23 12:47:50,201 INFO L87 Difference]: Start difference. First operand 256 states. Second operand 305 states. [2018-11-23 12:47:50,207 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:50,207 INFO L93 Difference]: Finished difference Result 305 states and 450 transitions. [2018-11-23 12:47:50,207 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 450 transitions. [2018-11-23 12:47:50,208 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:50,208 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:50,208 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:50,208 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:50,208 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 12:47:50,212 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 386 transitions. [2018-11-23 12:47:50,212 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 386 transitions. Word has length 104 [2018-11-23 12:47:50,212 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:50,212 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 386 transitions. [2018-11-23 12:47:50,213 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:50,213 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 386 transitions. [2018-11-23 12:47:50,213 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 12:47:50,213 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:50,213 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:50,214 INFO L423 AbstractCegarLoop]: === Iteration 23 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:50,214 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:50,214 INFO L82 PathProgramCache]: Analyzing trace with hash 816928128, now seen corresponding path program 1 times [2018-11-23 12:47:50,214 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:50,214 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:50,215 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:50,215 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:50,215 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:50,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:50,369 INFO L256 TraceCheckUtils]: 0: Hoare triple {24649#true} call ULTIMATE.init(); {24649#true} is VALID [2018-11-23 12:47:50,370 INFO L273 TraceCheckUtils]: 1: Hoare triple {24649#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,370 INFO L273 TraceCheckUtils]: 2: Hoare triple {24649#true} assume true; {24649#true} is VALID [2018-11-23 12:47:50,370 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {24649#true} {24649#true} #604#return; {24649#true} is VALID [2018-11-23 12:47:50,371 INFO L256 TraceCheckUtils]: 4: Hoare triple {24649#true} call #t~ret138 := main(); {24649#true} is VALID [2018-11-23 12:47:50,371 INFO L273 TraceCheckUtils]: 5: Hoare triple {24649#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,371 INFO L256 TraceCheckUtils]: 6: Hoare triple {24649#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {24649#true} is VALID [2018-11-23 12:47:50,371 INFO L273 TraceCheckUtils]: 7: Hoare triple {24649#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,372 INFO L273 TraceCheckUtils]: 8: Hoare triple {24649#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {24649#true} is VALID [2018-11-23 12:47:50,372 INFO L273 TraceCheckUtils]: 9: Hoare triple {24649#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {24649#true} is VALID [2018-11-23 12:47:50,372 INFO L273 TraceCheckUtils]: 10: Hoare triple {24649#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {24649#true} is VALID [2018-11-23 12:47:50,372 INFO L273 TraceCheckUtils]: 11: Hoare triple {24649#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,372 INFO L273 TraceCheckUtils]: 12: Hoare triple {24649#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {24649#true} is VALID [2018-11-23 12:47:50,372 INFO L273 TraceCheckUtils]: 13: Hoare triple {24649#true} assume !false; {24649#true} is VALID [2018-11-23 12:47:50,372 INFO L273 TraceCheckUtils]: 14: Hoare triple {24649#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,373 INFO L273 TraceCheckUtils]: 15: Hoare triple {24649#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,373 INFO L273 TraceCheckUtils]: 16: Hoare triple {24649#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,373 INFO L273 TraceCheckUtils]: 17: Hoare triple {24649#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,373 INFO L273 TraceCheckUtils]: 18: Hoare triple {24649#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,373 INFO L273 TraceCheckUtils]: 19: Hoare triple {24649#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,374 INFO L273 TraceCheckUtils]: 20: Hoare triple {24649#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,374 INFO L273 TraceCheckUtils]: 21: Hoare triple {24649#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,374 INFO L273 TraceCheckUtils]: 22: Hoare triple {24649#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,374 INFO L273 TraceCheckUtils]: 23: Hoare triple {24649#true} assume 8464 == #t~mem32;havoc #t~mem32; {24649#true} is VALID [2018-11-23 12:47:50,374 INFO L273 TraceCheckUtils]: 24: Hoare triple {24649#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {24649#true} is VALID [2018-11-23 12:47:50,374 INFO L273 TraceCheckUtils]: 25: Hoare triple {24649#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {24649#true} is VALID [2018-11-23 12:47:50,374 INFO L273 TraceCheckUtils]: 26: Hoare triple {24649#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,375 INFO L273 TraceCheckUtils]: 27: Hoare triple {24649#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,375 INFO L273 TraceCheckUtils]: 28: Hoare triple {24649#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {24649#true} is VALID [2018-11-23 12:47:50,375 INFO L273 TraceCheckUtils]: 29: Hoare triple {24649#true} ~skip~0 := 0; {24649#true} is VALID [2018-11-23 12:47:50,375 INFO L273 TraceCheckUtils]: 30: Hoare triple {24649#true} assume !false; {24649#true} is VALID [2018-11-23 12:47:50,375 INFO L273 TraceCheckUtils]: 31: Hoare triple {24649#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,375 INFO L273 TraceCheckUtils]: 32: Hoare triple {24649#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,375 INFO L273 TraceCheckUtils]: 33: Hoare triple {24649#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,376 INFO L273 TraceCheckUtils]: 34: Hoare triple {24649#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,376 INFO L273 TraceCheckUtils]: 35: Hoare triple {24649#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,376 INFO L273 TraceCheckUtils]: 36: Hoare triple {24649#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,376 INFO L273 TraceCheckUtils]: 37: Hoare triple {24649#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,376 INFO L273 TraceCheckUtils]: 38: Hoare triple {24649#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,376 INFO L273 TraceCheckUtils]: 39: Hoare triple {24649#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,377 INFO L273 TraceCheckUtils]: 40: Hoare triple {24649#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,377 INFO L273 TraceCheckUtils]: 41: Hoare triple {24649#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,377 INFO L273 TraceCheckUtils]: 42: Hoare triple {24649#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,377 INFO L273 TraceCheckUtils]: 43: Hoare triple {24649#true} assume 8496 == #t~mem35;havoc #t~mem35; {24649#true} is VALID [2018-11-23 12:47:50,377 INFO L273 TraceCheckUtils]: 44: Hoare triple {24649#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {24649#true} is VALID [2018-11-23 12:47:50,377 INFO L273 TraceCheckUtils]: 45: Hoare triple {24649#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {24649#true} is VALID [2018-11-23 12:47:50,377 INFO L273 TraceCheckUtils]: 46: Hoare triple {24649#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {24649#true} is VALID [2018-11-23 12:47:50,378 INFO L273 TraceCheckUtils]: 47: Hoare triple {24649#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,380 INFO L273 TraceCheckUtils]: 48: Hoare triple {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,380 INFO L273 TraceCheckUtils]: 49: Hoare triple {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,381 INFO L273 TraceCheckUtils]: 50: Hoare triple {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,381 INFO L273 TraceCheckUtils]: 51: Hoare triple {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,382 INFO L273 TraceCheckUtils]: 52: Hoare triple {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,383 INFO L273 TraceCheckUtils]: 53: Hoare triple {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,383 INFO L273 TraceCheckUtils]: 54: Hoare triple {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,384 INFO L273 TraceCheckUtils]: 55: Hoare triple {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,384 INFO L273 TraceCheckUtils]: 56: Hoare triple {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,385 INFO L273 TraceCheckUtils]: 57: Hoare triple {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,386 INFO L273 TraceCheckUtils]: 58: Hoare triple {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,386 INFO L273 TraceCheckUtils]: 59: Hoare triple {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,387 INFO L273 TraceCheckUtils]: 60: Hoare triple {24651#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {24652#(= 8656 |ssl3_accept_#t~mem31|)} is VALID [2018-11-23 12:47:50,388 INFO L273 TraceCheckUtils]: 61: Hoare triple {24652#(= 8656 |ssl3_accept_#t~mem31|)} assume 8482 == #t~mem31;havoc #t~mem31; {24650#false} is VALID [2018-11-23 12:47:50,388 INFO L273 TraceCheckUtils]: 62: Hoare triple {24650#false} call write~int(3, ~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,388 INFO L273 TraceCheckUtils]: 63: Hoare triple {24650#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,389 INFO L273 TraceCheckUtils]: 64: Hoare triple {24650#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {24650#false} is VALID [2018-11-23 12:47:50,389 INFO L273 TraceCheckUtils]: 65: Hoare triple {24650#false} ~skip~0 := 0; {24650#false} is VALID [2018-11-23 12:47:50,389 INFO L273 TraceCheckUtils]: 66: Hoare triple {24650#false} assume !false; {24650#false} is VALID [2018-11-23 12:47:50,389 INFO L273 TraceCheckUtils]: 67: Hoare triple {24650#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,390 INFO L273 TraceCheckUtils]: 68: Hoare triple {24650#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,390 INFO L273 TraceCheckUtils]: 69: Hoare triple {24650#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,390 INFO L273 TraceCheckUtils]: 70: Hoare triple {24650#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,390 INFO L273 TraceCheckUtils]: 71: Hoare triple {24650#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,391 INFO L273 TraceCheckUtils]: 72: Hoare triple {24650#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,391 INFO L273 TraceCheckUtils]: 73: Hoare triple {24650#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,391 INFO L273 TraceCheckUtils]: 74: Hoare triple {24650#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,391 INFO L273 TraceCheckUtils]: 75: Hoare triple {24650#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,391 INFO L273 TraceCheckUtils]: 76: Hoare triple {24650#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,392 INFO L273 TraceCheckUtils]: 77: Hoare triple {24650#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,392 INFO L273 TraceCheckUtils]: 78: Hoare triple {24650#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,392 INFO L273 TraceCheckUtils]: 79: Hoare triple {24650#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,392 INFO L273 TraceCheckUtils]: 80: Hoare triple {24650#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,392 INFO L273 TraceCheckUtils]: 81: Hoare triple {24650#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,392 INFO L273 TraceCheckUtils]: 82: Hoare triple {24650#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,392 INFO L273 TraceCheckUtils]: 83: Hoare triple {24650#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,393 INFO L273 TraceCheckUtils]: 84: Hoare triple {24650#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,393 INFO L273 TraceCheckUtils]: 85: Hoare triple {24650#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,393 INFO L273 TraceCheckUtils]: 86: Hoare triple {24650#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,393 INFO L273 TraceCheckUtils]: 87: Hoare triple {24650#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,393 INFO L273 TraceCheckUtils]: 88: Hoare triple {24650#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,393 INFO L273 TraceCheckUtils]: 89: Hoare triple {24650#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,393 INFO L273 TraceCheckUtils]: 90: Hoare triple {24650#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,394 INFO L273 TraceCheckUtils]: 91: Hoare triple {24650#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,394 INFO L273 TraceCheckUtils]: 92: Hoare triple {24650#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,394 INFO L273 TraceCheckUtils]: 93: Hoare triple {24650#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,394 INFO L273 TraceCheckUtils]: 94: Hoare triple {24650#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,394 INFO L273 TraceCheckUtils]: 95: Hoare triple {24650#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,394 INFO L273 TraceCheckUtils]: 96: Hoare triple {24650#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,395 INFO L273 TraceCheckUtils]: 97: Hoare triple {24650#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,395 INFO L273 TraceCheckUtils]: 98: Hoare triple {24650#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,395 INFO L273 TraceCheckUtils]: 99: Hoare triple {24650#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {24650#false} is VALID [2018-11-23 12:47:50,395 INFO L273 TraceCheckUtils]: 100: Hoare triple {24650#false} assume 8672 == #t~mem56;havoc #t~mem56; {24650#false} is VALID [2018-11-23 12:47:50,395 INFO L273 TraceCheckUtils]: 101: Hoare triple {24650#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {24650#false} is VALID [2018-11-23 12:47:50,395 INFO L273 TraceCheckUtils]: 102: Hoare triple {24650#false} assume 4 == ~blastFlag~0; {24650#false} is VALID [2018-11-23 12:47:50,395 INFO L273 TraceCheckUtils]: 103: Hoare triple {24650#false} assume !false; {24650#false} is VALID [2018-11-23 12:47:50,408 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:50,409 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:50,409 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:50,409 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 12:47:50,409 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:50,409 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:50,515 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 94 edges. 94 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:50,516 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:50,516 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:50,516 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:50,517 INFO L87 Difference]: Start difference. First operand 256 states and 386 transitions. Second operand 4 states. [2018-11-23 12:47:52,132 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:52,132 INFO L93 Difference]: Finished difference Result 535 states and 807 transitions. [2018-11-23 12:47:52,132 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:52,133 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 12:47:52,133 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:52,133 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:52,135 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 527 transitions. [2018-11-23 12:47:52,135 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:52,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 527 transitions. [2018-11-23 12:47:52,137 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 527 transitions. [2018-11-23 12:47:52,661 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 527 edges. 527 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:52,668 INFO L225 Difference]: With dead ends: 535 [2018-11-23 12:47:52,668 INFO L226 Difference]: Without dead ends: 304 [2018-11-23 12:47:52,669 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:52,669 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 304 states. [2018-11-23 12:47:52,753 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 304 to 256. [2018-11-23 12:47:52,753 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:52,753 INFO L82 GeneralOperation]: Start isEquivalent. First operand 304 states. Second operand 256 states. [2018-11-23 12:47:52,754 INFO L74 IsIncluded]: Start isIncluded. First operand 304 states. Second operand 256 states. [2018-11-23 12:47:52,754 INFO L87 Difference]: Start difference. First operand 304 states. Second operand 256 states. [2018-11-23 12:47:52,759 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:52,760 INFO L93 Difference]: Finished difference Result 304 states and 448 transitions. [2018-11-23 12:47:52,760 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 448 transitions. [2018-11-23 12:47:52,760 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:52,760 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:52,760 INFO L74 IsIncluded]: Start isIncluded. First operand 256 states. Second operand 304 states. [2018-11-23 12:47:52,760 INFO L87 Difference]: Start difference. First operand 256 states. Second operand 304 states. [2018-11-23 12:47:52,766 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:52,766 INFO L93 Difference]: Finished difference Result 304 states and 448 transitions. [2018-11-23 12:47:52,766 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 448 transitions. [2018-11-23 12:47:52,766 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:52,766 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:52,766 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:52,766 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:52,767 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 12:47:52,770 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 385 transitions. [2018-11-23 12:47:52,771 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 385 transitions. Word has length 104 [2018-11-23 12:47:52,771 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:52,771 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 385 transitions. [2018-11-23 12:47:52,771 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:52,771 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 385 transitions. [2018-11-23 12:47:52,772 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 12:47:52,772 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:52,772 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:52,772 INFO L423 AbstractCegarLoop]: === Iteration 24 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:52,772 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:52,772 INFO L82 PathProgramCache]: Analyzing trace with hash 1577193857, now seen corresponding path program 1 times [2018-11-23 12:47:52,772 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:52,772 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:52,773 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:52,773 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:52,773 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:52,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:53,061 INFO L256 TraceCheckUtils]: 0: Hoare triple {26181#true} call ULTIMATE.init(); {26181#true} is VALID [2018-11-23 12:47:53,062 INFO L273 TraceCheckUtils]: 1: Hoare triple {26181#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,062 INFO L273 TraceCheckUtils]: 2: Hoare triple {26181#true} assume true; {26181#true} is VALID [2018-11-23 12:47:53,062 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {26181#true} {26181#true} #604#return; {26181#true} is VALID [2018-11-23 12:47:53,062 INFO L256 TraceCheckUtils]: 4: Hoare triple {26181#true} call #t~ret138 := main(); {26181#true} is VALID [2018-11-23 12:47:53,063 INFO L273 TraceCheckUtils]: 5: Hoare triple {26181#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,063 INFO L256 TraceCheckUtils]: 6: Hoare triple {26181#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {26181#true} is VALID [2018-11-23 12:47:53,063 INFO L273 TraceCheckUtils]: 7: Hoare triple {26181#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,063 INFO L273 TraceCheckUtils]: 8: Hoare triple {26181#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {26181#true} is VALID [2018-11-23 12:47:53,063 INFO L273 TraceCheckUtils]: 9: Hoare triple {26181#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {26181#true} is VALID [2018-11-23 12:47:53,064 INFO L273 TraceCheckUtils]: 10: Hoare triple {26181#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {26181#true} is VALID [2018-11-23 12:47:53,064 INFO L273 TraceCheckUtils]: 11: Hoare triple {26181#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,064 INFO L273 TraceCheckUtils]: 12: Hoare triple {26181#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {26181#true} is VALID [2018-11-23 12:47:53,064 INFO L273 TraceCheckUtils]: 13: Hoare triple {26181#true} assume !false; {26181#true} is VALID [2018-11-23 12:47:53,064 INFO L273 TraceCheckUtils]: 14: Hoare triple {26181#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,064 INFO L273 TraceCheckUtils]: 15: Hoare triple {26181#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,064 INFO L273 TraceCheckUtils]: 16: Hoare triple {26181#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,064 INFO L273 TraceCheckUtils]: 17: Hoare triple {26181#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,064 INFO L273 TraceCheckUtils]: 18: Hoare triple {26181#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,065 INFO L273 TraceCheckUtils]: 19: Hoare triple {26181#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,065 INFO L273 TraceCheckUtils]: 20: Hoare triple {26181#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,065 INFO L273 TraceCheckUtils]: 21: Hoare triple {26181#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,065 INFO L273 TraceCheckUtils]: 22: Hoare triple {26181#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,065 INFO L273 TraceCheckUtils]: 23: Hoare triple {26181#true} assume 8464 == #t~mem32;havoc #t~mem32; {26181#true} is VALID [2018-11-23 12:47:53,065 INFO L273 TraceCheckUtils]: 24: Hoare triple {26181#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {26181#true} is VALID [2018-11-23 12:47:53,065 INFO L273 TraceCheckUtils]: 25: Hoare triple {26181#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {26181#true} is VALID [2018-11-23 12:47:53,065 INFO L273 TraceCheckUtils]: 26: Hoare triple {26181#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,065 INFO L273 TraceCheckUtils]: 27: Hoare triple {26181#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,066 INFO L273 TraceCheckUtils]: 28: Hoare triple {26181#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {26181#true} is VALID [2018-11-23 12:47:53,066 INFO L273 TraceCheckUtils]: 29: Hoare triple {26181#true} ~skip~0 := 0; {26181#true} is VALID [2018-11-23 12:47:53,066 INFO L273 TraceCheckUtils]: 30: Hoare triple {26181#true} assume !false; {26181#true} is VALID [2018-11-23 12:47:53,066 INFO L273 TraceCheckUtils]: 31: Hoare triple {26181#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,066 INFO L273 TraceCheckUtils]: 32: Hoare triple {26181#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,066 INFO L273 TraceCheckUtils]: 33: Hoare triple {26181#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,066 INFO L273 TraceCheckUtils]: 34: Hoare triple {26181#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,066 INFO L273 TraceCheckUtils]: 35: Hoare triple {26181#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,067 INFO L273 TraceCheckUtils]: 36: Hoare triple {26181#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,067 INFO L273 TraceCheckUtils]: 37: Hoare triple {26181#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,067 INFO L273 TraceCheckUtils]: 38: Hoare triple {26181#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,067 INFO L273 TraceCheckUtils]: 39: Hoare triple {26181#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,067 INFO L273 TraceCheckUtils]: 40: Hoare triple {26181#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,067 INFO L273 TraceCheckUtils]: 41: Hoare triple {26181#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,067 INFO L273 TraceCheckUtils]: 42: Hoare triple {26181#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,068 INFO L273 TraceCheckUtils]: 43: Hoare triple {26181#true} assume 8496 == #t~mem35;havoc #t~mem35; {26181#true} is VALID [2018-11-23 12:47:53,068 INFO L273 TraceCheckUtils]: 44: Hoare triple {26181#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {26181#true} is VALID [2018-11-23 12:47:53,068 INFO L273 TraceCheckUtils]: 45: Hoare triple {26181#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {26181#true} is VALID [2018-11-23 12:47:53,068 INFO L273 TraceCheckUtils]: 46: Hoare triple {26181#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {26181#true} is VALID [2018-11-23 12:47:53,084 INFO L273 TraceCheckUtils]: 47: Hoare triple {26181#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:53,085 INFO L273 TraceCheckUtils]: 48: Hoare triple {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:53,086 INFO L273 TraceCheckUtils]: 49: Hoare triple {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:53,086 INFO L273 TraceCheckUtils]: 50: Hoare triple {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:53,087 INFO L273 TraceCheckUtils]: 51: Hoare triple {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:53,087 INFO L273 TraceCheckUtils]: 52: Hoare triple {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:53,087 INFO L273 TraceCheckUtils]: 53: Hoare triple {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:53,088 INFO L273 TraceCheckUtils]: 54: Hoare triple {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:53,088 INFO L273 TraceCheckUtils]: 55: Hoare triple {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:53,088 INFO L273 TraceCheckUtils]: 56: Hoare triple {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:53,088 INFO L273 TraceCheckUtils]: 57: Hoare triple {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:53,089 INFO L273 TraceCheckUtils]: 58: Hoare triple {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:53,089 INFO L273 TraceCheckUtils]: 59: Hoare triple {26183#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {26184#(= 8512 |ssl3_accept_#t~mem30|)} is VALID [2018-11-23 12:47:53,090 INFO L273 TraceCheckUtils]: 60: Hoare triple {26184#(= 8512 |ssl3_accept_#t~mem30|)} assume 8481 == #t~mem30;havoc #t~mem30; {26182#false} is VALID [2018-11-23 12:47:53,090 INFO L273 TraceCheckUtils]: 61: Hoare triple {26182#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {26182#false} is VALID [2018-11-23 12:47:53,090 INFO L273 TraceCheckUtils]: 62: Hoare triple {26182#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,090 INFO L273 TraceCheckUtils]: 63: Hoare triple {26182#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,090 INFO L273 TraceCheckUtils]: 64: Hoare triple {26182#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {26182#false} is VALID [2018-11-23 12:47:53,091 INFO L273 TraceCheckUtils]: 65: Hoare triple {26182#false} ~skip~0 := 0; {26182#false} is VALID [2018-11-23 12:47:53,091 INFO L273 TraceCheckUtils]: 66: Hoare triple {26182#false} assume !false; {26182#false} is VALID [2018-11-23 12:47:53,091 INFO L273 TraceCheckUtils]: 67: Hoare triple {26182#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,091 INFO L273 TraceCheckUtils]: 68: Hoare triple {26182#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,091 INFO L273 TraceCheckUtils]: 69: Hoare triple {26182#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,092 INFO L273 TraceCheckUtils]: 70: Hoare triple {26182#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,092 INFO L273 TraceCheckUtils]: 71: Hoare triple {26182#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,092 INFO L273 TraceCheckUtils]: 72: Hoare triple {26182#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,092 INFO L273 TraceCheckUtils]: 73: Hoare triple {26182#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,092 INFO L273 TraceCheckUtils]: 74: Hoare triple {26182#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,092 INFO L273 TraceCheckUtils]: 75: Hoare triple {26182#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,093 INFO L273 TraceCheckUtils]: 76: Hoare triple {26182#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,093 INFO L273 TraceCheckUtils]: 77: Hoare triple {26182#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,093 INFO L273 TraceCheckUtils]: 78: Hoare triple {26182#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,093 INFO L273 TraceCheckUtils]: 79: Hoare triple {26182#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,093 INFO L273 TraceCheckUtils]: 80: Hoare triple {26182#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,093 INFO L273 TraceCheckUtils]: 81: Hoare triple {26182#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,093 INFO L273 TraceCheckUtils]: 82: Hoare triple {26182#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,093 INFO L273 TraceCheckUtils]: 83: Hoare triple {26182#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,093 INFO L273 TraceCheckUtils]: 84: Hoare triple {26182#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,094 INFO L273 TraceCheckUtils]: 85: Hoare triple {26182#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,094 INFO L273 TraceCheckUtils]: 86: Hoare triple {26182#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,094 INFO L273 TraceCheckUtils]: 87: Hoare triple {26182#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,094 INFO L273 TraceCheckUtils]: 88: Hoare triple {26182#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,094 INFO L273 TraceCheckUtils]: 89: Hoare triple {26182#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,094 INFO L273 TraceCheckUtils]: 90: Hoare triple {26182#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,094 INFO L273 TraceCheckUtils]: 91: Hoare triple {26182#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,094 INFO L273 TraceCheckUtils]: 92: Hoare triple {26182#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,094 INFO L273 TraceCheckUtils]: 93: Hoare triple {26182#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,095 INFO L273 TraceCheckUtils]: 94: Hoare triple {26182#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,095 INFO L273 TraceCheckUtils]: 95: Hoare triple {26182#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,095 INFO L273 TraceCheckUtils]: 96: Hoare triple {26182#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,095 INFO L273 TraceCheckUtils]: 97: Hoare triple {26182#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,095 INFO L273 TraceCheckUtils]: 98: Hoare triple {26182#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,095 INFO L273 TraceCheckUtils]: 99: Hoare triple {26182#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {26182#false} is VALID [2018-11-23 12:47:53,095 INFO L273 TraceCheckUtils]: 100: Hoare triple {26182#false} assume 8672 == #t~mem56;havoc #t~mem56; {26182#false} is VALID [2018-11-23 12:47:53,095 INFO L273 TraceCheckUtils]: 101: Hoare triple {26182#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {26182#false} is VALID [2018-11-23 12:47:53,096 INFO L273 TraceCheckUtils]: 102: Hoare triple {26182#false} assume 4 == ~blastFlag~0; {26182#false} is VALID [2018-11-23 12:47:53,096 INFO L273 TraceCheckUtils]: 103: Hoare triple {26182#false} assume !false; {26182#false} is VALID [2018-11-23 12:47:53,102 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 61 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:53,102 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:53,103 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:53,103 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 12:47:53,103 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:53,103 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:53,196 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 94 edges. 94 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:53,197 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:53,197 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:53,197 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:53,198 INFO L87 Difference]: Start difference. First operand 256 states and 385 transitions. Second operand 4 states. [2018-11-23 12:47:54,433 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:54,433 INFO L93 Difference]: Finished difference Result 509 states and 770 transitions. [2018-11-23 12:47:54,433 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:54,433 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 12:47:54,433 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:54,433 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:54,436 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 458 transitions. [2018-11-23 12:47:54,436 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:54,438 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 458 transitions. [2018-11-23 12:47:54,438 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 458 transitions. [2018-11-23 12:47:54,883 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 458 edges. 458 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:54,889 INFO L225 Difference]: With dead ends: 509 [2018-11-23 12:47:54,889 INFO L226 Difference]: Without dead ends: 278 [2018-11-23 12:47:54,890 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:54,890 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 278 states. [2018-11-23 12:47:54,977 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 278 to 256. [2018-11-23 12:47:54,977 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:54,978 INFO L82 GeneralOperation]: Start isEquivalent. First operand 278 states. Second operand 256 states. [2018-11-23 12:47:54,978 INFO L74 IsIncluded]: Start isIncluded. First operand 278 states. Second operand 256 states. [2018-11-23 12:47:54,978 INFO L87 Difference]: Start difference. First operand 278 states. Second operand 256 states. [2018-11-23 12:47:54,984 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:54,984 INFO L93 Difference]: Finished difference Result 278 states and 412 transitions. [2018-11-23 12:47:54,984 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 412 transitions. [2018-11-23 12:47:54,985 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:54,985 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:54,985 INFO L74 IsIncluded]: Start isIncluded. First operand 256 states. Second operand 278 states. [2018-11-23 12:47:54,985 INFO L87 Difference]: Start difference. First operand 256 states. Second operand 278 states. [2018-11-23 12:47:54,991 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:54,991 INFO L93 Difference]: Finished difference Result 278 states and 412 transitions. [2018-11-23 12:47:54,991 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 412 transitions. [2018-11-23 12:47:54,992 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:54,992 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:54,992 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:54,992 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:54,992 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 12:47:54,997 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 384 transitions. [2018-11-23 12:47:54,997 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 384 transitions. Word has length 104 [2018-11-23 12:47:54,997 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:54,998 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 384 transitions. [2018-11-23 12:47:54,998 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:54,998 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 384 transitions. [2018-11-23 12:47:54,998 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 12:47:54,998 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:54,999 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:54,999 INFO L423 AbstractCegarLoop]: === Iteration 25 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:54,999 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:54,999 INFO L82 PathProgramCache]: Analyzing trace with hash 2077845378, now seen corresponding path program 1 times [2018-11-23 12:47:54,999 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:54,999 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:55,000 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:55,001 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:55,001 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:55,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:55,198 INFO L256 TraceCheckUtils]: 0: Hoare triple {27625#true} call ULTIMATE.init(); {27625#true} is VALID [2018-11-23 12:47:55,198 INFO L273 TraceCheckUtils]: 1: Hoare triple {27625#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,198 INFO L273 TraceCheckUtils]: 2: Hoare triple {27625#true} assume true; {27625#true} is VALID [2018-11-23 12:47:55,199 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {27625#true} {27625#true} #604#return; {27625#true} is VALID [2018-11-23 12:47:55,199 INFO L256 TraceCheckUtils]: 4: Hoare triple {27625#true} call #t~ret138 := main(); {27625#true} is VALID [2018-11-23 12:47:55,199 INFO L273 TraceCheckUtils]: 5: Hoare triple {27625#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,199 INFO L256 TraceCheckUtils]: 6: Hoare triple {27625#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {27625#true} is VALID [2018-11-23 12:47:55,199 INFO L273 TraceCheckUtils]: 7: Hoare triple {27625#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,200 INFO L273 TraceCheckUtils]: 8: Hoare triple {27625#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {27625#true} is VALID [2018-11-23 12:47:55,200 INFO L273 TraceCheckUtils]: 9: Hoare triple {27625#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {27625#true} is VALID [2018-11-23 12:47:55,200 INFO L273 TraceCheckUtils]: 10: Hoare triple {27625#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {27625#true} is VALID [2018-11-23 12:47:55,200 INFO L273 TraceCheckUtils]: 11: Hoare triple {27625#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,200 INFO L273 TraceCheckUtils]: 12: Hoare triple {27625#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {27625#true} is VALID [2018-11-23 12:47:55,200 INFO L273 TraceCheckUtils]: 13: Hoare triple {27625#true} assume !false; {27625#true} is VALID [2018-11-23 12:47:55,201 INFO L273 TraceCheckUtils]: 14: Hoare triple {27625#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,201 INFO L273 TraceCheckUtils]: 15: Hoare triple {27625#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,201 INFO L273 TraceCheckUtils]: 16: Hoare triple {27625#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,201 INFO L273 TraceCheckUtils]: 17: Hoare triple {27625#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,201 INFO L273 TraceCheckUtils]: 18: Hoare triple {27625#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,201 INFO L273 TraceCheckUtils]: 19: Hoare triple {27625#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,201 INFO L273 TraceCheckUtils]: 20: Hoare triple {27625#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,201 INFO L273 TraceCheckUtils]: 21: Hoare triple {27625#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,201 INFO L273 TraceCheckUtils]: 22: Hoare triple {27625#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,202 INFO L273 TraceCheckUtils]: 23: Hoare triple {27625#true} assume 8464 == #t~mem32;havoc #t~mem32; {27625#true} is VALID [2018-11-23 12:47:55,202 INFO L273 TraceCheckUtils]: 24: Hoare triple {27625#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {27625#true} is VALID [2018-11-23 12:47:55,202 INFO L273 TraceCheckUtils]: 25: Hoare triple {27625#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {27625#true} is VALID [2018-11-23 12:47:55,202 INFO L273 TraceCheckUtils]: 26: Hoare triple {27625#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,202 INFO L273 TraceCheckUtils]: 27: Hoare triple {27625#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,202 INFO L273 TraceCheckUtils]: 28: Hoare triple {27625#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {27625#true} is VALID [2018-11-23 12:47:55,202 INFO L273 TraceCheckUtils]: 29: Hoare triple {27625#true} ~skip~0 := 0; {27625#true} is VALID [2018-11-23 12:47:55,202 INFO L273 TraceCheckUtils]: 30: Hoare triple {27625#true} assume !false; {27625#true} is VALID [2018-11-23 12:47:55,202 INFO L273 TraceCheckUtils]: 31: Hoare triple {27625#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,203 INFO L273 TraceCheckUtils]: 32: Hoare triple {27625#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,203 INFO L273 TraceCheckUtils]: 33: Hoare triple {27625#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,203 INFO L273 TraceCheckUtils]: 34: Hoare triple {27625#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,203 INFO L273 TraceCheckUtils]: 35: Hoare triple {27625#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,203 INFO L273 TraceCheckUtils]: 36: Hoare triple {27625#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,203 INFO L273 TraceCheckUtils]: 37: Hoare triple {27625#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,203 INFO L273 TraceCheckUtils]: 38: Hoare triple {27625#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,203 INFO L273 TraceCheckUtils]: 39: Hoare triple {27625#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,203 INFO L273 TraceCheckUtils]: 40: Hoare triple {27625#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,204 INFO L273 TraceCheckUtils]: 41: Hoare triple {27625#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,204 INFO L273 TraceCheckUtils]: 42: Hoare triple {27625#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,204 INFO L273 TraceCheckUtils]: 43: Hoare triple {27625#true} assume 8496 == #t~mem35;havoc #t~mem35; {27625#true} is VALID [2018-11-23 12:47:55,204 INFO L273 TraceCheckUtils]: 44: Hoare triple {27625#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {27625#true} is VALID [2018-11-23 12:47:55,204 INFO L273 TraceCheckUtils]: 45: Hoare triple {27625#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {27625#true} is VALID [2018-11-23 12:47:55,204 INFO L273 TraceCheckUtils]: 46: Hoare triple {27625#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {27625#true} is VALID [2018-11-23 12:47:55,205 INFO L273 TraceCheckUtils]: 47: Hoare triple {27625#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,206 INFO L273 TraceCheckUtils]: 48: Hoare triple {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,206 INFO L273 TraceCheckUtils]: 49: Hoare triple {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,206 INFO L273 TraceCheckUtils]: 50: Hoare triple {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,207 INFO L273 TraceCheckUtils]: 51: Hoare triple {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,207 INFO L273 TraceCheckUtils]: 52: Hoare triple {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,208 INFO L273 TraceCheckUtils]: 53: Hoare triple {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,208 INFO L273 TraceCheckUtils]: 54: Hoare triple {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,209 INFO L273 TraceCheckUtils]: 55: Hoare triple {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,209 INFO L273 TraceCheckUtils]: 56: Hoare triple {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,210 INFO L273 TraceCheckUtils]: 57: Hoare triple {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,210 INFO L273 TraceCheckUtils]: 58: Hoare triple {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,211 INFO L273 TraceCheckUtils]: 59: Hoare triple {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,211 INFO L273 TraceCheckUtils]: 60: Hoare triple {27627#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {27628#(= 8512 |ssl3_accept_#t~mem31|)} is VALID [2018-11-23 12:47:55,212 INFO L273 TraceCheckUtils]: 61: Hoare triple {27628#(= 8512 |ssl3_accept_#t~mem31|)} assume 8482 == #t~mem31;havoc #t~mem31; {27626#false} is VALID [2018-11-23 12:47:55,212 INFO L273 TraceCheckUtils]: 62: Hoare triple {27626#false} call write~int(3, ~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,212 INFO L273 TraceCheckUtils]: 63: Hoare triple {27626#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,213 INFO L273 TraceCheckUtils]: 64: Hoare triple {27626#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {27626#false} is VALID [2018-11-23 12:47:55,213 INFO L273 TraceCheckUtils]: 65: Hoare triple {27626#false} ~skip~0 := 0; {27626#false} is VALID [2018-11-23 12:47:55,213 INFO L273 TraceCheckUtils]: 66: Hoare triple {27626#false} assume !false; {27626#false} is VALID [2018-11-23 12:47:55,213 INFO L273 TraceCheckUtils]: 67: Hoare triple {27626#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,213 INFO L273 TraceCheckUtils]: 68: Hoare triple {27626#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,214 INFO L273 TraceCheckUtils]: 69: Hoare triple {27626#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,214 INFO L273 TraceCheckUtils]: 70: Hoare triple {27626#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,214 INFO L273 TraceCheckUtils]: 71: Hoare triple {27626#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,214 INFO L273 TraceCheckUtils]: 72: Hoare triple {27626#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,214 INFO L273 TraceCheckUtils]: 73: Hoare triple {27626#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,214 INFO L273 TraceCheckUtils]: 74: Hoare triple {27626#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,215 INFO L273 TraceCheckUtils]: 75: Hoare triple {27626#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,215 INFO L273 TraceCheckUtils]: 76: Hoare triple {27626#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,215 INFO L273 TraceCheckUtils]: 77: Hoare triple {27626#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,215 INFO L273 TraceCheckUtils]: 78: Hoare triple {27626#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,215 INFO L273 TraceCheckUtils]: 79: Hoare triple {27626#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,216 INFO L273 TraceCheckUtils]: 80: Hoare triple {27626#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,216 INFO L273 TraceCheckUtils]: 81: Hoare triple {27626#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,216 INFO L273 TraceCheckUtils]: 82: Hoare triple {27626#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,216 INFO L273 TraceCheckUtils]: 83: Hoare triple {27626#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,216 INFO L273 TraceCheckUtils]: 84: Hoare triple {27626#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,216 INFO L273 TraceCheckUtils]: 85: Hoare triple {27626#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,217 INFO L273 TraceCheckUtils]: 86: Hoare triple {27626#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,217 INFO L273 TraceCheckUtils]: 87: Hoare triple {27626#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,217 INFO L273 TraceCheckUtils]: 88: Hoare triple {27626#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,217 INFO L273 TraceCheckUtils]: 89: Hoare triple {27626#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,217 INFO L273 TraceCheckUtils]: 90: Hoare triple {27626#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,218 INFO L273 TraceCheckUtils]: 91: Hoare triple {27626#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,218 INFO L273 TraceCheckUtils]: 92: Hoare triple {27626#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,218 INFO L273 TraceCheckUtils]: 93: Hoare triple {27626#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,218 INFO L273 TraceCheckUtils]: 94: Hoare triple {27626#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,218 INFO L273 TraceCheckUtils]: 95: Hoare triple {27626#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,218 INFO L273 TraceCheckUtils]: 96: Hoare triple {27626#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,218 INFO L273 TraceCheckUtils]: 97: Hoare triple {27626#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,218 INFO L273 TraceCheckUtils]: 98: Hoare triple {27626#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,218 INFO L273 TraceCheckUtils]: 99: Hoare triple {27626#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {27626#false} is VALID [2018-11-23 12:47:55,219 INFO L273 TraceCheckUtils]: 100: Hoare triple {27626#false} assume 8672 == #t~mem56;havoc #t~mem56; {27626#false} is VALID [2018-11-23 12:47:55,219 INFO L273 TraceCheckUtils]: 101: Hoare triple {27626#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {27626#false} is VALID [2018-11-23 12:47:55,219 INFO L273 TraceCheckUtils]: 102: Hoare triple {27626#false} assume 4 == ~blastFlag~0; {27626#false} is VALID [2018-11-23 12:47:55,219 INFO L273 TraceCheckUtils]: 103: Hoare triple {27626#false} assume !false; {27626#false} is VALID [2018-11-23 12:47:55,226 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:55,226 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:55,226 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:55,226 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 12:47:55,227 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:55,227 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:55,313 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 94 edges. 94 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:55,313 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:55,313 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:55,313 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:55,314 INFO L87 Difference]: Start difference. First operand 256 states and 384 transitions. Second operand 4 states. [2018-11-23 12:47:56,518 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:56,519 INFO L93 Difference]: Finished difference Result 508 states and 767 transitions. [2018-11-23 12:47:56,519 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:56,519 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 12:47:56,519 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:56,519 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:56,521 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 456 transitions. [2018-11-23 12:47:56,521 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:56,523 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 456 transitions. [2018-11-23 12:47:56,523 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 456 transitions. [2018-11-23 12:47:57,083 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 456 edges. 456 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:57,089 INFO L225 Difference]: With dead ends: 508 [2018-11-23 12:47:57,089 INFO L226 Difference]: Without dead ends: 277 [2018-11-23 12:47:57,090 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:57,091 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 277 states. [2018-11-23 12:47:57,437 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 277 to 256. [2018-11-23 12:47:57,438 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:57,438 INFO L82 GeneralOperation]: Start isEquivalent. First operand 277 states. Second operand 256 states. [2018-11-23 12:47:57,438 INFO L74 IsIncluded]: Start isIncluded. First operand 277 states. Second operand 256 states. [2018-11-23 12:47:57,438 INFO L87 Difference]: Start difference. First operand 277 states. Second operand 256 states. [2018-11-23 12:47:57,443 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:57,444 INFO L93 Difference]: Finished difference Result 277 states and 410 transitions. [2018-11-23 12:47:57,444 INFO L276 IsEmpty]: Start isEmpty. Operand 277 states and 410 transitions. [2018-11-23 12:47:57,444 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:57,444 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:57,445 INFO L74 IsIncluded]: Start isIncluded. First operand 256 states. Second operand 277 states. [2018-11-23 12:47:57,445 INFO L87 Difference]: Start difference. First operand 256 states. Second operand 277 states. [2018-11-23 12:47:57,450 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:57,450 INFO L93 Difference]: Finished difference Result 277 states and 410 transitions. [2018-11-23 12:47:57,451 INFO L276 IsEmpty]: Start isEmpty. Operand 277 states and 410 transitions. [2018-11-23 12:47:57,451 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:57,451 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:57,451 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:57,451 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:57,452 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 12:47:57,456 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 383 transitions. [2018-11-23 12:47:57,456 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 383 transitions. Word has length 104 [2018-11-23 12:47:57,456 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:57,456 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 383 transitions. [2018-11-23 12:47:57,456 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:57,456 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 383 transitions. [2018-11-23 12:47:57,457 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 106 [2018-11-23 12:47:57,457 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:57,457 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:57,457 INFO L423 AbstractCegarLoop]: === Iteration 26 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:57,457 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:57,458 INFO L82 PathProgramCache]: Analyzing trace with hash 1747107629, now seen corresponding path program 1 times [2018-11-23 12:47:57,458 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:57,458 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:57,459 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:57,459 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:57,459 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:57,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:57,634 INFO L256 TraceCheckUtils]: 0: Hoare triple {29065#true} call ULTIMATE.init(); {29065#true} is VALID [2018-11-23 12:47:57,635 INFO L273 TraceCheckUtils]: 1: Hoare triple {29065#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,635 INFO L273 TraceCheckUtils]: 2: Hoare triple {29065#true} assume true; {29065#true} is VALID [2018-11-23 12:47:57,635 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {29065#true} {29065#true} #604#return; {29065#true} is VALID [2018-11-23 12:47:57,635 INFO L256 TraceCheckUtils]: 4: Hoare triple {29065#true} call #t~ret138 := main(); {29065#true} is VALID [2018-11-23 12:47:57,635 INFO L273 TraceCheckUtils]: 5: Hoare triple {29065#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,636 INFO L256 TraceCheckUtils]: 6: Hoare triple {29065#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {29065#true} is VALID [2018-11-23 12:47:57,636 INFO L273 TraceCheckUtils]: 7: Hoare triple {29065#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,636 INFO L273 TraceCheckUtils]: 8: Hoare triple {29065#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {29065#true} is VALID [2018-11-23 12:47:57,636 INFO L273 TraceCheckUtils]: 9: Hoare triple {29065#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {29065#true} is VALID [2018-11-23 12:47:57,636 INFO L273 TraceCheckUtils]: 10: Hoare triple {29065#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {29065#true} is VALID [2018-11-23 12:47:57,636 INFO L273 TraceCheckUtils]: 11: Hoare triple {29065#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,636 INFO L273 TraceCheckUtils]: 12: Hoare triple {29065#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {29065#true} is VALID [2018-11-23 12:47:57,636 INFO L273 TraceCheckUtils]: 13: Hoare triple {29065#true} assume !false; {29065#true} is VALID [2018-11-23 12:47:57,636 INFO L273 TraceCheckUtils]: 14: Hoare triple {29065#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,637 INFO L273 TraceCheckUtils]: 15: Hoare triple {29065#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,637 INFO L273 TraceCheckUtils]: 16: Hoare triple {29065#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,637 INFO L273 TraceCheckUtils]: 17: Hoare triple {29065#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,637 INFO L273 TraceCheckUtils]: 18: Hoare triple {29065#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,637 INFO L273 TraceCheckUtils]: 19: Hoare triple {29065#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,637 INFO L273 TraceCheckUtils]: 20: Hoare triple {29065#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,637 INFO L273 TraceCheckUtils]: 21: Hoare triple {29065#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,637 INFO L273 TraceCheckUtils]: 22: Hoare triple {29065#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,637 INFO L273 TraceCheckUtils]: 23: Hoare triple {29065#true} assume 8464 == #t~mem32;havoc #t~mem32; {29065#true} is VALID [2018-11-23 12:47:57,638 INFO L273 TraceCheckUtils]: 24: Hoare triple {29065#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {29065#true} is VALID [2018-11-23 12:47:57,638 INFO L273 TraceCheckUtils]: 25: Hoare triple {29065#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {29065#true} is VALID [2018-11-23 12:47:57,638 INFO L273 TraceCheckUtils]: 26: Hoare triple {29065#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,638 INFO L273 TraceCheckUtils]: 27: Hoare triple {29065#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,638 INFO L273 TraceCheckUtils]: 28: Hoare triple {29065#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {29065#true} is VALID [2018-11-23 12:47:57,638 INFO L273 TraceCheckUtils]: 29: Hoare triple {29065#true} ~skip~0 := 0; {29065#true} is VALID [2018-11-23 12:47:57,638 INFO L273 TraceCheckUtils]: 30: Hoare triple {29065#true} assume !false; {29065#true} is VALID [2018-11-23 12:47:57,638 INFO L273 TraceCheckUtils]: 31: Hoare triple {29065#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,638 INFO L273 TraceCheckUtils]: 32: Hoare triple {29065#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,639 INFO L273 TraceCheckUtils]: 33: Hoare triple {29065#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,639 INFO L273 TraceCheckUtils]: 34: Hoare triple {29065#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,639 INFO L273 TraceCheckUtils]: 35: Hoare triple {29065#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,639 INFO L273 TraceCheckUtils]: 36: Hoare triple {29065#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,639 INFO L273 TraceCheckUtils]: 37: Hoare triple {29065#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,639 INFO L273 TraceCheckUtils]: 38: Hoare triple {29065#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,639 INFO L273 TraceCheckUtils]: 39: Hoare triple {29065#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,639 INFO L273 TraceCheckUtils]: 40: Hoare triple {29065#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,640 INFO L273 TraceCheckUtils]: 41: Hoare triple {29065#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,640 INFO L273 TraceCheckUtils]: 42: Hoare triple {29065#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,640 INFO L273 TraceCheckUtils]: 43: Hoare triple {29065#true} assume 8496 == #t~mem35;havoc #t~mem35; {29065#true} is VALID [2018-11-23 12:47:57,640 INFO L273 TraceCheckUtils]: 44: Hoare triple {29065#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {29065#true} is VALID [2018-11-23 12:47:57,640 INFO L273 TraceCheckUtils]: 45: Hoare triple {29065#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {29065#true} is VALID [2018-11-23 12:47:57,640 INFO L273 TraceCheckUtils]: 46: Hoare triple {29065#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {29065#true} is VALID [2018-11-23 12:47:57,641 INFO L273 TraceCheckUtils]: 47: Hoare triple {29065#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {29067#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:47:57,642 INFO L273 TraceCheckUtils]: 48: Hoare triple {29067#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {29067#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:47:57,642 INFO L273 TraceCheckUtils]: 49: Hoare triple {29067#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {29067#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:47:57,642 INFO L273 TraceCheckUtils]: 50: Hoare triple {29067#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {29067#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:47:57,643 INFO L273 TraceCheckUtils]: 51: Hoare triple {29067#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} ~skip~0 := 0; {29067#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:47:57,643 INFO L273 TraceCheckUtils]: 52: Hoare triple {29067#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} assume !false; {29067#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:47:57,643 INFO L273 TraceCheckUtils]: 53: Hoare triple {29067#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {29067#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:47:57,644 INFO L273 TraceCheckUtils]: 54: Hoare triple {29067#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {29068#(= |ssl3_accept_#t~mem25| 8656)} is VALID [2018-11-23 12:47:57,644 INFO L273 TraceCheckUtils]: 55: Hoare triple {29068#(= |ssl3_accept_#t~mem25| 8656)} assume 16384 == #t~mem25;havoc #t~mem25; {29066#false} is VALID [2018-11-23 12:47:57,644 INFO L273 TraceCheckUtils]: 56: Hoare triple {29066#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,645 INFO L273 TraceCheckUtils]: 57: Hoare triple {29066#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {29066#false} is VALID [2018-11-23 12:47:57,645 INFO L273 TraceCheckUtils]: 58: Hoare triple {29066#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,645 INFO L273 TraceCheckUtils]: 59: Hoare triple {29066#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,645 INFO L273 TraceCheckUtils]: 60: Hoare triple {29066#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {29066#false} is VALID [2018-11-23 12:47:57,645 INFO L273 TraceCheckUtils]: 61: Hoare triple {29066#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,645 INFO L273 TraceCheckUtils]: 62: Hoare triple {29066#false} assume 12292 != #t~mem62;havoc #t~mem62; {29066#false} is VALID [2018-11-23 12:47:57,646 INFO L273 TraceCheckUtils]: 63: Hoare triple {29066#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {29066#false} is VALID [2018-11-23 12:47:57,646 INFO L273 TraceCheckUtils]: 64: Hoare triple {29066#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,646 INFO L273 TraceCheckUtils]: 65: Hoare triple {29066#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {29066#false} is VALID [2018-11-23 12:47:57,646 INFO L273 TraceCheckUtils]: 66: Hoare triple {29066#false} ~skip~0 := 0; {29066#false} is VALID [2018-11-23 12:47:57,646 INFO L273 TraceCheckUtils]: 67: Hoare triple {29066#false} assume !false; {29066#false} is VALID [2018-11-23 12:47:57,647 INFO L273 TraceCheckUtils]: 68: Hoare triple {29066#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,647 INFO L273 TraceCheckUtils]: 69: Hoare triple {29066#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,647 INFO L273 TraceCheckUtils]: 70: Hoare triple {29066#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,647 INFO L273 TraceCheckUtils]: 71: Hoare triple {29066#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,647 INFO L273 TraceCheckUtils]: 72: Hoare triple {29066#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,647 INFO L273 TraceCheckUtils]: 73: Hoare triple {29066#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,647 INFO L273 TraceCheckUtils]: 74: Hoare triple {29066#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,648 INFO L273 TraceCheckUtils]: 75: Hoare triple {29066#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,648 INFO L273 TraceCheckUtils]: 76: Hoare triple {29066#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,648 INFO L273 TraceCheckUtils]: 77: Hoare triple {29066#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,648 INFO L273 TraceCheckUtils]: 78: Hoare triple {29066#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,648 INFO L273 TraceCheckUtils]: 79: Hoare triple {29066#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,648 INFO L273 TraceCheckUtils]: 80: Hoare triple {29066#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,648 INFO L273 TraceCheckUtils]: 81: Hoare triple {29066#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,648 INFO L273 TraceCheckUtils]: 82: Hoare triple {29066#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,648 INFO L273 TraceCheckUtils]: 83: Hoare triple {29066#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,649 INFO L273 TraceCheckUtils]: 84: Hoare triple {29066#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,649 INFO L273 TraceCheckUtils]: 85: Hoare triple {29066#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,649 INFO L273 TraceCheckUtils]: 86: Hoare triple {29066#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,649 INFO L273 TraceCheckUtils]: 87: Hoare triple {29066#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,649 INFO L273 TraceCheckUtils]: 88: Hoare triple {29066#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,649 INFO L273 TraceCheckUtils]: 89: Hoare triple {29066#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,649 INFO L273 TraceCheckUtils]: 90: Hoare triple {29066#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,649 INFO L273 TraceCheckUtils]: 91: Hoare triple {29066#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,649 INFO L273 TraceCheckUtils]: 92: Hoare triple {29066#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,650 INFO L273 TraceCheckUtils]: 93: Hoare triple {29066#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,650 INFO L273 TraceCheckUtils]: 94: Hoare triple {29066#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,650 INFO L273 TraceCheckUtils]: 95: Hoare triple {29066#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,650 INFO L273 TraceCheckUtils]: 96: Hoare triple {29066#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,650 INFO L273 TraceCheckUtils]: 97: Hoare triple {29066#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,650 INFO L273 TraceCheckUtils]: 98: Hoare triple {29066#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,650 INFO L273 TraceCheckUtils]: 99: Hoare triple {29066#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,650 INFO L273 TraceCheckUtils]: 100: Hoare triple {29066#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {29066#false} is VALID [2018-11-23 12:47:57,650 INFO L273 TraceCheckUtils]: 101: Hoare triple {29066#false} assume 8672 == #t~mem56;havoc #t~mem56; {29066#false} is VALID [2018-11-23 12:47:57,651 INFO L273 TraceCheckUtils]: 102: Hoare triple {29066#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {29066#false} is VALID [2018-11-23 12:47:57,651 INFO L273 TraceCheckUtils]: 103: Hoare triple {29066#false} assume 4 == ~blastFlag~0; {29066#false} is VALID [2018-11-23 12:47:57,651 INFO L273 TraceCheckUtils]: 104: Hoare triple {29066#false} assume !false; {29066#false} is VALID [2018-11-23 12:47:57,656 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:57,656 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:57,657 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:57,657 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 105 [2018-11-23 12:47:57,657 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:57,657 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:57,747 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 95 edges. 95 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:57,748 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:57,748 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:57,748 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:57,749 INFO L87 Difference]: Start difference. First operand 256 states and 383 transitions. Second operand 4 states. [2018-11-23 12:47:59,204 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:59,204 INFO L93 Difference]: Finished difference Result 535 states and 801 transitions. [2018-11-23 12:47:59,204 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:59,204 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 105 [2018-11-23 12:47:59,205 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:59,205 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:59,207 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 526 transitions. [2018-11-23 12:47:59,207 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:59,210 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 526 transitions. [2018-11-23 12:47:59,210 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 526 transitions. [2018-11-23 12:47:59,748 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 526 edges. 526 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:59,755 INFO L225 Difference]: With dead ends: 535 [2018-11-23 12:47:59,755 INFO L226 Difference]: Without dead ends: 304 [2018-11-23 12:47:59,756 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:59,756 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 304 states. [2018-11-23 12:47:59,877 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 304 to 256. [2018-11-23 12:47:59,877 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:59,877 INFO L82 GeneralOperation]: Start isEquivalent. First operand 304 states. Second operand 256 states. [2018-11-23 12:47:59,877 INFO L74 IsIncluded]: Start isIncluded. First operand 304 states. Second operand 256 states. [2018-11-23 12:47:59,878 INFO L87 Difference]: Start difference. First operand 304 states. Second operand 256 states. [2018-11-23 12:47:59,884 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:59,884 INFO L93 Difference]: Finished difference Result 304 states and 445 transitions. [2018-11-23 12:47:59,885 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 445 transitions. [2018-11-23 12:47:59,885 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:59,885 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:59,885 INFO L74 IsIncluded]: Start isIncluded. First operand 256 states. Second operand 304 states. [2018-11-23 12:47:59,885 INFO L87 Difference]: Start difference. First operand 256 states. Second operand 304 states. [2018-11-23 12:47:59,890 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:59,891 INFO L93 Difference]: Finished difference Result 304 states and 445 transitions. [2018-11-23 12:47:59,891 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 445 transitions. [2018-11-23 12:47:59,891 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:59,891 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:59,891 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:59,891 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:59,891 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 12:47:59,895 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 382 transitions. [2018-11-23 12:47:59,896 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 382 transitions. Word has length 105 [2018-11-23 12:47:59,896 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:59,896 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 382 transitions. [2018-11-23 12:47:59,896 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:59,896 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 382 transitions. [2018-11-23 12:47:59,896 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 106 [2018-11-23 12:47:59,897 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:59,897 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:59,897 INFO L423 AbstractCegarLoop]: === Iteration 27 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:59,897 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:59,897 INFO L82 PathProgramCache]: Analyzing trace with hash -2114130581, now seen corresponding path program 1 times [2018-11-23 12:47:59,897 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:59,897 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:59,898 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:59,898 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:59,898 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:59,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:00,023 INFO L256 TraceCheckUtils]: 0: Hoare triple {30597#true} call ULTIMATE.init(); {30597#true} is VALID [2018-11-23 12:48:00,024 INFO L273 TraceCheckUtils]: 1: Hoare triple {30597#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,024 INFO L273 TraceCheckUtils]: 2: Hoare triple {30597#true} assume true; {30597#true} is VALID [2018-11-23 12:48:00,024 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {30597#true} {30597#true} #604#return; {30597#true} is VALID [2018-11-23 12:48:00,024 INFO L256 TraceCheckUtils]: 4: Hoare triple {30597#true} call #t~ret138 := main(); {30597#true} is VALID [2018-11-23 12:48:00,024 INFO L273 TraceCheckUtils]: 5: Hoare triple {30597#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,025 INFO L256 TraceCheckUtils]: 6: Hoare triple {30597#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {30597#true} is VALID [2018-11-23 12:48:00,025 INFO L273 TraceCheckUtils]: 7: Hoare triple {30597#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,025 INFO L273 TraceCheckUtils]: 8: Hoare triple {30597#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {30597#true} is VALID [2018-11-23 12:48:00,025 INFO L273 TraceCheckUtils]: 9: Hoare triple {30597#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {30597#true} is VALID [2018-11-23 12:48:00,025 INFO L273 TraceCheckUtils]: 10: Hoare triple {30597#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {30597#true} is VALID [2018-11-23 12:48:00,026 INFO L273 TraceCheckUtils]: 11: Hoare triple {30597#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,026 INFO L273 TraceCheckUtils]: 12: Hoare triple {30597#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {30597#true} is VALID [2018-11-23 12:48:00,026 INFO L273 TraceCheckUtils]: 13: Hoare triple {30597#true} assume !false; {30597#true} is VALID [2018-11-23 12:48:00,026 INFO L273 TraceCheckUtils]: 14: Hoare triple {30597#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,026 INFO L273 TraceCheckUtils]: 15: Hoare triple {30597#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,026 INFO L273 TraceCheckUtils]: 16: Hoare triple {30597#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,026 INFO L273 TraceCheckUtils]: 17: Hoare triple {30597#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,026 INFO L273 TraceCheckUtils]: 18: Hoare triple {30597#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,026 INFO L273 TraceCheckUtils]: 19: Hoare triple {30597#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,027 INFO L273 TraceCheckUtils]: 20: Hoare triple {30597#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,027 INFO L273 TraceCheckUtils]: 21: Hoare triple {30597#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,027 INFO L273 TraceCheckUtils]: 22: Hoare triple {30597#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,027 INFO L273 TraceCheckUtils]: 23: Hoare triple {30597#true} assume 8464 == #t~mem32;havoc #t~mem32; {30597#true} is VALID [2018-11-23 12:48:00,027 INFO L273 TraceCheckUtils]: 24: Hoare triple {30597#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {30597#true} is VALID [2018-11-23 12:48:00,027 INFO L273 TraceCheckUtils]: 25: Hoare triple {30597#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {30597#true} is VALID [2018-11-23 12:48:00,027 INFO L273 TraceCheckUtils]: 26: Hoare triple {30597#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,027 INFO L273 TraceCheckUtils]: 27: Hoare triple {30597#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,027 INFO L273 TraceCheckUtils]: 28: Hoare triple {30597#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {30597#true} is VALID [2018-11-23 12:48:00,028 INFO L273 TraceCheckUtils]: 29: Hoare triple {30597#true} ~skip~0 := 0; {30597#true} is VALID [2018-11-23 12:48:00,028 INFO L273 TraceCheckUtils]: 30: Hoare triple {30597#true} assume !false; {30597#true} is VALID [2018-11-23 12:48:00,028 INFO L273 TraceCheckUtils]: 31: Hoare triple {30597#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,028 INFO L273 TraceCheckUtils]: 32: Hoare triple {30597#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,028 INFO L273 TraceCheckUtils]: 33: Hoare triple {30597#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,028 INFO L273 TraceCheckUtils]: 34: Hoare triple {30597#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,028 INFO L273 TraceCheckUtils]: 35: Hoare triple {30597#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,028 INFO L273 TraceCheckUtils]: 36: Hoare triple {30597#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,028 INFO L273 TraceCheckUtils]: 37: Hoare triple {30597#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,029 INFO L273 TraceCheckUtils]: 38: Hoare triple {30597#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,029 INFO L273 TraceCheckUtils]: 39: Hoare triple {30597#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,029 INFO L273 TraceCheckUtils]: 40: Hoare triple {30597#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,029 INFO L273 TraceCheckUtils]: 41: Hoare triple {30597#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,029 INFO L273 TraceCheckUtils]: 42: Hoare triple {30597#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,029 INFO L273 TraceCheckUtils]: 43: Hoare triple {30597#true} assume 8496 == #t~mem35;havoc #t~mem35; {30597#true} is VALID [2018-11-23 12:48:00,029 INFO L273 TraceCheckUtils]: 44: Hoare triple {30597#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {30597#true} is VALID [2018-11-23 12:48:00,029 INFO L273 TraceCheckUtils]: 45: Hoare triple {30597#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {30597#true} is VALID [2018-11-23 12:48:00,029 INFO L273 TraceCheckUtils]: 46: Hoare triple {30597#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {30597#true} is VALID [2018-11-23 12:48:00,030 INFO L273 TraceCheckUtils]: 47: Hoare triple {30597#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {30599#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:48:00,031 INFO L273 TraceCheckUtils]: 48: Hoare triple {30599#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {30599#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:48:00,031 INFO L273 TraceCheckUtils]: 49: Hoare triple {30599#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {30599#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:48:00,033 INFO L273 TraceCheckUtils]: 50: Hoare triple {30599#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {30599#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:48:00,033 INFO L273 TraceCheckUtils]: 51: Hoare triple {30599#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} ~skip~0 := 0; {30599#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:48:00,033 INFO L273 TraceCheckUtils]: 52: Hoare triple {30599#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} assume !false; {30599#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:48:00,034 INFO L273 TraceCheckUtils]: 53: Hoare triple {30599#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {30599#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:48:00,034 INFO L273 TraceCheckUtils]: 54: Hoare triple {30599#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {30600#(= |ssl3_accept_#t~mem25| 8512)} is VALID [2018-11-23 12:48:00,035 INFO L273 TraceCheckUtils]: 55: Hoare triple {30600#(= |ssl3_accept_#t~mem25| 8512)} assume 16384 == #t~mem25;havoc #t~mem25; {30598#false} is VALID [2018-11-23 12:48:00,035 INFO L273 TraceCheckUtils]: 56: Hoare triple {30598#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,035 INFO L273 TraceCheckUtils]: 57: Hoare triple {30598#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {30598#false} is VALID [2018-11-23 12:48:00,036 INFO L273 TraceCheckUtils]: 58: Hoare triple {30598#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,036 INFO L273 TraceCheckUtils]: 59: Hoare triple {30598#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,036 INFO L273 TraceCheckUtils]: 60: Hoare triple {30598#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {30598#false} is VALID [2018-11-23 12:48:00,036 INFO L273 TraceCheckUtils]: 61: Hoare triple {30598#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,036 INFO L273 TraceCheckUtils]: 62: Hoare triple {30598#false} assume 12292 != #t~mem62;havoc #t~mem62; {30598#false} is VALID [2018-11-23 12:48:00,036 INFO L273 TraceCheckUtils]: 63: Hoare triple {30598#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {30598#false} is VALID [2018-11-23 12:48:00,037 INFO L273 TraceCheckUtils]: 64: Hoare triple {30598#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,037 INFO L273 TraceCheckUtils]: 65: Hoare triple {30598#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {30598#false} is VALID [2018-11-23 12:48:00,037 INFO L273 TraceCheckUtils]: 66: Hoare triple {30598#false} ~skip~0 := 0; {30598#false} is VALID [2018-11-23 12:48:00,037 INFO L273 TraceCheckUtils]: 67: Hoare triple {30598#false} assume !false; {30598#false} is VALID [2018-11-23 12:48:00,037 INFO L273 TraceCheckUtils]: 68: Hoare triple {30598#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,038 INFO L273 TraceCheckUtils]: 69: Hoare triple {30598#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,038 INFO L273 TraceCheckUtils]: 70: Hoare triple {30598#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,038 INFO L273 TraceCheckUtils]: 71: Hoare triple {30598#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,038 INFO L273 TraceCheckUtils]: 72: Hoare triple {30598#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,038 INFO L273 TraceCheckUtils]: 73: Hoare triple {30598#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,038 INFO L273 TraceCheckUtils]: 74: Hoare triple {30598#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,039 INFO L273 TraceCheckUtils]: 75: Hoare triple {30598#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,039 INFO L273 TraceCheckUtils]: 76: Hoare triple {30598#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,039 INFO L273 TraceCheckUtils]: 77: Hoare triple {30598#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,039 INFO L273 TraceCheckUtils]: 78: Hoare triple {30598#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,039 INFO L273 TraceCheckUtils]: 79: Hoare triple {30598#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,039 INFO L273 TraceCheckUtils]: 80: Hoare triple {30598#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,039 INFO L273 TraceCheckUtils]: 81: Hoare triple {30598#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,039 INFO L273 TraceCheckUtils]: 82: Hoare triple {30598#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,040 INFO L273 TraceCheckUtils]: 83: Hoare triple {30598#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,040 INFO L273 TraceCheckUtils]: 84: Hoare triple {30598#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,040 INFO L273 TraceCheckUtils]: 85: Hoare triple {30598#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,040 INFO L273 TraceCheckUtils]: 86: Hoare triple {30598#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,040 INFO L273 TraceCheckUtils]: 87: Hoare triple {30598#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,040 INFO L273 TraceCheckUtils]: 88: Hoare triple {30598#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,040 INFO L273 TraceCheckUtils]: 89: Hoare triple {30598#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,040 INFO L273 TraceCheckUtils]: 90: Hoare triple {30598#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,040 INFO L273 TraceCheckUtils]: 91: Hoare triple {30598#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,041 INFO L273 TraceCheckUtils]: 92: Hoare triple {30598#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,041 INFO L273 TraceCheckUtils]: 93: Hoare triple {30598#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,041 INFO L273 TraceCheckUtils]: 94: Hoare triple {30598#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,041 INFO L273 TraceCheckUtils]: 95: Hoare triple {30598#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,041 INFO L273 TraceCheckUtils]: 96: Hoare triple {30598#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,041 INFO L273 TraceCheckUtils]: 97: Hoare triple {30598#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,041 INFO L273 TraceCheckUtils]: 98: Hoare triple {30598#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,041 INFO L273 TraceCheckUtils]: 99: Hoare triple {30598#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,041 INFO L273 TraceCheckUtils]: 100: Hoare triple {30598#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {30598#false} is VALID [2018-11-23 12:48:00,042 INFO L273 TraceCheckUtils]: 101: Hoare triple {30598#false} assume 8672 == #t~mem56;havoc #t~mem56; {30598#false} is VALID [2018-11-23 12:48:00,042 INFO L273 TraceCheckUtils]: 102: Hoare triple {30598#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {30598#false} is VALID [2018-11-23 12:48:00,042 INFO L273 TraceCheckUtils]: 103: Hoare triple {30598#false} assume 4 == ~blastFlag~0; {30598#false} is VALID [2018-11-23 12:48:00,042 INFO L273 TraceCheckUtils]: 104: Hoare triple {30598#false} assume !false; {30598#false} is VALID [2018-11-23 12:48:00,047 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:00,048 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:00,048 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:00,048 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 105 [2018-11-23 12:48:00,048 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:00,048 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:00,138 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 95 edges. 95 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:00,138 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:00,138 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:00,139 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:00,139 INFO L87 Difference]: Start difference. First operand 256 states and 382 transitions. Second operand 4 states. [2018-11-23 12:48:01,376 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:01,376 INFO L93 Difference]: Finished difference Result 508 states and 763 transitions. [2018-11-23 12:48:01,376 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:01,376 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 105 [2018-11-23 12:48:01,376 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:01,376 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:01,378 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 455 transitions. [2018-11-23 12:48:01,378 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:01,380 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 455 transitions. [2018-11-23 12:48:01,380 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 455 transitions. [2018-11-23 12:48:01,912 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 455 edges. 455 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:01,919 INFO L225 Difference]: With dead ends: 508 [2018-11-23 12:48:01,919 INFO L226 Difference]: Without dead ends: 277 [2018-11-23 12:48:01,920 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:01,920 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 277 states. [2018-11-23 12:48:02,106 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 277 to 256. [2018-11-23 12:48:02,106 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:02,106 INFO L82 GeneralOperation]: Start isEquivalent. First operand 277 states. Second operand 256 states. [2018-11-23 12:48:02,106 INFO L74 IsIncluded]: Start isIncluded. First operand 277 states. Second operand 256 states. [2018-11-23 12:48:02,106 INFO L87 Difference]: Start difference. First operand 277 states. Second operand 256 states. [2018-11-23 12:48:02,113 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:02,113 INFO L93 Difference]: Finished difference Result 277 states and 408 transitions. [2018-11-23 12:48:02,113 INFO L276 IsEmpty]: Start isEmpty. Operand 277 states and 408 transitions. [2018-11-23 12:48:02,114 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:02,114 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:02,114 INFO L74 IsIncluded]: Start isIncluded. First operand 256 states. Second operand 277 states. [2018-11-23 12:48:02,114 INFO L87 Difference]: Start difference. First operand 256 states. Second operand 277 states. [2018-11-23 12:48:02,120 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:02,120 INFO L93 Difference]: Finished difference Result 277 states and 408 transitions. [2018-11-23 12:48:02,121 INFO L276 IsEmpty]: Start isEmpty. Operand 277 states and 408 transitions. [2018-11-23 12:48:02,121 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:02,121 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:02,121 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:02,122 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:02,122 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 12:48:02,127 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 381 transitions. [2018-11-23 12:48:02,127 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 381 transitions. Word has length 105 [2018-11-23 12:48:02,127 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:02,127 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 381 transitions. [2018-11-23 12:48:02,127 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:02,128 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 381 transitions. [2018-11-23 12:48:02,128 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2018-11-23 12:48:02,128 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:02,129 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:02,129 INFO L423 AbstractCegarLoop]: === Iteration 28 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:02,129 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:02,129 INFO L82 PathProgramCache]: Analyzing trace with hash -550520004, now seen corresponding path program 1 times [2018-11-23 12:48:02,129 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:02,129 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:02,130 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:02,131 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:02,131 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:02,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:02,340 INFO L256 TraceCheckUtils]: 0: Hoare triple {32037#true} call ULTIMATE.init(); {32037#true} is VALID [2018-11-23 12:48:02,340 INFO L273 TraceCheckUtils]: 1: Hoare triple {32037#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,341 INFO L273 TraceCheckUtils]: 2: Hoare triple {32037#true} assume true; {32037#true} is VALID [2018-11-23 12:48:02,341 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {32037#true} {32037#true} #604#return; {32037#true} is VALID [2018-11-23 12:48:02,341 INFO L256 TraceCheckUtils]: 4: Hoare triple {32037#true} call #t~ret138 := main(); {32037#true} is VALID [2018-11-23 12:48:02,341 INFO L273 TraceCheckUtils]: 5: Hoare triple {32037#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,342 INFO L256 TraceCheckUtils]: 6: Hoare triple {32037#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {32037#true} is VALID [2018-11-23 12:48:02,342 INFO L273 TraceCheckUtils]: 7: Hoare triple {32037#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,342 INFO L273 TraceCheckUtils]: 8: Hoare triple {32037#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {32037#true} is VALID [2018-11-23 12:48:02,342 INFO L273 TraceCheckUtils]: 9: Hoare triple {32037#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {32037#true} is VALID [2018-11-23 12:48:02,342 INFO L273 TraceCheckUtils]: 10: Hoare triple {32037#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {32037#true} is VALID [2018-11-23 12:48:02,343 INFO L273 TraceCheckUtils]: 11: Hoare triple {32037#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,343 INFO L273 TraceCheckUtils]: 12: Hoare triple {32037#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {32037#true} is VALID [2018-11-23 12:48:02,343 INFO L273 TraceCheckUtils]: 13: Hoare triple {32037#true} assume !false; {32037#true} is VALID [2018-11-23 12:48:02,343 INFO L273 TraceCheckUtils]: 14: Hoare triple {32037#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,343 INFO L273 TraceCheckUtils]: 15: Hoare triple {32037#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,343 INFO L273 TraceCheckUtils]: 16: Hoare triple {32037#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,343 INFO L273 TraceCheckUtils]: 17: Hoare triple {32037#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,344 INFO L273 TraceCheckUtils]: 18: Hoare triple {32037#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,344 INFO L273 TraceCheckUtils]: 19: Hoare triple {32037#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,344 INFO L273 TraceCheckUtils]: 20: Hoare triple {32037#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,344 INFO L273 TraceCheckUtils]: 21: Hoare triple {32037#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,344 INFO L273 TraceCheckUtils]: 22: Hoare triple {32037#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,344 INFO L273 TraceCheckUtils]: 23: Hoare triple {32037#true} assume 8464 == #t~mem32;havoc #t~mem32; {32037#true} is VALID [2018-11-23 12:48:02,344 INFO L273 TraceCheckUtils]: 24: Hoare triple {32037#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {32037#true} is VALID [2018-11-23 12:48:02,344 INFO L273 TraceCheckUtils]: 25: Hoare triple {32037#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {32037#true} is VALID [2018-11-23 12:48:02,344 INFO L273 TraceCheckUtils]: 26: Hoare triple {32037#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,345 INFO L273 TraceCheckUtils]: 27: Hoare triple {32037#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,345 INFO L273 TraceCheckUtils]: 28: Hoare triple {32037#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {32037#true} is VALID [2018-11-23 12:48:02,345 INFO L273 TraceCheckUtils]: 29: Hoare triple {32037#true} ~skip~0 := 0; {32037#true} is VALID [2018-11-23 12:48:02,345 INFO L273 TraceCheckUtils]: 30: Hoare triple {32037#true} assume !false; {32037#true} is VALID [2018-11-23 12:48:02,345 INFO L273 TraceCheckUtils]: 31: Hoare triple {32037#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,345 INFO L273 TraceCheckUtils]: 32: Hoare triple {32037#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,345 INFO L273 TraceCheckUtils]: 33: Hoare triple {32037#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,345 INFO L273 TraceCheckUtils]: 34: Hoare triple {32037#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,345 INFO L273 TraceCheckUtils]: 35: Hoare triple {32037#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,346 INFO L273 TraceCheckUtils]: 36: Hoare triple {32037#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,346 INFO L273 TraceCheckUtils]: 37: Hoare triple {32037#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,346 INFO L273 TraceCheckUtils]: 38: Hoare triple {32037#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,346 INFO L273 TraceCheckUtils]: 39: Hoare triple {32037#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,346 INFO L273 TraceCheckUtils]: 40: Hoare triple {32037#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,346 INFO L273 TraceCheckUtils]: 41: Hoare triple {32037#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,346 INFO L273 TraceCheckUtils]: 42: Hoare triple {32037#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,346 INFO L273 TraceCheckUtils]: 43: Hoare triple {32037#true} assume 8496 == #t~mem35;havoc #t~mem35; {32037#true} is VALID [2018-11-23 12:48:02,347 INFO L273 TraceCheckUtils]: 44: Hoare triple {32037#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {32037#true} is VALID [2018-11-23 12:48:02,347 INFO L273 TraceCheckUtils]: 45: Hoare triple {32037#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {32037#true} is VALID [2018-11-23 12:48:02,347 INFO L273 TraceCheckUtils]: 46: Hoare triple {32037#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {32037#true} is VALID [2018-11-23 12:48:02,348 INFO L273 TraceCheckUtils]: 47: Hoare triple {32037#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {32039#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:02,349 INFO L273 TraceCheckUtils]: 48: Hoare triple {32039#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {32039#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:02,350 INFO L273 TraceCheckUtils]: 49: Hoare triple {32039#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {32039#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:02,350 INFO L273 TraceCheckUtils]: 50: Hoare triple {32039#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {32039#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:02,350 INFO L273 TraceCheckUtils]: 51: Hoare triple {32039#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {32039#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:02,351 INFO L273 TraceCheckUtils]: 52: Hoare triple {32039#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {32039#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:02,351 INFO L273 TraceCheckUtils]: 53: Hoare triple {32039#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {32039#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:02,351 INFO L273 TraceCheckUtils]: 54: Hoare triple {32039#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {32039#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:02,352 INFO L273 TraceCheckUtils]: 55: Hoare triple {32039#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {32040#(= 8656 |ssl3_accept_#t~mem26|)} is VALID [2018-11-23 12:48:02,353 INFO L273 TraceCheckUtils]: 56: Hoare triple {32040#(= 8656 |ssl3_accept_#t~mem26|)} assume 8192 == #t~mem26;havoc #t~mem26; {32038#false} is VALID [2018-11-23 12:48:02,353 INFO L273 TraceCheckUtils]: 57: Hoare triple {32038#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,353 INFO L273 TraceCheckUtils]: 58: Hoare triple {32038#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {32038#false} is VALID [2018-11-23 12:48:02,353 INFO L273 TraceCheckUtils]: 59: Hoare triple {32038#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,354 INFO L273 TraceCheckUtils]: 60: Hoare triple {32038#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,354 INFO L273 TraceCheckUtils]: 61: Hoare triple {32038#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {32038#false} is VALID [2018-11-23 12:48:02,354 INFO L273 TraceCheckUtils]: 62: Hoare triple {32038#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,354 INFO L273 TraceCheckUtils]: 63: Hoare triple {32038#false} assume 12292 != #t~mem62;havoc #t~mem62; {32038#false} is VALID [2018-11-23 12:48:02,354 INFO L273 TraceCheckUtils]: 64: Hoare triple {32038#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {32038#false} is VALID [2018-11-23 12:48:02,355 INFO L273 TraceCheckUtils]: 65: Hoare triple {32038#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,355 INFO L273 TraceCheckUtils]: 66: Hoare triple {32038#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {32038#false} is VALID [2018-11-23 12:48:02,355 INFO L273 TraceCheckUtils]: 67: Hoare triple {32038#false} ~skip~0 := 0; {32038#false} is VALID [2018-11-23 12:48:02,355 INFO L273 TraceCheckUtils]: 68: Hoare triple {32038#false} assume !false; {32038#false} is VALID [2018-11-23 12:48:02,355 INFO L273 TraceCheckUtils]: 69: Hoare triple {32038#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,356 INFO L273 TraceCheckUtils]: 70: Hoare triple {32038#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,356 INFO L273 TraceCheckUtils]: 71: Hoare triple {32038#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,356 INFO L273 TraceCheckUtils]: 72: Hoare triple {32038#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,356 INFO L273 TraceCheckUtils]: 73: Hoare triple {32038#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,356 INFO L273 TraceCheckUtils]: 74: Hoare triple {32038#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,357 INFO L273 TraceCheckUtils]: 75: Hoare triple {32038#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,357 INFO L273 TraceCheckUtils]: 76: Hoare triple {32038#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,357 INFO L273 TraceCheckUtils]: 77: Hoare triple {32038#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,357 INFO L273 TraceCheckUtils]: 78: Hoare triple {32038#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,357 INFO L273 TraceCheckUtils]: 79: Hoare triple {32038#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,358 INFO L273 TraceCheckUtils]: 80: Hoare triple {32038#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,358 INFO L273 TraceCheckUtils]: 81: Hoare triple {32038#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,358 INFO L273 TraceCheckUtils]: 82: Hoare triple {32038#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,358 INFO L273 TraceCheckUtils]: 83: Hoare triple {32038#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,358 INFO L273 TraceCheckUtils]: 84: Hoare triple {32038#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,358 INFO L273 TraceCheckUtils]: 85: Hoare triple {32038#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,358 INFO L273 TraceCheckUtils]: 86: Hoare triple {32038#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,358 INFO L273 TraceCheckUtils]: 87: Hoare triple {32038#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,359 INFO L273 TraceCheckUtils]: 88: Hoare triple {32038#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,359 INFO L273 TraceCheckUtils]: 89: Hoare triple {32038#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,359 INFO L273 TraceCheckUtils]: 90: Hoare triple {32038#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,359 INFO L273 TraceCheckUtils]: 91: Hoare triple {32038#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,359 INFO L273 TraceCheckUtils]: 92: Hoare triple {32038#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,359 INFO L273 TraceCheckUtils]: 93: Hoare triple {32038#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,359 INFO L273 TraceCheckUtils]: 94: Hoare triple {32038#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,359 INFO L273 TraceCheckUtils]: 95: Hoare triple {32038#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,359 INFO L273 TraceCheckUtils]: 96: Hoare triple {32038#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,360 INFO L273 TraceCheckUtils]: 97: Hoare triple {32038#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,360 INFO L273 TraceCheckUtils]: 98: Hoare triple {32038#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,360 INFO L273 TraceCheckUtils]: 99: Hoare triple {32038#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,360 INFO L273 TraceCheckUtils]: 100: Hoare triple {32038#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,360 INFO L273 TraceCheckUtils]: 101: Hoare triple {32038#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {32038#false} is VALID [2018-11-23 12:48:02,360 INFO L273 TraceCheckUtils]: 102: Hoare triple {32038#false} assume 8672 == #t~mem56;havoc #t~mem56; {32038#false} is VALID [2018-11-23 12:48:02,360 INFO L273 TraceCheckUtils]: 103: Hoare triple {32038#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {32038#false} is VALID [2018-11-23 12:48:02,360 INFO L273 TraceCheckUtils]: 104: Hoare triple {32038#false} assume 4 == ~blastFlag~0; {32038#false} is VALID [2018-11-23 12:48:02,361 INFO L273 TraceCheckUtils]: 105: Hoare triple {32038#false} assume !false; {32038#false} is VALID [2018-11-23 12:48:02,366 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:02,366 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:02,366 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:02,366 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 106 [2018-11-23 12:48:02,366 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:02,367 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:02,460 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 96 edges. 96 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:02,460 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:02,461 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:02,461 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:02,461 INFO L87 Difference]: Start difference. First operand 256 states and 381 transitions. Second operand 4 states. [2018-11-23 12:48:03,876 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:03,876 INFO L93 Difference]: Finished difference Result 535 states and 797 transitions. [2018-11-23 12:48:03,876 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:03,876 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 106 [2018-11-23 12:48:03,877 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:03,877 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:03,879 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 525 transitions. [2018-11-23 12:48:03,880 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:03,882 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 525 transitions. [2018-11-23 12:48:03,882 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 525 transitions. [2018-11-23 12:48:04,414 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 525 edges. 525 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:04,420 INFO L225 Difference]: With dead ends: 535 [2018-11-23 12:48:04,420 INFO L226 Difference]: Without dead ends: 304 [2018-11-23 12:48:04,421 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:04,421 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 304 states. [2018-11-23 12:48:04,781 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 304 to 256. [2018-11-23 12:48:04,781 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:04,781 INFO L82 GeneralOperation]: Start isEquivalent. First operand 304 states. Second operand 256 states. [2018-11-23 12:48:04,781 INFO L74 IsIncluded]: Start isIncluded. First operand 304 states. Second operand 256 states. [2018-11-23 12:48:04,781 INFO L87 Difference]: Start difference. First operand 304 states. Second operand 256 states. [2018-11-23 12:48:04,787 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:04,787 INFO L93 Difference]: Finished difference Result 304 states and 443 transitions. [2018-11-23 12:48:04,787 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 443 transitions. [2018-11-23 12:48:04,787 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:04,788 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:04,788 INFO L74 IsIncluded]: Start isIncluded. First operand 256 states. Second operand 304 states. [2018-11-23 12:48:04,788 INFO L87 Difference]: Start difference. First operand 256 states. Second operand 304 states. [2018-11-23 12:48:04,793 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:04,793 INFO L93 Difference]: Finished difference Result 304 states and 443 transitions. [2018-11-23 12:48:04,793 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 443 transitions. [2018-11-23 12:48:04,794 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:04,794 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:04,794 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:04,794 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:04,794 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 12:48:04,798 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 380 transitions. [2018-11-23 12:48:04,798 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 380 transitions. Word has length 106 [2018-11-23 12:48:04,798 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:04,798 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 380 transitions. [2018-11-23 12:48:04,798 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:04,799 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 380 transitions. [2018-11-23 12:48:04,799 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2018-11-23 12:48:04,799 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:04,799 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:04,799 INFO L423 AbstractCegarLoop]: === Iteration 29 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:04,800 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:04,800 INFO L82 PathProgramCache]: Analyzing trace with hash 10179774, now seen corresponding path program 1 times [2018-11-23 12:48:04,800 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:04,800 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:04,801 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:04,801 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:04,801 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:04,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:05,052 INFO L256 TraceCheckUtils]: 0: Hoare triple {33569#true} call ULTIMATE.init(); {33569#true} is VALID [2018-11-23 12:48:05,053 INFO L273 TraceCheckUtils]: 1: Hoare triple {33569#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,053 INFO L273 TraceCheckUtils]: 2: Hoare triple {33569#true} assume true; {33569#true} is VALID [2018-11-23 12:48:05,053 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {33569#true} {33569#true} #604#return; {33569#true} is VALID [2018-11-23 12:48:05,054 INFO L256 TraceCheckUtils]: 4: Hoare triple {33569#true} call #t~ret138 := main(); {33569#true} is VALID [2018-11-23 12:48:05,054 INFO L273 TraceCheckUtils]: 5: Hoare triple {33569#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,054 INFO L256 TraceCheckUtils]: 6: Hoare triple {33569#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {33569#true} is VALID [2018-11-23 12:48:05,055 INFO L273 TraceCheckUtils]: 7: Hoare triple {33569#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,055 INFO L273 TraceCheckUtils]: 8: Hoare triple {33569#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {33569#true} is VALID [2018-11-23 12:48:05,055 INFO L273 TraceCheckUtils]: 9: Hoare triple {33569#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {33569#true} is VALID [2018-11-23 12:48:05,055 INFO L273 TraceCheckUtils]: 10: Hoare triple {33569#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {33569#true} is VALID [2018-11-23 12:48:05,055 INFO L273 TraceCheckUtils]: 11: Hoare triple {33569#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,056 INFO L273 TraceCheckUtils]: 12: Hoare triple {33569#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {33569#true} is VALID [2018-11-23 12:48:05,056 INFO L273 TraceCheckUtils]: 13: Hoare triple {33569#true} assume !false; {33569#true} is VALID [2018-11-23 12:48:05,056 INFO L273 TraceCheckUtils]: 14: Hoare triple {33569#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,056 INFO L273 TraceCheckUtils]: 15: Hoare triple {33569#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,056 INFO L273 TraceCheckUtils]: 16: Hoare triple {33569#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,056 INFO L273 TraceCheckUtils]: 17: Hoare triple {33569#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,057 INFO L273 TraceCheckUtils]: 18: Hoare triple {33569#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,057 INFO L273 TraceCheckUtils]: 19: Hoare triple {33569#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,057 INFO L273 TraceCheckUtils]: 20: Hoare triple {33569#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,057 INFO L273 TraceCheckUtils]: 21: Hoare triple {33569#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,057 INFO L273 TraceCheckUtils]: 22: Hoare triple {33569#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,057 INFO L273 TraceCheckUtils]: 23: Hoare triple {33569#true} assume 8464 == #t~mem32;havoc #t~mem32; {33569#true} is VALID [2018-11-23 12:48:05,058 INFO L273 TraceCheckUtils]: 24: Hoare triple {33569#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {33569#true} is VALID [2018-11-23 12:48:05,058 INFO L273 TraceCheckUtils]: 25: Hoare triple {33569#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {33569#true} is VALID [2018-11-23 12:48:05,058 INFO L273 TraceCheckUtils]: 26: Hoare triple {33569#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,058 INFO L273 TraceCheckUtils]: 27: Hoare triple {33569#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,058 INFO L273 TraceCheckUtils]: 28: Hoare triple {33569#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {33569#true} is VALID [2018-11-23 12:48:05,058 INFO L273 TraceCheckUtils]: 29: Hoare triple {33569#true} ~skip~0 := 0; {33569#true} is VALID [2018-11-23 12:48:05,058 INFO L273 TraceCheckUtils]: 30: Hoare triple {33569#true} assume !false; {33569#true} is VALID [2018-11-23 12:48:05,059 INFO L273 TraceCheckUtils]: 31: Hoare triple {33569#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,059 INFO L273 TraceCheckUtils]: 32: Hoare triple {33569#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,059 INFO L273 TraceCheckUtils]: 33: Hoare triple {33569#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,059 INFO L273 TraceCheckUtils]: 34: Hoare triple {33569#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,059 INFO L273 TraceCheckUtils]: 35: Hoare triple {33569#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,059 INFO L273 TraceCheckUtils]: 36: Hoare triple {33569#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,060 INFO L273 TraceCheckUtils]: 37: Hoare triple {33569#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,060 INFO L273 TraceCheckUtils]: 38: Hoare triple {33569#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,060 INFO L273 TraceCheckUtils]: 39: Hoare triple {33569#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,060 INFO L273 TraceCheckUtils]: 40: Hoare triple {33569#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,060 INFO L273 TraceCheckUtils]: 41: Hoare triple {33569#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,060 INFO L273 TraceCheckUtils]: 42: Hoare triple {33569#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,061 INFO L273 TraceCheckUtils]: 43: Hoare triple {33569#true} assume 8496 == #t~mem35;havoc #t~mem35; {33569#true} is VALID [2018-11-23 12:48:05,061 INFO L273 TraceCheckUtils]: 44: Hoare triple {33569#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {33569#true} is VALID [2018-11-23 12:48:05,061 INFO L273 TraceCheckUtils]: 45: Hoare triple {33569#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {33569#true} is VALID [2018-11-23 12:48:05,061 INFO L273 TraceCheckUtils]: 46: Hoare triple {33569#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {33569#true} is VALID [2018-11-23 12:48:05,062 INFO L273 TraceCheckUtils]: 47: Hoare triple {33569#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {33571#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,063 INFO L273 TraceCheckUtils]: 48: Hoare triple {33571#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {33571#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,063 INFO L273 TraceCheckUtils]: 49: Hoare triple {33571#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {33571#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,065 INFO L273 TraceCheckUtils]: 50: Hoare triple {33571#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {33571#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,065 INFO L273 TraceCheckUtils]: 51: Hoare triple {33571#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {33571#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,065 INFO L273 TraceCheckUtils]: 52: Hoare triple {33571#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {33571#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,066 INFO L273 TraceCheckUtils]: 53: Hoare triple {33571#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {33571#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,067 INFO L273 TraceCheckUtils]: 54: Hoare triple {33571#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {33571#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,067 INFO L273 TraceCheckUtils]: 55: Hoare triple {33571#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {33572#(= 8512 |ssl3_accept_#t~mem26|)} is VALID [2018-11-23 12:48:05,067 INFO L273 TraceCheckUtils]: 56: Hoare triple {33572#(= 8512 |ssl3_accept_#t~mem26|)} assume 8192 == #t~mem26;havoc #t~mem26; {33570#false} is VALID [2018-11-23 12:48:05,068 INFO L273 TraceCheckUtils]: 57: Hoare triple {33570#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,068 INFO L273 TraceCheckUtils]: 58: Hoare triple {33570#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {33570#false} is VALID [2018-11-23 12:48:05,068 INFO L273 TraceCheckUtils]: 59: Hoare triple {33570#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,068 INFO L273 TraceCheckUtils]: 60: Hoare triple {33570#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,068 INFO L273 TraceCheckUtils]: 61: Hoare triple {33570#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {33570#false} is VALID [2018-11-23 12:48:05,068 INFO L273 TraceCheckUtils]: 62: Hoare triple {33570#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,068 INFO L273 TraceCheckUtils]: 63: Hoare triple {33570#false} assume 12292 != #t~mem62;havoc #t~mem62; {33570#false} is VALID [2018-11-23 12:48:05,069 INFO L273 TraceCheckUtils]: 64: Hoare triple {33570#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {33570#false} is VALID [2018-11-23 12:48:05,069 INFO L273 TraceCheckUtils]: 65: Hoare triple {33570#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,069 INFO L273 TraceCheckUtils]: 66: Hoare triple {33570#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {33570#false} is VALID [2018-11-23 12:48:05,069 INFO L273 TraceCheckUtils]: 67: Hoare triple {33570#false} ~skip~0 := 0; {33570#false} is VALID [2018-11-23 12:48:05,069 INFO L273 TraceCheckUtils]: 68: Hoare triple {33570#false} assume !false; {33570#false} is VALID [2018-11-23 12:48:05,070 INFO L273 TraceCheckUtils]: 69: Hoare triple {33570#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,070 INFO L273 TraceCheckUtils]: 70: Hoare triple {33570#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,070 INFO L273 TraceCheckUtils]: 71: Hoare triple {33570#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,070 INFO L273 TraceCheckUtils]: 72: Hoare triple {33570#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,070 INFO L273 TraceCheckUtils]: 73: Hoare triple {33570#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,070 INFO L273 TraceCheckUtils]: 74: Hoare triple {33570#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,071 INFO L273 TraceCheckUtils]: 75: Hoare triple {33570#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,071 INFO L273 TraceCheckUtils]: 76: Hoare triple {33570#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,071 INFO L273 TraceCheckUtils]: 77: Hoare triple {33570#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,071 INFO L273 TraceCheckUtils]: 78: Hoare triple {33570#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,071 INFO L273 TraceCheckUtils]: 79: Hoare triple {33570#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,071 INFO L273 TraceCheckUtils]: 80: Hoare triple {33570#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,072 INFO L273 TraceCheckUtils]: 81: Hoare triple {33570#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,072 INFO L273 TraceCheckUtils]: 82: Hoare triple {33570#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,072 INFO L273 TraceCheckUtils]: 83: Hoare triple {33570#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,072 INFO L273 TraceCheckUtils]: 84: Hoare triple {33570#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,072 INFO L273 TraceCheckUtils]: 85: Hoare triple {33570#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,072 INFO L273 TraceCheckUtils]: 86: Hoare triple {33570#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,072 INFO L273 TraceCheckUtils]: 87: Hoare triple {33570#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,072 INFO L273 TraceCheckUtils]: 88: Hoare triple {33570#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,072 INFO L273 TraceCheckUtils]: 89: Hoare triple {33570#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,073 INFO L273 TraceCheckUtils]: 90: Hoare triple {33570#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,073 INFO L273 TraceCheckUtils]: 91: Hoare triple {33570#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,073 INFO L273 TraceCheckUtils]: 92: Hoare triple {33570#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,073 INFO L273 TraceCheckUtils]: 93: Hoare triple {33570#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,073 INFO L273 TraceCheckUtils]: 94: Hoare triple {33570#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,073 INFO L273 TraceCheckUtils]: 95: Hoare triple {33570#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,073 INFO L273 TraceCheckUtils]: 96: Hoare triple {33570#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,073 INFO L273 TraceCheckUtils]: 97: Hoare triple {33570#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,073 INFO L273 TraceCheckUtils]: 98: Hoare triple {33570#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,074 INFO L273 TraceCheckUtils]: 99: Hoare triple {33570#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,074 INFO L273 TraceCheckUtils]: 100: Hoare triple {33570#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,074 INFO L273 TraceCheckUtils]: 101: Hoare triple {33570#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {33570#false} is VALID [2018-11-23 12:48:05,074 INFO L273 TraceCheckUtils]: 102: Hoare triple {33570#false} assume 8672 == #t~mem56;havoc #t~mem56; {33570#false} is VALID [2018-11-23 12:48:05,074 INFO L273 TraceCheckUtils]: 103: Hoare triple {33570#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {33570#false} is VALID [2018-11-23 12:48:05,074 INFO L273 TraceCheckUtils]: 104: Hoare triple {33570#false} assume 4 == ~blastFlag~0; {33570#false} is VALID [2018-11-23 12:48:05,074 INFO L273 TraceCheckUtils]: 105: Hoare triple {33570#false} assume !false; {33570#false} is VALID [2018-11-23 12:48:05,080 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:05,080 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:05,080 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:05,081 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 106 [2018-11-23 12:48:05,081 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:05,081 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:05,174 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 96 edges. 96 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:05,174 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:05,174 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:05,175 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:05,175 INFO L87 Difference]: Start difference. First operand 256 states and 380 transitions. Second operand 4 states. [2018-11-23 12:48:06,397 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:06,398 INFO L93 Difference]: Finished difference Result 508 states and 759 transitions. [2018-11-23 12:48:06,398 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:06,398 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 106 [2018-11-23 12:48:06,398 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:06,398 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:06,400 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 454 transitions. [2018-11-23 12:48:06,400 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:06,402 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 454 transitions. [2018-11-23 12:48:06,402 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 454 transitions. [2018-11-23 12:48:06,895 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 454 edges. 454 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:06,901 INFO L225 Difference]: With dead ends: 508 [2018-11-23 12:48:06,901 INFO L226 Difference]: Without dead ends: 277 [2018-11-23 12:48:06,902 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:06,902 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 277 states. [2018-11-23 12:48:07,120 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 277 to 256. [2018-11-23 12:48:07,120 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:07,120 INFO L82 GeneralOperation]: Start isEquivalent. First operand 277 states. Second operand 256 states. [2018-11-23 12:48:07,120 INFO L74 IsIncluded]: Start isIncluded. First operand 277 states. Second operand 256 states. [2018-11-23 12:48:07,120 INFO L87 Difference]: Start difference. First operand 277 states. Second operand 256 states. [2018-11-23 12:48:07,125 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:07,125 INFO L93 Difference]: Finished difference Result 277 states and 406 transitions. [2018-11-23 12:48:07,126 INFO L276 IsEmpty]: Start isEmpty. Operand 277 states and 406 transitions. [2018-11-23 12:48:07,126 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:07,126 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:07,126 INFO L74 IsIncluded]: Start isIncluded. First operand 256 states. Second operand 277 states. [2018-11-23 12:48:07,126 INFO L87 Difference]: Start difference. First operand 256 states. Second operand 277 states. [2018-11-23 12:48:07,131 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:07,131 INFO L93 Difference]: Finished difference Result 277 states and 406 transitions. [2018-11-23 12:48:07,131 INFO L276 IsEmpty]: Start isEmpty. Operand 277 states and 406 transitions. [2018-11-23 12:48:07,132 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:07,132 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:07,132 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:07,132 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:07,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 12:48:07,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 379 transitions. [2018-11-23 12:48:07,137 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 379 transitions. Word has length 106 [2018-11-23 12:48:07,138 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:07,138 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 379 transitions. [2018-11-23 12:48:07,138 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:07,138 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 379 transitions. [2018-11-23 12:48:07,139 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2018-11-23 12:48:07,139 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:07,139 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:07,139 INFO L423 AbstractCegarLoop]: === Iteration 30 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:07,139 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:07,139 INFO L82 PathProgramCache]: Analyzing trace with hash 34766760, now seen corresponding path program 1 times [2018-11-23 12:48:07,140 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:07,140 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:07,141 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:07,141 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:07,141 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:07,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:07,266 INFO L256 TraceCheckUtils]: 0: Hoare triple {35009#true} call ULTIMATE.init(); {35009#true} is VALID [2018-11-23 12:48:07,267 INFO L273 TraceCheckUtils]: 1: Hoare triple {35009#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,267 INFO L273 TraceCheckUtils]: 2: Hoare triple {35009#true} assume true; {35009#true} is VALID [2018-11-23 12:48:07,267 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {35009#true} {35009#true} #604#return; {35009#true} is VALID [2018-11-23 12:48:07,267 INFO L256 TraceCheckUtils]: 4: Hoare triple {35009#true} call #t~ret138 := main(); {35009#true} is VALID [2018-11-23 12:48:07,267 INFO L273 TraceCheckUtils]: 5: Hoare triple {35009#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,268 INFO L256 TraceCheckUtils]: 6: Hoare triple {35009#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {35009#true} is VALID [2018-11-23 12:48:07,268 INFO L273 TraceCheckUtils]: 7: Hoare triple {35009#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,268 INFO L273 TraceCheckUtils]: 8: Hoare triple {35009#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {35009#true} is VALID [2018-11-23 12:48:07,268 INFO L273 TraceCheckUtils]: 9: Hoare triple {35009#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {35009#true} is VALID [2018-11-23 12:48:07,268 INFO L273 TraceCheckUtils]: 10: Hoare triple {35009#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {35009#true} is VALID [2018-11-23 12:48:07,269 INFO L273 TraceCheckUtils]: 11: Hoare triple {35009#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,269 INFO L273 TraceCheckUtils]: 12: Hoare triple {35009#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {35009#true} is VALID [2018-11-23 12:48:07,269 INFO L273 TraceCheckUtils]: 13: Hoare triple {35009#true} assume !false; {35009#true} is VALID [2018-11-23 12:48:07,269 INFO L273 TraceCheckUtils]: 14: Hoare triple {35009#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,269 INFO L273 TraceCheckUtils]: 15: Hoare triple {35009#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,269 INFO L273 TraceCheckUtils]: 16: Hoare triple {35009#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,270 INFO L273 TraceCheckUtils]: 17: Hoare triple {35009#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,270 INFO L273 TraceCheckUtils]: 18: Hoare triple {35009#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,270 INFO L273 TraceCheckUtils]: 19: Hoare triple {35009#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,270 INFO L273 TraceCheckUtils]: 20: Hoare triple {35009#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,270 INFO L273 TraceCheckUtils]: 21: Hoare triple {35009#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,270 INFO L273 TraceCheckUtils]: 22: Hoare triple {35009#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,271 INFO L273 TraceCheckUtils]: 23: Hoare triple {35009#true} assume 8464 == #t~mem32;havoc #t~mem32; {35009#true} is VALID [2018-11-23 12:48:07,271 INFO L273 TraceCheckUtils]: 24: Hoare triple {35009#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {35009#true} is VALID [2018-11-23 12:48:07,271 INFO L273 TraceCheckUtils]: 25: Hoare triple {35009#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {35009#true} is VALID [2018-11-23 12:48:07,271 INFO L273 TraceCheckUtils]: 26: Hoare triple {35009#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,271 INFO L273 TraceCheckUtils]: 27: Hoare triple {35009#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,271 INFO L273 TraceCheckUtils]: 28: Hoare triple {35009#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {35009#true} is VALID [2018-11-23 12:48:07,271 INFO L273 TraceCheckUtils]: 29: Hoare triple {35009#true} ~skip~0 := 0; {35009#true} is VALID [2018-11-23 12:48:07,272 INFO L273 TraceCheckUtils]: 30: Hoare triple {35009#true} assume !false; {35009#true} is VALID [2018-11-23 12:48:07,272 INFO L273 TraceCheckUtils]: 31: Hoare triple {35009#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,272 INFO L273 TraceCheckUtils]: 32: Hoare triple {35009#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,272 INFO L273 TraceCheckUtils]: 33: Hoare triple {35009#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,272 INFO L273 TraceCheckUtils]: 34: Hoare triple {35009#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,272 INFO L273 TraceCheckUtils]: 35: Hoare triple {35009#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,272 INFO L273 TraceCheckUtils]: 36: Hoare triple {35009#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,273 INFO L273 TraceCheckUtils]: 37: Hoare triple {35009#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,273 INFO L273 TraceCheckUtils]: 38: Hoare triple {35009#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,273 INFO L273 TraceCheckUtils]: 39: Hoare triple {35009#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,273 INFO L273 TraceCheckUtils]: 40: Hoare triple {35009#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,273 INFO L273 TraceCheckUtils]: 41: Hoare triple {35009#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,273 INFO L273 TraceCheckUtils]: 42: Hoare triple {35009#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,273 INFO L273 TraceCheckUtils]: 43: Hoare triple {35009#true} assume 8496 == #t~mem35;havoc #t~mem35; {35009#true} is VALID [2018-11-23 12:48:07,274 INFO L273 TraceCheckUtils]: 44: Hoare triple {35009#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {35009#true} is VALID [2018-11-23 12:48:07,274 INFO L273 TraceCheckUtils]: 45: Hoare triple {35009#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {35009#true} is VALID [2018-11-23 12:48:07,274 INFO L273 TraceCheckUtils]: 46: Hoare triple {35009#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {35009#true} is VALID [2018-11-23 12:48:07,275 INFO L273 TraceCheckUtils]: 47: Hoare triple {35009#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {35011#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:07,276 INFO L273 TraceCheckUtils]: 48: Hoare triple {35011#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {35011#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:07,276 INFO L273 TraceCheckUtils]: 49: Hoare triple {35011#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {35011#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:07,278 INFO L273 TraceCheckUtils]: 50: Hoare triple {35011#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {35011#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:07,278 INFO L273 TraceCheckUtils]: 51: Hoare triple {35011#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {35011#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:07,280 INFO L273 TraceCheckUtils]: 52: Hoare triple {35011#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {35011#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:07,280 INFO L273 TraceCheckUtils]: 53: Hoare triple {35011#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {35011#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:07,282 INFO L273 TraceCheckUtils]: 54: Hoare triple {35011#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {35011#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:07,282 INFO L273 TraceCheckUtils]: 55: Hoare triple {35011#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {35011#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:07,284 INFO L273 TraceCheckUtils]: 56: Hoare triple {35011#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {35012#(= 8656 |ssl3_accept_#t~mem27|)} is VALID [2018-11-23 12:48:07,284 INFO L273 TraceCheckUtils]: 57: Hoare triple {35012#(= 8656 |ssl3_accept_#t~mem27|)} assume 24576 == #t~mem27;havoc #t~mem27; {35010#false} is VALID [2018-11-23 12:48:07,284 INFO L273 TraceCheckUtils]: 58: Hoare triple {35010#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,284 INFO L273 TraceCheckUtils]: 59: Hoare triple {35010#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {35010#false} is VALID [2018-11-23 12:48:07,285 INFO L273 TraceCheckUtils]: 60: Hoare triple {35010#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,285 INFO L273 TraceCheckUtils]: 61: Hoare triple {35010#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,285 INFO L273 TraceCheckUtils]: 62: Hoare triple {35010#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {35010#false} is VALID [2018-11-23 12:48:07,285 INFO L273 TraceCheckUtils]: 63: Hoare triple {35010#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,285 INFO L273 TraceCheckUtils]: 64: Hoare triple {35010#false} assume 12292 != #t~mem62;havoc #t~mem62; {35010#false} is VALID [2018-11-23 12:48:07,285 INFO L273 TraceCheckUtils]: 65: Hoare triple {35010#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {35010#false} is VALID [2018-11-23 12:48:07,285 INFO L273 TraceCheckUtils]: 66: Hoare triple {35010#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,286 INFO L273 TraceCheckUtils]: 67: Hoare triple {35010#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {35010#false} is VALID [2018-11-23 12:48:07,286 INFO L273 TraceCheckUtils]: 68: Hoare triple {35010#false} ~skip~0 := 0; {35010#false} is VALID [2018-11-23 12:48:07,286 INFO L273 TraceCheckUtils]: 69: Hoare triple {35010#false} assume !false; {35010#false} is VALID [2018-11-23 12:48:07,286 INFO L273 TraceCheckUtils]: 70: Hoare triple {35010#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,286 INFO L273 TraceCheckUtils]: 71: Hoare triple {35010#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,286 INFO L273 TraceCheckUtils]: 72: Hoare triple {35010#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,286 INFO L273 TraceCheckUtils]: 73: Hoare triple {35010#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,287 INFO L273 TraceCheckUtils]: 74: Hoare triple {35010#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,287 INFO L273 TraceCheckUtils]: 75: Hoare triple {35010#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,287 INFO L273 TraceCheckUtils]: 76: Hoare triple {35010#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,287 INFO L273 TraceCheckUtils]: 77: Hoare triple {35010#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,287 INFO L273 TraceCheckUtils]: 78: Hoare triple {35010#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,287 INFO L273 TraceCheckUtils]: 79: Hoare triple {35010#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,287 INFO L273 TraceCheckUtils]: 80: Hoare triple {35010#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,288 INFO L273 TraceCheckUtils]: 81: Hoare triple {35010#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,288 INFO L273 TraceCheckUtils]: 82: Hoare triple {35010#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,288 INFO L273 TraceCheckUtils]: 83: Hoare triple {35010#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,288 INFO L273 TraceCheckUtils]: 84: Hoare triple {35010#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,288 INFO L273 TraceCheckUtils]: 85: Hoare triple {35010#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,288 INFO L273 TraceCheckUtils]: 86: Hoare triple {35010#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,289 INFO L273 TraceCheckUtils]: 87: Hoare triple {35010#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,289 INFO L273 TraceCheckUtils]: 88: Hoare triple {35010#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,289 INFO L273 TraceCheckUtils]: 89: Hoare triple {35010#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,289 INFO L273 TraceCheckUtils]: 90: Hoare triple {35010#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,289 INFO L273 TraceCheckUtils]: 91: Hoare triple {35010#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,289 INFO L273 TraceCheckUtils]: 92: Hoare triple {35010#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,289 INFO L273 TraceCheckUtils]: 93: Hoare triple {35010#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,290 INFO L273 TraceCheckUtils]: 94: Hoare triple {35010#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,290 INFO L273 TraceCheckUtils]: 95: Hoare triple {35010#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,290 INFO L273 TraceCheckUtils]: 96: Hoare triple {35010#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,290 INFO L273 TraceCheckUtils]: 97: Hoare triple {35010#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,290 INFO L273 TraceCheckUtils]: 98: Hoare triple {35010#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,290 INFO L273 TraceCheckUtils]: 99: Hoare triple {35010#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,290 INFO L273 TraceCheckUtils]: 100: Hoare triple {35010#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,291 INFO L273 TraceCheckUtils]: 101: Hoare triple {35010#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,291 INFO L273 TraceCheckUtils]: 102: Hoare triple {35010#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {35010#false} is VALID [2018-11-23 12:48:07,291 INFO L273 TraceCheckUtils]: 103: Hoare triple {35010#false} assume 8672 == #t~mem56;havoc #t~mem56; {35010#false} is VALID [2018-11-23 12:48:07,291 INFO L273 TraceCheckUtils]: 104: Hoare triple {35010#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {35010#false} is VALID [2018-11-23 12:48:07,291 INFO L273 TraceCheckUtils]: 105: Hoare triple {35010#false} assume 4 == ~blastFlag~0; {35010#false} is VALID [2018-11-23 12:48:07,291 INFO L273 TraceCheckUtils]: 106: Hoare triple {35010#false} assume !false; {35010#false} is VALID [2018-11-23 12:48:07,331 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 52 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:07,332 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:07,332 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:07,332 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 107 [2018-11-23 12:48:07,332 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:07,332 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:07,438 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 97 edges. 97 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:07,439 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:07,439 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:07,439 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:07,439 INFO L87 Difference]: Start difference. First operand 256 states and 379 transitions. Second operand 4 states. [2018-11-23 12:48:08,829 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:08,829 INFO L93 Difference]: Finished difference Result 535 states and 793 transitions. [2018-11-23 12:48:08,829 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:08,829 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 107 [2018-11-23 12:48:08,830 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:08,830 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:08,832 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 524 transitions. [2018-11-23 12:48:08,832 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:08,834 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 524 transitions. [2018-11-23 12:48:08,834 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 524 transitions. [2018-11-23 12:48:09,357 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 524 edges. 524 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:09,364 INFO L225 Difference]: With dead ends: 535 [2018-11-23 12:48:09,365 INFO L226 Difference]: Without dead ends: 304 [2018-11-23 12:48:09,365 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:09,366 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 304 states. [2018-11-23 12:48:09,519 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 304 to 256. [2018-11-23 12:48:09,519 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:09,519 INFO L82 GeneralOperation]: Start isEquivalent. First operand 304 states. Second operand 256 states. [2018-11-23 12:48:09,519 INFO L74 IsIncluded]: Start isIncluded. First operand 304 states. Second operand 256 states. [2018-11-23 12:48:09,520 INFO L87 Difference]: Start difference. First operand 304 states. Second operand 256 states. [2018-11-23 12:48:09,525 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:09,526 INFO L93 Difference]: Finished difference Result 304 states and 441 transitions. [2018-11-23 12:48:09,526 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 441 transitions. [2018-11-23 12:48:09,526 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:09,526 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:09,526 INFO L74 IsIncluded]: Start isIncluded. First operand 256 states. Second operand 304 states. [2018-11-23 12:48:09,526 INFO L87 Difference]: Start difference. First operand 256 states. Second operand 304 states. [2018-11-23 12:48:09,531 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:09,532 INFO L93 Difference]: Finished difference Result 304 states and 441 transitions. [2018-11-23 12:48:09,532 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 441 transitions. [2018-11-23 12:48:09,532 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:09,532 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:09,532 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:09,532 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:09,532 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 12:48:09,536 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 378 transitions. [2018-11-23 12:48:09,536 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 378 transitions. Word has length 107 [2018-11-23 12:48:09,537 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:09,537 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 378 transitions. [2018-11-23 12:48:09,537 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:09,537 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 378 transitions. [2018-11-23 12:48:09,537 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2018-11-23 12:48:09,538 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:09,538 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:09,538 INFO L423 AbstractCegarLoop]: === Iteration 31 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:09,538 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:09,538 INFO L82 PathProgramCache]: Analyzing trace with hash 236590694, now seen corresponding path program 1 times [2018-11-23 12:48:09,539 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:09,539 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:09,539 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:09,539 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:09,539 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:09,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:09,681 INFO L256 TraceCheckUtils]: 0: Hoare triple {36541#true} call ULTIMATE.init(); {36541#true} is VALID [2018-11-23 12:48:09,682 INFO L273 TraceCheckUtils]: 1: Hoare triple {36541#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,682 INFO L273 TraceCheckUtils]: 2: Hoare triple {36541#true} assume true; {36541#true} is VALID [2018-11-23 12:48:09,682 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {36541#true} {36541#true} #604#return; {36541#true} is VALID [2018-11-23 12:48:09,682 INFO L256 TraceCheckUtils]: 4: Hoare triple {36541#true} call #t~ret138 := main(); {36541#true} is VALID [2018-11-23 12:48:09,682 INFO L273 TraceCheckUtils]: 5: Hoare triple {36541#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,683 INFO L256 TraceCheckUtils]: 6: Hoare triple {36541#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {36541#true} is VALID [2018-11-23 12:48:09,683 INFO L273 TraceCheckUtils]: 7: Hoare triple {36541#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,683 INFO L273 TraceCheckUtils]: 8: Hoare triple {36541#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {36541#true} is VALID [2018-11-23 12:48:09,683 INFO L273 TraceCheckUtils]: 9: Hoare triple {36541#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {36541#true} is VALID [2018-11-23 12:48:09,683 INFO L273 TraceCheckUtils]: 10: Hoare triple {36541#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {36541#true} is VALID [2018-11-23 12:48:09,684 INFO L273 TraceCheckUtils]: 11: Hoare triple {36541#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,684 INFO L273 TraceCheckUtils]: 12: Hoare triple {36541#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {36541#true} is VALID [2018-11-23 12:48:09,684 INFO L273 TraceCheckUtils]: 13: Hoare triple {36541#true} assume !false; {36541#true} is VALID [2018-11-23 12:48:09,684 INFO L273 TraceCheckUtils]: 14: Hoare triple {36541#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,684 INFO L273 TraceCheckUtils]: 15: Hoare triple {36541#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,684 INFO L273 TraceCheckUtils]: 16: Hoare triple {36541#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,684 INFO L273 TraceCheckUtils]: 17: Hoare triple {36541#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,685 INFO L273 TraceCheckUtils]: 18: Hoare triple {36541#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,685 INFO L273 TraceCheckUtils]: 19: Hoare triple {36541#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,685 INFO L273 TraceCheckUtils]: 20: Hoare triple {36541#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,685 INFO L273 TraceCheckUtils]: 21: Hoare triple {36541#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,685 INFO L273 TraceCheckUtils]: 22: Hoare triple {36541#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,685 INFO L273 TraceCheckUtils]: 23: Hoare triple {36541#true} assume 8464 == #t~mem32;havoc #t~mem32; {36541#true} is VALID [2018-11-23 12:48:09,685 INFO L273 TraceCheckUtils]: 24: Hoare triple {36541#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {36541#true} is VALID [2018-11-23 12:48:09,685 INFO L273 TraceCheckUtils]: 25: Hoare triple {36541#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {36541#true} is VALID [2018-11-23 12:48:09,685 INFO L273 TraceCheckUtils]: 26: Hoare triple {36541#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,686 INFO L273 TraceCheckUtils]: 27: Hoare triple {36541#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,686 INFO L273 TraceCheckUtils]: 28: Hoare triple {36541#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {36541#true} is VALID [2018-11-23 12:48:09,686 INFO L273 TraceCheckUtils]: 29: Hoare triple {36541#true} ~skip~0 := 0; {36541#true} is VALID [2018-11-23 12:48:09,686 INFO L273 TraceCheckUtils]: 30: Hoare triple {36541#true} assume !false; {36541#true} is VALID [2018-11-23 12:48:09,686 INFO L273 TraceCheckUtils]: 31: Hoare triple {36541#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,686 INFO L273 TraceCheckUtils]: 32: Hoare triple {36541#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,686 INFO L273 TraceCheckUtils]: 33: Hoare triple {36541#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,686 INFO L273 TraceCheckUtils]: 34: Hoare triple {36541#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,686 INFO L273 TraceCheckUtils]: 35: Hoare triple {36541#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,687 INFO L273 TraceCheckUtils]: 36: Hoare triple {36541#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,687 INFO L273 TraceCheckUtils]: 37: Hoare triple {36541#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,687 INFO L273 TraceCheckUtils]: 38: Hoare triple {36541#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,687 INFO L273 TraceCheckUtils]: 39: Hoare triple {36541#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,687 INFO L273 TraceCheckUtils]: 40: Hoare triple {36541#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,687 INFO L273 TraceCheckUtils]: 41: Hoare triple {36541#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,687 INFO L273 TraceCheckUtils]: 42: Hoare triple {36541#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,687 INFO L273 TraceCheckUtils]: 43: Hoare triple {36541#true} assume 8496 == #t~mem35;havoc #t~mem35; {36541#true} is VALID [2018-11-23 12:48:09,687 INFO L273 TraceCheckUtils]: 44: Hoare triple {36541#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {36541#true} is VALID [2018-11-23 12:48:09,688 INFO L273 TraceCheckUtils]: 45: Hoare triple {36541#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {36541#true} is VALID [2018-11-23 12:48:09,688 INFO L273 TraceCheckUtils]: 46: Hoare triple {36541#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {36541#true} is VALID [2018-11-23 12:48:09,688 INFO L273 TraceCheckUtils]: 47: Hoare triple {36541#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {36543#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,689 INFO L273 TraceCheckUtils]: 48: Hoare triple {36543#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {36543#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,690 INFO L273 TraceCheckUtils]: 49: Hoare triple {36543#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {36543#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,690 INFO L273 TraceCheckUtils]: 50: Hoare triple {36543#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {36543#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,690 INFO L273 TraceCheckUtils]: 51: Hoare triple {36543#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {36543#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,691 INFO L273 TraceCheckUtils]: 52: Hoare triple {36543#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {36543#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,691 INFO L273 TraceCheckUtils]: 53: Hoare triple {36543#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {36543#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,692 INFO L273 TraceCheckUtils]: 54: Hoare triple {36543#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {36543#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,692 INFO L273 TraceCheckUtils]: 55: Hoare triple {36543#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {36543#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,693 INFO L273 TraceCheckUtils]: 56: Hoare triple {36543#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {36544#(= 8512 |ssl3_accept_#t~mem27|)} is VALID [2018-11-23 12:48:09,693 INFO L273 TraceCheckUtils]: 57: Hoare triple {36544#(= 8512 |ssl3_accept_#t~mem27|)} assume 24576 == #t~mem27;havoc #t~mem27; {36542#false} is VALID [2018-11-23 12:48:09,694 INFO L273 TraceCheckUtils]: 58: Hoare triple {36542#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,694 INFO L273 TraceCheckUtils]: 59: Hoare triple {36542#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {36542#false} is VALID [2018-11-23 12:48:09,694 INFO L273 TraceCheckUtils]: 60: Hoare triple {36542#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,694 INFO L273 TraceCheckUtils]: 61: Hoare triple {36542#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,695 INFO L273 TraceCheckUtils]: 62: Hoare triple {36542#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {36542#false} is VALID [2018-11-23 12:48:09,695 INFO L273 TraceCheckUtils]: 63: Hoare triple {36542#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,695 INFO L273 TraceCheckUtils]: 64: Hoare triple {36542#false} assume 12292 != #t~mem62;havoc #t~mem62; {36542#false} is VALID [2018-11-23 12:48:09,695 INFO L273 TraceCheckUtils]: 65: Hoare triple {36542#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {36542#false} is VALID [2018-11-23 12:48:09,695 INFO L273 TraceCheckUtils]: 66: Hoare triple {36542#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,695 INFO L273 TraceCheckUtils]: 67: Hoare triple {36542#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {36542#false} is VALID [2018-11-23 12:48:09,696 INFO L273 TraceCheckUtils]: 68: Hoare triple {36542#false} ~skip~0 := 0; {36542#false} is VALID [2018-11-23 12:48:09,696 INFO L273 TraceCheckUtils]: 69: Hoare triple {36542#false} assume !false; {36542#false} is VALID [2018-11-23 12:48:09,696 INFO L273 TraceCheckUtils]: 70: Hoare triple {36542#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,696 INFO L273 TraceCheckUtils]: 71: Hoare triple {36542#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,697 INFO L273 TraceCheckUtils]: 72: Hoare triple {36542#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,697 INFO L273 TraceCheckUtils]: 73: Hoare triple {36542#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,697 INFO L273 TraceCheckUtils]: 74: Hoare triple {36542#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,697 INFO L273 TraceCheckUtils]: 75: Hoare triple {36542#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,697 INFO L273 TraceCheckUtils]: 76: Hoare triple {36542#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,697 INFO L273 TraceCheckUtils]: 77: Hoare triple {36542#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,697 INFO L273 TraceCheckUtils]: 78: Hoare triple {36542#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,697 INFO L273 TraceCheckUtils]: 79: Hoare triple {36542#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,698 INFO L273 TraceCheckUtils]: 80: Hoare triple {36542#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,698 INFO L273 TraceCheckUtils]: 81: Hoare triple {36542#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,698 INFO L273 TraceCheckUtils]: 82: Hoare triple {36542#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,698 INFO L273 TraceCheckUtils]: 83: Hoare triple {36542#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,698 INFO L273 TraceCheckUtils]: 84: Hoare triple {36542#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,698 INFO L273 TraceCheckUtils]: 85: Hoare triple {36542#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,698 INFO L273 TraceCheckUtils]: 86: Hoare triple {36542#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,699 INFO L273 TraceCheckUtils]: 87: Hoare triple {36542#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,699 INFO L273 TraceCheckUtils]: 88: Hoare triple {36542#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,699 INFO L273 TraceCheckUtils]: 89: Hoare triple {36542#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,699 INFO L273 TraceCheckUtils]: 90: Hoare triple {36542#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,699 INFO L273 TraceCheckUtils]: 91: Hoare triple {36542#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,699 INFO L273 TraceCheckUtils]: 92: Hoare triple {36542#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,700 INFO L273 TraceCheckUtils]: 93: Hoare triple {36542#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,700 INFO L273 TraceCheckUtils]: 94: Hoare triple {36542#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,700 INFO L273 TraceCheckUtils]: 95: Hoare triple {36542#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,700 INFO L273 TraceCheckUtils]: 96: Hoare triple {36542#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,700 INFO L273 TraceCheckUtils]: 97: Hoare triple {36542#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,700 INFO L273 TraceCheckUtils]: 98: Hoare triple {36542#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,701 INFO L273 TraceCheckUtils]: 99: Hoare triple {36542#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,701 INFO L273 TraceCheckUtils]: 100: Hoare triple {36542#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,701 INFO L273 TraceCheckUtils]: 101: Hoare triple {36542#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,701 INFO L273 TraceCheckUtils]: 102: Hoare triple {36542#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {36542#false} is VALID [2018-11-23 12:48:09,701 INFO L273 TraceCheckUtils]: 103: Hoare triple {36542#false} assume 8672 == #t~mem56;havoc #t~mem56; {36542#false} is VALID [2018-11-23 12:48:09,701 INFO L273 TraceCheckUtils]: 104: Hoare triple {36542#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {36542#false} is VALID [2018-11-23 12:48:09,702 INFO L273 TraceCheckUtils]: 105: Hoare triple {36542#false} assume 4 == ~blastFlag~0; {36542#false} is VALID [2018-11-23 12:48:09,702 INFO L273 TraceCheckUtils]: 106: Hoare triple {36542#false} assume !false; {36542#false} is VALID [2018-11-23 12:48:09,708 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 52 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:09,708 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:09,709 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:09,709 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 107 [2018-11-23 12:48:09,709 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:09,709 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:09,807 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 97 edges. 97 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:09,808 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:09,808 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:09,808 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:09,808 INFO L87 Difference]: Start difference. First operand 256 states and 378 transitions. Second operand 4 states. [2018-11-23 12:48:11,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:11,012 INFO L93 Difference]: Finished difference Result 508 states and 755 transitions. [2018-11-23 12:48:11,012 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:11,012 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 107 [2018-11-23 12:48:11,013 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:11,013 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:11,015 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 453 transitions. [2018-11-23 12:48:11,015 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:11,018 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 453 transitions. [2018-11-23 12:48:11,018 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 453 transitions. [2018-11-23 12:48:11,539 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 453 edges. 453 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:11,546 INFO L225 Difference]: With dead ends: 508 [2018-11-23 12:48:11,546 INFO L226 Difference]: Without dead ends: 277 [2018-11-23 12:48:11,547 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:11,547 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 277 states. [2018-11-23 12:48:11,720 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 277 to 256. [2018-11-23 12:48:11,720 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:11,720 INFO L82 GeneralOperation]: Start isEquivalent. First operand 277 states. Second operand 256 states. [2018-11-23 12:48:11,720 INFO L74 IsIncluded]: Start isIncluded. First operand 277 states. Second operand 256 states. [2018-11-23 12:48:11,720 INFO L87 Difference]: Start difference. First operand 277 states. Second operand 256 states. [2018-11-23 12:48:11,725 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:11,725 INFO L93 Difference]: Finished difference Result 277 states and 404 transitions. [2018-11-23 12:48:11,725 INFO L276 IsEmpty]: Start isEmpty. Operand 277 states and 404 transitions. [2018-11-23 12:48:11,725 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:11,726 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:11,726 INFO L74 IsIncluded]: Start isIncluded. First operand 256 states. Second operand 277 states. [2018-11-23 12:48:11,726 INFO L87 Difference]: Start difference. First operand 256 states. Second operand 277 states. [2018-11-23 12:48:11,730 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:11,730 INFO L93 Difference]: Finished difference Result 277 states and 404 transitions. [2018-11-23 12:48:11,730 INFO L276 IsEmpty]: Start isEmpty. Operand 277 states and 404 transitions. [2018-11-23 12:48:11,731 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:11,731 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:11,731 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:11,731 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:11,731 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 12:48:11,736 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 377 transitions. [2018-11-23 12:48:11,737 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 377 transitions. Word has length 107 [2018-11-23 12:48:11,737 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:11,737 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 377 transitions. [2018-11-23 12:48:11,737 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:11,737 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 377 transitions. [2018-11-23 12:48:11,738 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2018-11-23 12:48:11,738 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:11,738 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:11,739 INFO L423 AbstractCegarLoop]: === Iteration 32 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:11,739 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:11,739 INFO L82 PathProgramCache]: Analyzing trace with hash -203913385, now seen corresponding path program 1 times [2018-11-23 12:48:11,739 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:11,739 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:11,740 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:11,740 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:11,740 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:11,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:11,937 INFO L256 TraceCheckUtils]: 0: Hoare triple {37981#true} call ULTIMATE.init(); {37981#true} is VALID [2018-11-23 12:48:11,937 INFO L273 TraceCheckUtils]: 1: Hoare triple {37981#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,937 INFO L273 TraceCheckUtils]: 2: Hoare triple {37981#true} assume true; {37981#true} is VALID [2018-11-23 12:48:11,937 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {37981#true} {37981#true} #604#return; {37981#true} is VALID [2018-11-23 12:48:11,937 INFO L256 TraceCheckUtils]: 4: Hoare triple {37981#true} call #t~ret138 := main(); {37981#true} is VALID [2018-11-23 12:48:11,938 INFO L273 TraceCheckUtils]: 5: Hoare triple {37981#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,938 INFO L256 TraceCheckUtils]: 6: Hoare triple {37981#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {37981#true} is VALID [2018-11-23 12:48:11,938 INFO L273 TraceCheckUtils]: 7: Hoare triple {37981#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,938 INFO L273 TraceCheckUtils]: 8: Hoare triple {37981#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {37981#true} is VALID [2018-11-23 12:48:11,938 INFO L273 TraceCheckUtils]: 9: Hoare triple {37981#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {37981#true} is VALID [2018-11-23 12:48:11,938 INFO L273 TraceCheckUtils]: 10: Hoare triple {37981#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {37981#true} is VALID [2018-11-23 12:48:11,938 INFO L273 TraceCheckUtils]: 11: Hoare triple {37981#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,938 INFO L273 TraceCheckUtils]: 12: Hoare triple {37981#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {37981#true} is VALID [2018-11-23 12:48:11,939 INFO L273 TraceCheckUtils]: 13: Hoare triple {37981#true} assume !false; {37981#true} is VALID [2018-11-23 12:48:11,939 INFO L273 TraceCheckUtils]: 14: Hoare triple {37981#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,939 INFO L273 TraceCheckUtils]: 15: Hoare triple {37981#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,939 INFO L273 TraceCheckUtils]: 16: Hoare triple {37981#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,939 INFO L273 TraceCheckUtils]: 17: Hoare triple {37981#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,939 INFO L273 TraceCheckUtils]: 18: Hoare triple {37981#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,939 INFO L273 TraceCheckUtils]: 19: Hoare triple {37981#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,939 INFO L273 TraceCheckUtils]: 20: Hoare triple {37981#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,939 INFO L273 TraceCheckUtils]: 21: Hoare triple {37981#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,940 INFO L273 TraceCheckUtils]: 22: Hoare triple {37981#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,940 INFO L273 TraceCheckUtils]: 23: Hoare triple {37981#true} assume 8464 == #t~mem32;havoc #t~mem32; {37981#true} is VALID [2018-11-23 12:48:11,940 INFO L273 TraceCheckUtils]: 24: Hoare triple {37981#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {37981#true} is VALID [2018-11-23 12:48:11,940 INFO L273 TraceCheckUtils]: 25: Hoare triple {37981#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {37981#true} is VALID [2018-11-23 12:48:11,940 INFO L273 TraceCheckUtils]: 26: Hoare triple {37981#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,940 INFO L273 TraceCheckUtils]: 27: Hoare triple {37981#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,940 INFO L273 TraceCheckUtils]: 28: Hoare triple {37981#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {37981#true} is VALID [2018-11-23 12:48:11,940 INFO L273 TraceCheckUtils]: 29: Hoare triple {37981#true} ~skip~0 := 0; {37981#true} is VALID [2018-11-23 12:48:11,940 INFO L273 TraceCheckUtils]: 30: Hoare triple {37981#true} assume !false; {37981#true} is VALID [2018-11-23 12:48:11,941 INFO L273 TraceCheckUtils]: 31: Hoare triple {37981#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,941 INFO L273 TraceCheckUtils]: 32: Hoare triple {37981#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,941 INFO L273 TraceCheckUtils]: 33: Hoare triple {37981#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,941 INFO L273 TraceCheckUtils]: 34: Hoare triple {37981#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,941 INFO L273 TraceCheckUtils]: 35: Hoare triple {37981#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,941 INFO L273 TraceCheckUtils]: 36: Hoare triple {37981#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,941 INFO L273 TraceCheckUtils]: 37: Hoare triple {37981#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,941 INFO L273 TraceCheckUtils]: 38: Hoare triple {37981#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,941 INFO L273 TraceCheckUtils]: 39: Hoare triple {37981#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,942 INFO L273 TraceCheckUtils]: 40: Hoare triple {37981#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,942 INFO L273 TraceCheckUtils]: 41: Hoare triple {37981#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,942 INFO L273 TraceCheckUtils]: 42: Hoare triple {37981#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,942 INFO L273 TraceCheckUtils]: 43: Hoare triple {37981#true} assume 8496 == #t~mem35;havoc #t~mem35; {37981#true} is VALID [2018-11-23 12:48:11,942 INFO L273 TraceCheckUtils]: 44: Hoare triple {37981#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {37981#true} is VALID [2018-11-23 12:48:11,942 INFO L273 TraceCheckUtils]: 45: Hoare triple {37981#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {37981#true} is VALID [2018-11-23 12:48:11,942 INFO L273 TraceCheckUtils]: 46: Hoare triple {37981#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {37981#true} is VALID [2018-11-23 12:48:11,943 INFO L273 TraceCheckUtils]: 47: Hoare triple {37981#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {37983#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,947 INFO L273 TraceCheckUtils]: 48: Hoare triple {37983#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {37983#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,947 INFO L273 TraceCheckUtils]: 49: Hoare triple {37983#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {37983#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,949 INFO L273 TraceCheckUtils]: 50: Hoare triple {37983#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {37983#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,949 INFO L273 TraceCheckUtils]: 51: Hoare triple {37983#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {37983#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,951 INFO L273 TraceCheckUtils]: 52: Hoare triple {37983#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {37983#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,951 INFO L273 TraceCheckUtils]: 53: Hoare triple {37983#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {37983#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,953 INFO L273 TraceCheckUtils]: 54: Hoare triple {37983#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {37983#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,953 INFO L273 TraceCheckUtils]: 55: Hoare triple {37983#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {37983#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,955 INFO L273 TraceCheckUtils]: 56: Hoare triple {37983#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {37983#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,955 INFO L273 TraceCheckUtils]: 57: Hoare triple {37983#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {37984#(= 8656 |ssl3_accept_#t~mem28|)} is VALID [2018-11-23 12:48:11,957 INFO L273 TraceCheckUtils]: 58: Hoare triple {37984#(= 8656 |ssl3_accept_#t~mem28|)} assume 8195 == #t~mem28;havoc #t~mem28; {37982#false} is VALID [2018-11-23 12:48:11,957 INFO L273 TraceCheckUtils]: 59: Hoare triple {37982#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,957 INFO L273 TraceCheckUtils]: 60: Hoare triple {37982#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {37982#false} is VALID [2018-11-23 12:48:11,957 INFO L273 TraceCheckUtils]: 61: Hoare triple {37982#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,957 INFO L273 TraceCheckUtils]: 62: Hoare triple {37982#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,957 INFO L273 TraceCheckUtils]: 63: Hoare triple {37982#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {37982#false} is VALID [2018-11-23 12:48:11,957 INFO L273 TraceCheckUtils]: 64: Hoare triple {37982#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,957 INFO L273 TraceCheckUtils]: 65: Hoare triple {37982#false} assume 12292 != #t~mem62;havoc #t~mem62; {37982#false} is VALID [2018-11-23 12:48:11,958 INFO L273 TraceCheckUtils]: 66: Hoare triple {37982#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {37982#false} is VALID [2018-11-23 12:48:11,958 INFO L273 TraceCheckUtils]: 67: Hoare triple {37982#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,958 INFO L273 TraceCheckUtils]: 68: Hoare triple {37982#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {37982#false} is VALID [2018-11-23 12:48:11,958 INFO L273 TraceCheckUtils]: 69: Hoare triple {37982#false} ~skip~0 := 0; {37982#false} is VALID [2018-11-23 12:48:11,958 INFO L273 TraceCheckUtils]: 70: Hoare triple {37982#false} assume !false; {37982#false} is VALID [2018-11-23 12:48:11,958 INFO L273 TraceCheckUtils]: 71: Hoare triple {37982#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,958 INFO L273 TraceCheckUtils]: 72: Hoare triple {37982#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,958 INFO L273 TraceCheckUtils]: 73: Hoare triple {37982#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,959 INFO L273 TraceCheckUtils]: 74: Hoare triple {37982#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,959 INFO L273 TraceCheckUtils]: 75: Hoare triple {37982#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,959 INFO L273 TraceCheckUtils]: 76: Hoare triple {37982#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,959 INFO L273 TraceCheckUtils]: 77: Hoare triple {37982#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,959 INFO L273 TraceCheckUtils]: 78: Hoare triple {37982#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,959 INFO L273 TraceCheckUtils]: 79: Hoare triple {37982#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,960 INFO L273 TraceCheckUtils]: 80: Hoare triple {37982#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,960 INFO L273 TraceCheckUtils]: 81: Hoare triple {37982#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,960 INFO L273 TraceCheckUtils]: 82: Hoare triple {37982#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,960 INFO L273 TraceCheckUtils]: 83: Hoare triple {37982#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,960 INFO L273 TraceCheckUtils]: 84: Hoare triple {37982#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,960 INFO L273 TraceCheckUtils]: 85: Hoare triple {37982#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,961 INFO L273 TraceCheckUtils]: 86: Hoare triple {37982#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,961 INFO L273 TraceCheckUtils]: 87: Hoare triple {37982#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,961 INFO L273 TraceCheckUtils]: 88: Hoare triple {37982#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,961 INFO L273 TraceCheckUtils]: 89: Hoare triple {37982#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,961 INFO L273 TraceCheckUtils]: 90: Hoare triple {37982#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,961 INFO L273 TraceCheckUtils]: 91: Hoare triple {37982#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,962 INFO L273 TraceCheckUtils]: 92: Hoare triple {37982#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,962 INFO L273 TraceCheckUtils]: 93: Hoare triple {37982#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,962 INFO L273 TraceCheckUtils]: 94: Hoare triple {37982#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,962 INFO L273 TraceCheckUtils]: 95: Hoare triple {37982#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,962 INFO L273 TraceCheckUtils]: 96: Hoare triple {37982#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,963 INFO L273 TraceCheckUtils]: 97: Hoare triple {37982#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,963 INFO L273 TraceCheckUtils]: 98: Hoare triple {37982#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,963 INFO L273 TraceCheckUtils]: 99: Hoare triple {37982#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,963 INFO L273 TraceCheckUtils]: 100: Hoare triple {37982#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,963 INFO L273 TraceCheckUtils]: 101: Hoare triple {37982#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,963 INFO L273 TraceCheckUtils]: 102: Hoare triple {37982#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,964 INFO L273 TraceCheckUtils]: 103: Hoare triple {37982#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {37982#false} is VALID [2018-11-23 12:48:11,964 INFO L273 TraceCheckUtils]: 104: Hoare triple {37982#false} assume 8672 == #t~mem56;havoc #t~mem56; {37982#false} is VALID [2018-11-23 12:48:11,964 INFO L273 TraceCheckUtils]: 105: Hoare triple {37982#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {37982#false} is VALID [2018-11-23 12:48:11,964 INFO L273 TraceCheckUtils]: 106: Hoare triple {37982#false} assume 4 == ~blastFlag~0; {37982#false} is VALID [2018-11-23 12:48:11,964 INFO L273 TraceCheckUtils]: 107: Hoare triple {37982#false} assume !false; {37982#false} is VALID [2018-11-23 12:48:11,973 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:11,973 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:11,973 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:11,974 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 108 [2018-11-23 12:48:11,974 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:11,974 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:12,131 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 98 edges. 98 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:12,131 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:12,131 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:12,132 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:12,132 INFO L87 Difference]: Start difference. First operand 256 states and 377 transitions. Second operand 4 states. [2018-11-23 12:48:13,536 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:13,537 INFO L93 Difference]: Finished difference Result 525 states and 777 transitions. [2018-11-23 12:48:13,537 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:13,537 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 108 [2018-11-23 12:48:13,537 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:13,537 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:13,539 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 511 transitions. [2018-11-23 12:48:13,540 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:13,542 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 511 transitions. [2018-11-23 12:48:13,542 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 511 transitions. [2018-11-23 12:48:14,048 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 511 edges. 511 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:14,054 INFO L225 Difference]: With dead ends: 525 [2018-11-23 12:48:14,054 INFO L226 Difference]: Without dead ends: 294 [2018-11-23 12:48:14,055 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:14,056 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2018-11-23 12:48:14,226 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 256. [2018-11-23 12:48:14,227 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:14,227 INFO L82 GeneralOperation]: Start isEquivalent. First operand 294 states. Second operand 256 states. [2018-11-23 12:48:14,227 INFO L74 IsIncluded]: Start isIncluded. First operand 294 states. Second operand 256 states. [2018-11-23 12:48:14,227 INFO L87 Difference]: Start difference. First operand 294 states. Second operand 256 states. [2018-11-23 12:48:14,233 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:14,233 INFO L93 Difference]: Finished difference Result 294 states and 427 transitions. [2018-11-23 12:48:14,233 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 427 transitions. [2018-11-23 12:48:14,233 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:14,233 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:14,233 INFO L74 IsIncluded]: Start isIncluded. First operand 256 states. Second operand 294 states. [2018-11-23 12:48:14,234 INFO L87 Difference]: Start difference. First operand 256 states. Second operand 294 states. [2018-11-23 12:48:14,239 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:14,239 INFO L93 Difference]: Finished difference Result 294 states and 427 transitions. [2018-11-23 12:48:14,239 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 427 transitions. [2018-11-23 12:48:14,239 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:14,239 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:14,239 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:14,239 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:14,240 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 12:48:14,244 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 376 transitions. [2018-11-23 12:48:14,244 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 376 transitions. Word has length 108 [2018-11-23 12:48:14,244 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:14,244 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 376 transitions. [2018-11-23 12:48:14,244 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:14,244 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 376 transitions. [2018-11-23 12:48:14,245 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2018-11-23 12:48:14,245 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:14,245 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:14,245 INFO L423 AbstractCegarLoop]: === Iteration 33 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:14,245 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:14,245 INFO L82 PathProgramCache]: Analyzing trace with hash 1757661273, now seen corresponding path program 1 times [2018-11-23 12:48:14,245 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:14,245 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:14,246 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:14,246 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:14,246 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:14,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:14,466 INFO L256 TraceCheckUtils]: 0: Hoare triple {39482#true} call ULTIMATE.init(); {39482#true} is VALID [2018-11-23 12:48:14,466 INFO L273 TraceCheckUtils]: 1: Hoare triple {39482#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,466 INFO L273 TraceCheckUtils]: 2: Hoare triple {39482#true} assume true; {39482#true} is VALID [2018-11-23 12:48:14,467 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {39482#true} {39482#true} #604#return; {39482#true} is VALID [2018-11-23 12:48:14,467 INFO L256 TraceCheckUtils]: 4: Hoare triple {39482#true} call #t~ret138 := main(); {39482#true} is VALID [2018-11-23 12:48:14,467 INFO L273 TraceCheckUtils]: 5: Hoare triple {39482#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,467 INFO L256 TraceCheckUtils]: 6: Hoare triple {39482#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {39482#true} is VALID [2018-11-23 12:48:14,467 INFO L273 TraceCheckUtils]: 7: Hoare triple {39482#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,467 INFO L273 TraceCheckUtils]: 8: Hoare triple {39482#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {39482#true} is VALID [2018-11-23 12:48:14,468 INFO L273 TraceCheckUtils]: 9: Hoare triple {39482#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {39482#true} is VALID [2018-11-23 12:48:14,468 INFO L273 TraceCheckUtils]: 10: Hoare triple {39482#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {39482#true} is VALID [2018-11-23 12:48:14,468 INFO L273 TraceCheckUtils]: 11: Hoare triple {39482#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,468 INFO L273 TraceCheckUtils]: 12: Hoare triple {39482#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {39482#true} is VALID [2018-11-23 12:48:14,468 INFO L273 TraceCheckUtils]: 13: Hoare triple {39482#true} assume !false; {39482#true} is VALID [2018-11-23 12:48:14,469 INFO L273 TraceCheckUtils]: 14: Hoare triple {39482#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,469 INFO L273 TraceCheckUtils]: 15: Hoare triple {39482#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,469 INFO L273 TraceCheckUtils]: 16: Hoare triple {39482#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,469 INFO L273 TraceCheckUtils]: 17: Hoare triple {39482#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,469 INFO L273 TraceCheckUtils]: 18: Hoare triple {39482#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,469 INFO L273 TraceCheckUtils]: 19: Hoare triple {39482#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,469 INFO L273 TraceCheckUtils]: 20: Hoare triple {39482#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,469 INFO L273 TraceCheckUtils]: 21: Hoare triple {39482#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,470 INFO L273 TraceCheckUtils]: 22: Hoare triple {39482#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,470 INFO L273 TraceCheckUtils]: 23: Hoare triple {39482#true} assume 8464 == #t~mem32;havoc #t~mem32; {39482#true} is VALID [2018-11-23 12:48:14,470 INFO L273 TraceCheckUtils]: 24: Hoare triple {39482#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {39482#true} is VALID [2018-11-23 12:48:14,470 INFO L273 TraceCheckUtils]: 25: Hoare triple {39482#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {39482#true} is VALID [2018-11-23 12:48:14,470 INFO L273 TraceCheckUtils]: 26: Hoare triple {39482#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,470 INFO L273 TraceCheckUtils]: 27: Hoare triple {39482#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,470 INFO L273 TraceCheckUtils]: 28: Hoare triple {39482#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {39482#true} is VALID [2018-11-23 12:48:14,470 INFO L273 TraceCheckUtils]: 29: Hoare triple {39482#true} ~skip~0 := 0; {39482#true} is VALID [2018-11-23 12:48:14,470 INFO L273 TraceCheckUtils]: 30: Hoare triple {39482#true} assume !false; {39482#true} is VALID [2018-11-23 12:48:14,471 INFO L273 TraceCheckUtils]: 31: Hoare triple {39482#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,471 INFO L273 TraceCheckUtils]: 32: Hoare triple {39482#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,471 INFO L273 TraceCheckUtils]: 33: Hoare triple {39482#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,471 INFO L273 TraceCheckUtils]: 34: Hoare triple {39482#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,471 INFO L273 TraceCheckUtils]: 35: Hoare triple {39482#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,471 INFO L273 TraceCheckUtils]: 36: Hoare triple {39482#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,471 INFO L273 TraceCheckUtils]: 37: Hoare triple {39482#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,471 INFO L273 TraceCheckUtils]: 38: Hoare triple {39482#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,472 INFO L273 TraceCheckUtils]: 39: Hoare triple {39482#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,472 INFO L273 TraceCheckUtils]: 40: Hoare triple {39482#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,472 INFO L273 TraceCheckUtils]: 41: Hoare triple {39482#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,472 INFO L273 TraceCheckUtils]: 42: Hoare triple {39482#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,472 INFO L273 TraceCheckUtils]: 43: Hoare triple {39482#true} assume 8496 == #t~mem35;havoc #t~mem35; {39482#true} is VALID [2018-11-23 12:48:14,472 INFO L273 TraceCheckUtils]: 44: Hoare triple {39482#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {39482#true} is VALID [2018-11-23 12:48:14,472 INFO L273 TraceCheckUtils]: 45: Hoare triple {39482#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {39482#true} is VALID [2018-11-23 12:48:14,472 INFO L273 TraceCheckUtils]: 46: Hoare triple {39482#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {39482#true} is VALID [2018-11-23 12:48:14,473 INFO L273 TraceCheckUtils]: 47: Hoare triple {39482#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {39484#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,474 INFO L273 TraceCheckUtils]: 48: Hoare triple {39484#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {39484#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,474 INFO L273 TraceCheckUtils]: 49: Hoare triple {39484#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {39484#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,475 INFO L273 TraceCheckUtils]: 50: Hoare triple {39484#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {39484#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,475 INFO L273 TraceCheckUtils]: 51: Hoare triple {39484#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {39484#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,475 INFO L273 TraceCheckUtils]: 52: Hoare triple {39484#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {39484#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,476 INFO L273 TraceCheckUtils]: 53: Hoare triple {39484#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {39484#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,476 INFO L273 TraceCheckUtils]: 54: Hoare triple {39484#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {39484#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,476 INFO L273 TraceCheckUtils]: 55: Hoare triple {39484#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {39484#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,477 INFO L273 TraceCheckUtils]: 56: Hoare triple {39484#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {39484#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,478 INFO L273 TraceCheckUtils]: 57: Hoare triple {39484#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {39485#(= 8512 |ssl3_accept_#t~mem28|)} is VALID [2018-11-23 12:48:14,478 INFO L273 TraceCheckUtils]: 58: Hoare triple {39485#(= 8512 |ssl3_accept_#t~mem28|)} assume 8195 == #t~mem28;havoc #t~mem28; {39483#false} is VALID [2018-11-23 12:48:14,478 INFO L273 TraceCheckUtils]: 59: Hoare triple {39483#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,479 INFO L273 TraceCheckUtils]: 60: Hoare triple {39483#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {39483#false} is VALID [2018-11-23 12:48:14,479 INFO L273 TraceCheckUtils]: 61: Hoare triple {39483#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,479 INFO L273 TraceCheckUtils]: 62: Hoare triple {39483#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,479 INFO L273 TraceCheckUtils]: 63: Hoare triple {39483#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {39483#false} is VALID [2018-11-23 12:48:14,479 INFO L273 TraceCheckUtils]: 64: Hoare triple {39483#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,480 INFO L273 TraceCheckUtils]: 65: Hoare triple {39483#false} assume 12292 != #t~mem62;havoc #t~mem62; {39483#false} is VALID [2018-11-23 12:48:14,480 INFO L273 TraceCheckUtils]: 66: Hoare triple {39483#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {39483#false} is VALID [2018-11-23 12:48:14,480 INFO L273 TraceCheckUtils]: 67: Hoare triple {39483#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,480 INFO L273 TraceCheckUtils]: 68: Hoare triple {39483#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {39483#false} is VALID [2018-11-23 12:48:14,480 INFO L273 TraceCheckUtils]: 69: Hoare triple {39483#false} ~skip~0 := 0; {39483#false} is VALID [2018-11-23 12:48:14,480 INFO L273 TraceCheckUtils]: 70: Hoare triple {39483#false} assume !false; {39483#false} is VALID [2018-11-23 12:48:14,481 INFO L273 TraceCheckUtils]: 71: Hoare triple {39483#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,481 INFO L273 TraceCheckUtils]: 72: Hoare triple {39483#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,481 INFO L273 TraceCheckUtils]: 73: Hoare triple {39483#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,481 INFO L273 TraceCheckUtils]: 74: Hoare triple {39483#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,481 INFO L273 TraceCheckUtils]: 75: Hoare triple {39483#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,482 INFO L273 TraceCheckUtils]: 76: Hoare triple {39483#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,482 INFO L273 TraceCheckUtils]: 77: Hoare triple {39483#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,482 INFO L273 TraceCheckUtils]: 78: Hoare triple {39483#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,482 INFO L273 TraceCheckUtils]: 79: Hoare triple {39483#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,482 INFO L273 TraceCheckUtils]: 80: Hoare triple {39483#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,483 INFO L273 TraceCheckUtils]: 81: Hoare triple {39483#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,483 INFO L273 TraceCheckUtils]: 82: Hoare triple {39483#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,483 INFO L273 TraceCheckUtils]: 83: Hoare triple {39483#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,483 INFO L273 TraceCheckUtils]: 84: Hoare triple {39483#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,483 INFO L273 TraceCheckUtils]: 85: Hoare triple {39483#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,483 INFO L273 TraceCheckUtils]: 86: Hoare triple {39483#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,483 INFO L273 TraceCheckUtils]: 87: Hoare triple {39483#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,484 INFO L273 TraceCheckUtils]: 88: Hoare triple {39483#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,484 INFO L273 TraceCheckUtils]: 89: Hoare triple {39483#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,484 INFO L273 TraceCheckUtils]: 90: Hoare triple {39483#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,484 INFO L273 TraceCheckUtils]: 91: Hoare triple {39483#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,484 INFO L273 TraceCheckUtils]: 92: Hoare triple {39483#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,484 INFO L273 TraceCheckUtils]: 93: Hoare triple {39483#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,484 INFO L273 TraceCheckUtils]: 94: Hoare triple {39483#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,484 INFO L273 TraceCheckUtils]: 95: Hoare triple {39483#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,484 INFO L273 TraceCheckUtils]: 96: Hoare triple {39483#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,485 INFO L273 TraceCheckUtils]: 97: Hoare triple {39483#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,485 INFO L273 TraceCheckUtils]: 98: Hoare triple {39483#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,485 INFO L273 TraceCheckUtils]: 99: Hoare triple {39483#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,485 INFO L273 TraceCheckUtils]: 100: Hoare triple {39483#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,485 INFO L273 TraceCheckUtils]: 101: Hoare triple {39483#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,485 INFO L273 TraceCheckUtils]: 102: Hoare triple {39483#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,485 INFO L273 TraceCheckUtils]: 103: Hoare triple {39483#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {39483#false} is VALID [2018-11-23 12:48:14,485 INFO L273 TraceCheckUtils]: 104: Hoare triple {39483#false} assume 8672 == #t~mem56;havoc #t~mem56; {39483#false} is VALID [2018-11-23 12:48:14,485 INFO L273 TraceCheckUtils]: 105: Hoare triple {39483#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {39483#false} is VALID [2018-11-23 12:48:14,486 INFO L273 TraceCheckUtils]: 106: Hoare triple {39483#false} assume 4 == ~blastFlag~0; {39483#false} is VALID [2018-11-23 12:48:14,486 INFO L273 TraceCheckUtils]: 107: Hoare triple {39483#false} assume !false; {39483#false} is VALID [2018-11-23 12:48:14,492 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:14,493 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:14,493 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:14,493 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 108 [2018-11-23 12:48:14,494 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:14,494 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:14,586 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 98 edges. 98 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:14,587 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:14,587 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:14,587 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:14,587 INFO L87 Difference]: Start difference. First operand 256 states and 376 transitions. Second operand 4 states. [2018-11-23 12:48:15,966 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:15,967 INFO L93 Difference]: Finished difference Result 498 states and 739 transitions. [2018-11-23 12:48:15,967 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:15,967 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 108 [2018-11-23 12:48:15,967 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:15,967 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:15,969 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 440 transitions. [2018-11-23 12:48:15,969 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:15,971 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 440 transitions. [2018-11-23 12:48:15,971 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 440 transitions. [2018-11-23 12:48:16,386 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 440 edges. 440 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:16,392 INFO L225 Difference]: With dead ends: 498 [2018-11-23 12:48:16,392 INFO L226 Difference]: Without dead ends: 267 [2018-11-23 12:48:16,393 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:16,393 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 267 states. [2018-11-23 12:48:16,485 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 267 to 256. [2018-11-23 12:48:16,485 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:16,485 INFO L82 GeneralOperation]: Start isEquivalent. First operand 267 states. Second operand 256 states. [2018-11-23 12:48:16,486 INFO L74 IsIncluded]: Start isIncluded. First operand 267 states. Second operand 256 states. [2018-11-23 12:48:16,486 INFO L87 Difference]: Start difference. First operand 267 states. Second operand 256 states. [2018-11-23 12:48:16,491 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:16,491 INFO L93 Difference]: Finished difference Result 267 states and 390 transitions. [2018-11-23 12:48:16,491 INFO L276 IsEmpty]: Start isEmpty. Operand 267 states and 390 transitions. [2018-11-23 12:48:16,491 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:16,491 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:16,492 INFO L74 IsIncluded]: Start isIncluded. First operand 256 states. Second operand 267 states. [2018-11-23 12:48:16,492 INFO L87 Difference]: Start difference. First operand 256 states. Second operand 267 states. [2018-11-23 12:48:16,496 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:16,496 INFO L93 Difference]: Finished difference Result 267 states and 390 transitions. [2018-11-23 12:48:16,496 INFO L276 IsEmpty]: Start isEmpty. Operand 267 states and 390 transitions. [2018-11-23 12:48:16,497 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:16,497 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:16,497 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:16,497 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:16,497 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 12:48:16,501 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 375 transitions. [2018-11-23 12:48:16,501 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 375 transitions. Word has length 108 [2018-11-23 12:48:16,501 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:16,501 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 375 transitions. [2018-11-23 12:48:16,501 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:16,502 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 375 transitions. [2018-11-23 12:48:16,502 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2018-11-23 12:48:16,502 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:16,503 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:16,503 INFO L423 AbstractCegarLoop]: === Iteration 34 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:16,503 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:16,503 INFO L82 PathProgramCache]: Analyzing trace with hash -629960509, now seen corresponding path program 1 times [2018-11-23 12:48:16,503 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:16,503 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:16,504 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:16,504 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:16,504 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:16,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:16,648 INFO L256 TraceCheckUtils]: 0: Hoare triple {40891#true} call ULTIMATE.init(); {40891#true} is VALID [2018-11-23 12:48:16,648 INFO L273 TraceCheckUtils]: 1: Hoare triple {40891#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,648 INFO L273 TraceCheckUtils]: 2: Hoare triple {40891#true} assume true; {40891#true} is VALID [2018-11-23 12:48:16,648 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {40891#true} {40891#true} #604#return; {40891#true} is VALID [2018-11-23 12:48:16,649 INFO L256 TraceCheckUtils]: 4: Hoare triple {40891#true} call #t~ret138 := main(); {40891#true} is VALID [2018-11-23 12:48:16,649 INFO L273 TraceCheckUtils]: 5: Hoare triple {40891#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,649 INFO L256 TraceCheckUtils]: 6: Hoare triple {40891#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {40891#true} is VALID [2018-11-23 12:48:16,649 INFO L273 TraceCheckUtils]: 7: Hoare triple {40891#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,649 INFO L273 TraceCheckUtils]: 8: Hoare triple {40891#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {40891#true} is VALID [2018-11-23 12:48:16,650 INFO L273 TraceCheckUtils]: 9: Hoare triple {40891#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {40891#true} is VALID [2018-11-23 12:48:16,650 INFO L273 TraceCheckUtils]: 10: Hoare triple {40891#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {40891#true} is VALID [2018-11-23 12:48:16,650 INFO L273 TraceCheckUtils]: 11: Hoare triple {40891#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,650 INFO L273 TraceCheckUtils]: 12: Hoare triple {40891#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {40891#true} is VALID [2018-11-23 12:48:16,650 INFO L273 TraceCheckUtils]: 13: Hoare triple {40891#true} assume !false; {40891#true} is VALID [2018-11-23 12:48:16,651 INFO L273 TraceCheckUtils]: 14: Hoare triple {40891#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,651 INFO L273 TraceCheckUtils]: 15: Hoare triple {40891#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,651 INFO L273 TraceCheckUtils]: 16: Hoare triple {40891#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,651 INFO L273 TraceCheckUtils]: 17: Hoare triple {40891#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,651 INFO L273 TraceCheckUtils]: 18: Hoare triple {40891#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,651 INFO L273 TraceCheckUtils]: 19: Hoare triple {40891#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,651 INFO L273 TraceCheckUtils]: 20: Hoare triple {40891#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,652 INFO L273 TraceCheckUtils]: 21: Hoare triple {40891#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,652 INFO L273 TraceCheckUtils]: 22: Hoare triple {40891#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,652 INFO L273 TraceCheckUtils]: 23: Hoare triple {40891#true} assume 8464 == #t~mem32;havoc #t~mem32; {40891#true} is VALID [2018-11-23 12:48:16,652 INFO L273 TraceCheckUtils]: 24: Hoare triple {40891#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {40891#true} is VALID [2018-11-23 12:48:16,652 INFO L273 TraceCheckUtils]: 25: Hoare triple {40891#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {40891#true} is VALID [2018-11-23 12:48:16,652 INFO L273 TraceCheckUtils]: 26: Hoare triple {40891#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,652 INFO L273 TraceCheckUtils]: 27: Hoare triple {40891#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,652 INFO L273 TraceCheckUtils]: 28: Hoare triple {40891#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {40891#true} is VALID [2018-11-23 12:48:16,653 INFO L273 TraceCheckUtils]: 29: Hoare triple {40891#true} ~skip~0 := 0; {40891#true} is VALID [2018-11-23 12:48:16,653 INFO L273 TraceCheckUtils]: 30: Hoare triple {40891#true} assume !false; {40891#true} is VALID [2018-11-23 12:48:16,653 INFO L273 TraceCheckUtils]: 31: Hoare triple {40891#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,653 INFO L273 TraceCheckUtils]: 32: Hoare triple {40891#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,653 INFO L273 TraceCheckUtils]: 33: Hoare triple {40891#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,653 INFO L273 TraceCheckUtils]: 34: Hoare triple {40891#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,653 INFO L273 TraceCheckUtils]: 35: Hoare triple {40891#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,653 INFO L273 TraceCheckUtils]: 36: Hoare triple {40891#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,653 INFO L273 TraceCheckUtils]: 37: Hoare triple {40891#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,654 INFO L273 TraceCheckUtils]: 38: Hoare triple {40891#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,654 INFO L273 TraceCheckUtils]: 39: Hoare triple {40891#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,654 INFO L273 TraceCheckUtils]: 40: Hoare triple {40891#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,654 INFO L273 TraceCheckUtils]: 41: Hoare triple {40891#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,654 INFO L273 TraceCheckUtils]: 42: Hoare triple {40891#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,654 INFO L273 TraceCheckUtils]: 43: Hoare triple {40891#true} assume 8496 == #t~mem35;havoc #t~mem35; {40891#true} is VALID [2018-11-23 12:48:16,654 INFO L273 TraceCheckUtils]: 44: Hoare triple {40891#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {40891#true} is VALID [2018-11-23 12:48:16,654 INFO L273 TraceCheckUtils]: 45: Hoare triple {40891#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {40891#true} is VALID [2018-11-23 12:48:16,654 INFO L273 TraceCheckUtils]: 46: Hoare triple {40891#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {40891#true} is VALID [2018-11-23 12:48:16,655 INFO L273 TraceCheckUtils]: 47: Hoare triple {40891#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:16,656 INFO L273 TraceCheckUtils]: 48: Hoare triple {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:16,657 INFO L273 TraceCheckUtils]: 49: Hoare triple {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:16,657 INFO L273 TraceCheckUtils]: 50: Hoare triple {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:16,657 INFO L273 TraceCheckUtils]: 51: Hoare triple {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:16,658 INFO L273 TraceCheckUtils]: 52: Hoare triple {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:16,658 INFO L273 TraceCheckUtils]: 53: Hoare triple {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:16,658 INFO L273 TraceCheckUtils]: 54: Hoare triple {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:16,659 INFO L273 TraceCheckUtils]: 55: Hoare triple {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:16,659 INFO L273 TraceCheckUtils]: 56: Hoare triple {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:16,660 INFO L273 TraceCheckUtils]: 57: Hoare triple {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:16,660 INFO L273 TraceCheckUtils]: 58: Hoare triple {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:16,661 INFO L273 TraceCheckUtils]: 59: Hoare triple {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:16,662 INFO L273 TraceCheckUtils]: 60: Hoare triple {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:16,662 INFO L273 TraceCheckUtils]: 61: Hoare triple {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:16,663 INFO L273 TraceCheckUtils]: 62: Hoare triple {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:16,663 INFO L273 TraceCheckUtils]: 63: Hoare triple {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:16,664 INFO L273 TraceCheckUtils]: 64: Hoare triple {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:16,664 INFO L273 TraceCheckUtils]: 65: Hoare triple {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:16,665 INFO L273 TraceCheckUtils]: 66: Hoare triple {40893#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {40894#(= 8656 |ssl3_accept_#t~mem37|)} is VALID [2018-11-23 12:48:16,666 INFO L273 TraceCheckUtils]: 67: Hoare triple {40894#(= 8656 |ssl3_accept_#t~mem37|)} assume 8512 == #t~mem37;havoc #t~mem37; {40892#false} is VALID [2018-11-23 12:48:16,666 INFO L273 TraceCheckUtils]: 68: Hoare triple {40892#false} call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, 836 + #t~mem72.offset, 4);call #t~mem74 := read~int(#t~mem73.base, 12 + #t~mem73.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,666 INFO L273 TraceCheckUtils]: 69: Hoare triple {40892#false} assume 0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296;havoc #t~mem73.base, #t~mem73.offset;havoc #t~mem74;havoc #t~mem72.base, #t~mem72.offset;~skip~0 := 1; {40892#false} is VALID [2018-11-23 12:48:16,666 INFO L273 TraceCheckUtils]: 70: Hoare triple {40892#false} call write~int(8528, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,667 INFO L273 TraceCheckUtils]: 71: Hoare triple {40892#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,667 INFO L273 TraceCheckUtils]: 72: Hoare triple {40892#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {40892#false} is VALID [2018-11-23 12:48:16,667 INFO L273 TraceCheckUtils]: 73: Hoare triple {40892#false} ~skip~0 := 0; {40892#false} is VALID [2018-11-23 12:48:16,667 INFO L273 TraceCheckUtils]: 74: Hoare triple {40892#false} assume !false; {40892#false} is VALID [2018-11-23 12:48:16,667 INFO L273 TraceCheckUtils]: 75: Hoare triple {40892#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,667 INFO L273 TraceCheckUtils]: 76: Hoare triple {40892#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,668 INFO L273 TraceCheckUtils]: 77: Hoare triple {40892#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,668 INFO L273 TraceCheckUtils]: 78: Hoare triple {40892#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,668 INFO L273 TraceCheckUtils]: 79: Hoare triple {40892#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,668 INFO L273 TraceCheckUtils]: 80: Hoare triple {40892#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,668 INFO L273 TraceCheckUtils]: 81: Hoare triple {40892#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,669 INFO L273 TraceCheckUtils]: 82: Hoare triple {40892#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,669 INFO L273 TraceCheckUtils]: 83: Hoare triple {40892#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,669 INFO L273 TraceCheckUtils]: 84: Hoare triple {40892#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,669 INFO L273 TraceCheckUtils]: 85: Hoare triple {40892#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,669 INFO L273 TraceCheckUtils]: 86: Hoare triple {40892#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,670 INFO L273 TraceCheckUtils]: 87: Hoare triple {40892#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,670 INFO L273 TraceCheckUtils]: 88: Hoare triple {40892#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,670 INFO L273 TraceCheckUtils]: 89: Hoare triple {40892#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,670 INFO L273 TraceCheckUtils]: 90: Hoare triple {40892#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,670 INFO L273 TraceCheckUtils]: 91: Hoare triple {40892#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,670 INFO L273 TraceCheckUtils]: 92: Hoare triple {40892#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,670 INFO L273 TraceCheckUtils]: 93: Hoare triple {40892#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,671 INFO L273 TraceCheckUtils]: 94: Hoare triple {40892#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,671 INFO L273 TraceCheckUtils]: 95: Hoare triple {40892#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,671 INFO L273 TraceCheckUtils]: 96: Hoare triple {40892#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,671 INFO L273 TraceCheckUtils]: 97: Hoare triple {40892#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,671 INFO L273 TraceCheckUtils]: 98: Hoare triple {40892#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,671 INFO L273 TraceCheckUtils]: 99: Hoare triple {40892#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,671 INFO L273 TraceCheckUtils]: 100: Hoare triple {40892#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,671 INFO L273 TraceCheckUtils]: 101: Hoare triple {40892#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,671 INFO L273 TraceCheckUtils]: 102: Hoare triple {40892#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,672 INFO L273 TraceCheckUtils]: 103: Hoare triple {40892#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,672 INFO L273 TraceCheckUtils]: 104: Hoare triple {40892#false} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,672 INFO L273 TraceCheckUtils]: 105: Hoare triple {40892#false} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,672 INFO L273 TraceCheckUtils]: 106: Hoare triple {40892#false} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,672 INFO L273 TraceCheckUtils]: 107: Hoare triple {40892#false} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {40892#false} is VALID [2018-11-23 12:48:16,672 INFO L273 TraceCheckUtils]: 108: Hoare triple {40892#false} assume 8672 == #t~mem56;havoc #t~mem56; {40892#false} is VALID [2018-11-23 12:48:16,672 INFO L273 TraceCheckUtils]: 109: Hoare triple {40892#false} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {40892#false} is VALID [2018-11-23 12:48:16,672 INFO L273 TraceCheckUtils]: 110: Hoare triple {40892#false} assume 4 == ~blastFlag~0; {40892#false} is VALID [2018-11-23 12:48:16,673 INFO L273 TraceCheckUtils]: 111: Hoare triple {40892#false} assume !false; {40892#false} is VALID [2018-11-23 12:48:16,682 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 75 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:16,683 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:16,683 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:16,683 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 112 [2018-11-23 12:48:16,683 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:16,683 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:16,786 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 102 edges. 102 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:16,786 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:16,786 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:16,786 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:16,786 INFO L87 Difference]: Start difference. First operand 256 states and 375 transitions. Second operand 4 states. [2018-11-23 12:48:18,247 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:18,247 INFO L93 Difference]: Finished difference Result 525 states and 773 transitions. [2018-11-23 12:48:18,247 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:18,247 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 112 [2018-11-23 12:48:18,247 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:18,247 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:18,249 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 510 transitions. [2018-11-23 12:48:18,250 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:18,252 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 510 transitions. [2018-11-23 12:48:18,252 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 510 transitions. [2018-11-23 12:48:18,760 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 510 edges. 510 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:18,766 INFO L225 Difference]: With dead ends: 525 [2018-11-23 12:48:18,766 INFO L226 Difference]: Without dead ends: 294 [2018-11-23 12:48:18,767 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:18,767 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2018-11-23 12:48:18,891 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 256. [2018-11-23 12:48:18,892 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:18,892 INFO L82 GeneralOperation]: Start isEquivalent. First operand 294 states. Second operand 256 states. [2018-11-23 12:48:18,892 INFO L74 IsIncluded]: Start isIncluded. First operand 294 states. Second operand 256 states. [2018-11-23 12:48:18,892 INFO L87 Difference]: Start difference. First operand 294 states. Second operand 256 states. [2018-11-23 12:48:18,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:18,899 INFO L93 Difference]: Finished difference Result 294 states and 425 transitions. [2018-11-23 12:48:18,899 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 425 transitions. [2018-11-23 12:48:18,899 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:18,900 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:18,900 INFO L74 IsIncluded]: Start isIncluded. First operand 256 states. Second operand 294 states. [2018-11-23 12:48:18,900 INFO L87 Difference]: Start difference. First operand 256 states. Second operand 294 states. [2018-11-23 12:48:18,905 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:18,905 INFO L93 Difference]: Finished difference Result 294 states and 425 transitions. [2018-11-23 12:48:18,905 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 425 transitions. [2018-11-23 12:48:18,905 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:18,905 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:18,905 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:18,906 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:18,906 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 12:48:18,910 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 374 transitions. [2018-11-23 12:48:18,910 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 374 transitions. Word has length 112 [2018-11-23 12:48:18,910 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:18,910 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 374 transitions. [2018-11-23 12:48:18,910 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:18,911 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 374 transitions. [2018-11-23 12:48:18,911 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2018-11-23 12:48:18,911 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:18,911 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:18,911 INFO L423 AbstractCegarLoop]: === Iteration 35 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:18,912 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:18,912 INFO L82 PathProgramCache]: Analyzing trace with hash 1978826949, now seen corresponding path program 1 times [2018-11-23 12:48:18,912 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:18,912 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:18,913 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:18,913 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:18,913 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:18,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:19,138 INFO L256 TraceCheckUtils]: 0: Hoare triple {42392#true} call ULTIMATE.init(); {42392#true} is VALID [2018-11-23 12:48:19,138 INFO L273 TraceCheckUtils]: 1: Hoare triple {42392#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,138 INFO L273 TraceCheckUtils]: 2: Hoare triple {42392#true} assume true; {42392#true} is VALID [2018-11-23 12:48:19,138 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {42392#true} {42392#true} #604#return; {42392#true} is VALID [2018-11-23 12:48:19,138 INFO L256 TraceCheckUtils]: 4: Hoare triple {42392#true} call #t~ret138 := main(); {42392#true} is VALID [2018-11-23 12:48:19,139 INFO L273 TraceCheckUtils]: 5: Hoare triple {42392#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,139 INFO L256 TraceCheckUtils]: 6: Hoare triple {42392#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {42392#true} is VALID [2018-11-23 12:48:19,139 INFO L273 TraceCheckUtils]: 7: Hoare triple {42392#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,139 INFO L273 TraceCheckUtils]: 8: Hoare triple {42392#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {42392#true} is VALID [2018-11-23 12:48:19,139 INFO L273 TraceCheckUtils]: 9: Hoare triple {42392#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {42392#true} is VALID [2018-11-23 12:48:19,139 INFO L273 TraceCheckUtils]: 10: Hoare triple {42392#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {42392#true} is VALID [2018-11-23 12:48:19,139 INFO L273 TraceCheckUtils]: 11: Hoare triple {42392#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,140 INFO L273 TraceCheckUtils]: 12: Hoare triple {42392#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {42392#true} is VALID [2018-11-23 12:48:19,140 INFO L273 TraceCheckUtils]: 13: Hoare triple {42392#true} assume !false; {42392#true} is VALID [2018-11-23 12:48:19,140 INFO L273 TraceCheckUtils]: 14: Hoare triple {42392#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,140 INFO L273 TraceCheckUtils]: 15: Hoare triple {42392#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,140 INFO L273 TraceCheckUtils]: 16: Hoare triple {42392#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,140 INFO L273 TraceCheckUtils]: 17: Hoare triple {42392#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,140 INFO L273 TraceCheckUtils]: 18: Hoare triple {42392#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,141 INFO L273 TraceCheckUtils]: 19: Hoare triple {42392#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,141 INFO L273 TraceCheckUtils]: 20: Hoare triple {42392#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,141 INFO L273 TraceCheckUtils]: 21: Hoare triple {42392#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,141 INFO L273 TraceCheckUtils]: 22: Hoare triple {42392#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,141 INFO L273 TraceCheckUtils]: 23: Hoare triple {42392#true} assume 8464 == #t~mem32;havoc #t~mem32; {42392#true} is VALID [2018-11-23 12:48:19,141 INFO L273 TraceCheckUtils]: 24: Hoare triple {42392#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {42392#true} is VALID [2018-11-23 12:48:19,142 INFO L273 TraceCheckUtils]: 25: Hoare triple {42392#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {42392#true} is VALID [2018-11-23 12:48:19,142 INFO L273 TraceCheckUtils]: 26: Hoare triple {42392#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,142 INFO L273 TraceCheckUtils]: 27: Hoare triple {42392#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,142 INFO L273 TraceCheckUtils]: 28: Hoare triple {42392#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {42392#true} is VALID [2018-11-23 12:48:19,142 INFO L273 TraceCheckUtils]: 29: Hoare triple {42392#true} ~skip~0 := 0; {42392#true} is VALID [2018-11-23 12:48:19,142 INFO L273 TraceCheckUtils]: 30: Hoare triple {42392#true} assume !false; {42392#true} is VALID [2018-11-23 12:48:19,142 INFO L273 TraceCheckUtils]: 31: Hoare triple {42392#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,143 INFO L273 TraceCheckUtils]: 32: Hoare triple {42392#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,143 INFO L273 TraceCheckUtils]: 33: Hoare triple {42392#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,143 INFO L273 TraceCheckUtils]: 34: Hoare triple {42392#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,143 INFO L273 TraceCheckUtils]: 35: Hoare triple {42392#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,143 INFO L273 TraceCheckUtils]: 36: Hoare triple {42392#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,143 INFO L273 TraceCheckUtils]: 37: Hoare triple {42392#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,143 INFO L273 TraceCheckUtils]: 38: Hoare triple {42392#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,143 INFO L273 TraceCheckUtils]: 39: Hoare triple {42392#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,143 INFO L273 TraceCheckUtils]: 40: Hoare triple {42392#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,144 INFO L273 TraceCheckUtils]: 41: Hoare triple {42392#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,144 INFO L273 TraceCheckUtils]: 42: Hoare triple {42392#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {42392#true} is VALID [2018-11-23 12:48:19,144 INFO L273 TraceCheckUtils]: 43: Hoare triple {42392#true} assume 8496 == #t~mem35;havoc #t~mem35; {42392#true} is VALID [2018-11-23 12:48:19,144 INFO L273 TraceCheckUtils]: 44: Hoare triple {42392#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {42392#true} is VALID [2018-11-23 12:48:19,144 INFO L273 TraceCheckUtils]: 45: Hoare triple {42392#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,148 INFO L273 TraceCheckUtils]: 46: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,150 INFO L273 TraceCheckUtils]: 47: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,150 INFO L273 TraceCheckUtils]: 48: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,152 INFO L273 TraceCheckUtils]: 49: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,152 INFO L273 TraceCheckUtils]: 50: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,154 INFO L273 TraceCheckUtils]: 51: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} ~skip~0 := 0; {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,154 INFO L273 TraceCheckUtils]: 52: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !false; {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,154 INFO L273 TraceCheckUtils]: 53: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,155 INFO L273 TraceCheckUtils]: 54: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,155 INFO L273 TraceCheckUtils]: 55: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,155 INFO L273 TraceCheckUtils]: 56: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,155 INFO L273 TraceCheckUtils]: 57: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,156 INFO L273 TraceCheckUtils]: 58: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,156 INFO L273 TraceCheckUtils]: 59: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,156 INFO L273 TraceCheckUtils]: 60: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,157 INFO L273 TraceCheckUtils]: 61: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,157 INFO L273 TraceCheckUtils]: 62: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,157 INFO L273 TraceCheckUtils]: 63: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,158 INFO L273 TraceCheckUtils]: 64: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,158 INFO L273 TraceCheckUtils]: 65: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,158 INFO L273 TraceCheckUtils]: 66: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,159 INFO L273 TraceCheckUtils]: 67: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume 8512 == #t~mem37;havoc #t~mem37; {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,159 INFO L273 TraceCheckUtils]: 68: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, 836 + #t~mem72.offset, 4);call #t~mem74 := read~int(#t~mem73.base, 12 + #t~mem73.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,160 INFO L273 TraceCheckUtils]: 69: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume 0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296;havoc #t~mem73.base, #t~mem73.offset;havoc #t~mem74;havoc #t~mem72.base, #t~mem72.offset;~skip~0 := 1; {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,160 INFO L273 TraceCheckUtils]: 70: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} call write~int(8528, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,161 INFO L273 TraceCheckUtils]: 71: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,161 INFO L273 TraceCheckUtils]: 72: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,162 INFO L273 TraceCheckUtils]: 73: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} ~skip~0 := 0; {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,162 INFO L273 TraceCheckUtils]: 74: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !false; {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,163 INFO L273 TraceCheckUtils]: 75: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,163 INFO L273 TraceCheckUtils]: 76: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,164 INFO L273 TraceCheckUtils]: 77: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,164 INFO L273 TraceCheckUtils]: 78: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,165 INFO L273 TraceCheckUtils]: 79: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,165 INFO L273 TraceCheckUtils]: 80: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,166 INFO L273 TraceCheckUtils]: 81: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,166 INFO L273 TraceCheckUtils]: 82: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,167 INFO L273 TraceCheckUtils]: 83: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,167 INFO L273 TraceCheckUtils]: 84: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,168 INFO L273 TraceCheckUtils]: 85: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,168 INFO L273 TraceCheckUtils]: 86: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,169 INFO L273 TraceCheckUtils]: 87: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,169 INFO L273 TraceCheckUtils]: 88: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,170 INFO L273 TraceCheckUtils]: 89: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,170 INFO L273 TraceCheckUtils]: 90: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,171 INFO L273 TraceCheckUtils]: 91: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,171 INFO L273 TraceCheckUtils]: 92: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,172 INFO L273 TraceCheckUtils]: 93: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,172 INFO L273 TraceCheckUtils]: 94: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,173 INFO L273 TraceCheckUtils]: 95: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,173 INFO L273 TraceCheckUtils]: 96: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,174 INFO L273 TraceCheckUtils]: 97: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,174 INFO L273 TraceCheckUtils]: 98: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,175 INFO L273 TraceCheckUtils]: 99: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,175 INFO L273 TraceCheckUtils]: 100: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,176 INFO L273 TraceCheckUtils]: 101: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,176 INFO L273 TraceCheckUtils]: 102: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,177 INFO L273 TraceCheckUtils]: 103: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,177 INFO L273 TraceCheckUtils]: 104: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,178 INFO L273 TraceCheckUtils]: 105: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,178 INFO L273 TraceCheckUtils]: 106: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,179 INFO L273 TraceCheckUtils]: 107: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,179 INFO L273 TraceCheckUtils]: 108: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume 8672 == #t~mem56;havoc #t~mem56; {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,180 INFO L273 TraceCheckUtils]: 109: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; {42394#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:19,180 INFO L273 TraceCheckUtils]: 110: Hoare triple {42394#(<= ssl3_accept_~blastFlag~0 2)} assume 4 == ~blastFlag~0; {42393#false} is VALID [2018-11-23 12:48:19,181 INFO L273 TraceCheckUtils]: 111: Hoare triple {42393#false} assume !false; {42393#false} is VALID [2018-11-23 12:48:19,188 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 56 proven. 0 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2018-11-23 12:48:19,188 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:19,188 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:48:19,189 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 112 [2018-11-23 12:48:19,189 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:19,189 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 12:48:19,271 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 84 edges. 84 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:19,271 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:48:19,271 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:48:19,272 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:48:19,272 INFO L87 Difference]: Start difference. First operand 256 states and 374 transitions. Second operand 3 states. [2018-11-23 12:48:19,986 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:19,986 INFO L93 Difference]: Finished difference Result 716 states and 1065 transitions. [2018-11-23 12:48:19,986 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:48:19,986 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 112 [2018-11-23 12:48:19,986 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:19,986 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:48:19,988 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 574 transitions. [2018-11-23 12:48:19,988 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:48:19,990 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 574 transitions. [2018-11-23 12:48:19,990 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 574 transitions. [2018-11-23 12:48:20,541 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 574 edges. 574 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:20,555 INFO L225 Difference]: With dead ends: 716 [2018-11-23 12:48:20,555 INFO L226 Difference]: Without dead ends: 485 [2018-11-23 12:48:20,556 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:48:20,556 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 485 states. [2018-11-23 12:48:20,904 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 485 to 485. [2018-11-23 12:48:20,904 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:20,904 INFO L82 GeneralOperation]: Start isEquivalent. First operand 485 states. Second operand 485 states. [2018-11-23 12:48:20,904 INFO L74 IsIncluded]: Start isIncluded. First operand 485 states. Second operand 485 states. [2018-11-23 12:48:20,905 INFO L87 Difference]: Start difference. First operand 485 states. Second operand 485 states. [2018-11-23 12:48:20,917 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:20,917 INFO L93 Difference]: Finished difference Result 485 states and 717 transitions. [2018-11-23 12:48:20,917 INFO L276 IsEmpty]: Start isEmpty. Operand 485 states and 717 transitions. [2018-11-23 12:48:20,917 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:20,917 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:20,917 INFO L74 IsIncluded]: Start isIncluded. First operand 485 states. Second operand 485 states. [2018-11-23 12:48:20,918 INFO L87 Difference]: Start difference. First operand 485 states. Second operand 485 states. [2018-11-23 12:48:20,929 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:20,929 INFO L93 Difference]: Finished difference Result 485 states and 717 transitions. [2018-11-23 12:48:20,929 INFO L276 IsEmpty]: Start isEmpty. Operand 485 states and 717 transitions. [2018-11-23 12:48:20,930 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:20,930 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:20,930 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:20,930 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:20,930 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 485 states. [2018-11-23 12:48:20,944 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 485 states to 485 states and 717 transitions. [2018-11-23 12:48:20,944 INFO L78 Accepts]: Start accepts. Automaton has 485 states and 717 transitions. Word has length 112 [2018-11-23 12:48:20,944 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:20,944 INFO L480 AbstractCegarLoop]: Abstraction has 485 states and 717 transitions. [2018-11-23 12:48:20,944 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:48:20,944 INFO L276 IsEmpty]: Start isEmpty. Operand 485 states and 717 transitions. [2018-11-23 12:48:20,945 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 132 [2018-11-23 12:48:20,945 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:20,945 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:20,945 INFO L423 AbstractCegarLoop]: === Iteration 36 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:20,945 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:20,946 INFO L82 PathProgramCache]: Analyzing trace with hash 1018025678, now seen corresponding path program 1 times [2018-11-23 12:48:20,946 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:20,946 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:20,947 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:20,947 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:20,947 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:21,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 12:48:21,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 12:48:21,194 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=24604, |#NULL.offset|=24595, |old(#NULL.base)|=24604, |old(#NULL.offset)|=24595, |old(~#SSLv3_server_data~0.base)|=24588, |old(~#SSLv3_server_data~0.offset)|=24586, |old(~init~0)|=24607, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=24586, ~init~0=24607] [?] #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); VAL [|#NULL.base|=0, |#NULL.offset|=0, |old(#NULL.base)|=24604, |old(#NULL.offset)|=24595, |old(~#SSLv3_server_data~0.base)|=24588, |old(~#SSLv3_server_data~0.offset)|=24586, |old(~init~0)|=24607, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume true; VAL [|#NULL.base|=0, |#NULL.offset|=0, |old(#NULL.base)|=24604, |old(#NULL.offset)|=24595, |old(~#SSLv3_server_data~0.base)|=24588, |old(~#SSLv3_server_data~0.offset)|=24586, |old(~init~0)|=24607, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] RET #604#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); VAL [main_~s~0.base=24596, main_~s~0.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |main_#t~malloc3.base|=24596, |main_#t~malloc3.offset|=0, |main_#t~malloc4.base|=24603, |main_#t~malloc4.offset|=0, |main_#t~malloc5.base|=24609, |main_#t~malloc5.offset|=0, |main_#t~malloc6.base|=24578, |main_#t~malloc6.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=0, ssl3_accept_~cb~0.offset=0, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem19.base|=2, |ssl3_accept_#t~mem19.offset|=(- 1), |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem22.base|=3, |ssl3_accept_#t~mem22.offset|=(- 2), |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8464 == #t~mem32;havoc #t~mem32; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 == ~blastFlag~0;~blastFlag~0 := 1; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem127.base|=24603, |ssl3_accept_#t~mem127.offset|=0, |ssl3_accept_#t~mem128|=24598, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem33|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem34|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem35|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8496 == #t~mem35;havoc #t~mem35; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 1 == ~blastFlag~0;~blastFlag~0 := 2; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem71|=1, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem127.base|=24603, |ssl3_accept_#t~mem127.offset|=0, |ssl3_accept_#t~mem128|=24598, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem33|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem34|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem35|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem36|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem37|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem38|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem39|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem40|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem41|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem42|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem43|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem44|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem45|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem46|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem47|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem48|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem49|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem50|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem51|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem52|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem53|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem54|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8656 == #t~mem54;havoc #t~mem54; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem119.base, #t~mem119.offset := read~$Pointer$(#t~mem118.base, 836 + #t~mem118.offset, 4);call write~$Pointer$(#t~mem119.base, #t~mem119.offset, #t~mem117.base, 172 + #t~mem117.offset, 4);havoc #t~mem118.base, #t~mem118.offset;havoc #t~mem117.base, #t~mem117.offset;havoc #t~mem119.base, #t~mem119.offset; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == ~tmp___9~0);assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647;~ret~0 := #t~nondet120;havoc #t~nondet120; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 2 == ~blastFlag~0;~blastFlag~0 := 4; VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);call write~int(8672, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == ~tmp___10~0); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem127.base|=24603, |ssl3_accept_#t~mem127.offset|=0, |ssl3_accept_#t~mem128|=24598, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem33|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem34|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem35|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem36|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem37|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem38|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem39|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem40|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem41|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem42|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem43|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem44|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem45|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem46|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem47|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem48|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem49|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem50|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem51|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem52|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem53|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem54|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem55|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem56|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8672 == #t~mem56;havoc #t~mem56; VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 4 == ~blastFlag~0; VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=4, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] CALL call ULTIMATE.init(); VAL [#NULL.base=24604, #NULL.offset=24595, old(#NULL.base)=24604, old(#NULL.offset)=24595, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=24586, ~init~0=24607] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L1042] ~init~0 := 1; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100); [L1043] call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24604, old(#NULL.offset)=24595, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24604, old(#NULL.offset)=24595, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); [L1074] call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~malloc3.base=24596, #t~malloc3.offset=0, #t~malloc4.base=24603, #t~malloc4.offset=0, #t~malloc5.base=24609, #t~malloc5.offset=0, #t~malloc6.base=24578, #t~malloc6.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1, ~s~0.base=24596, ~s~0.offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1080-L1704] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1081] havoc ~buf~0.base, ~buf~0.offset; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] havoc ~tmp~3; [L1085] havoc ~cb~0.base, ~cb~0.offset; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet8; [L1092] havoc #t~nondet8; [L1093] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet9; [L1093] havoc #t~nondet9; [L1094] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1094] ~tmp___3~0 := #t~nondet10; [L1094] havoc #t~nondet10; [L1095] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1095] ~tmp___4~0 := #t~nondet11; [L1095] havoc #t~nondet11; [L1096] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1096] ~tmp___5~0 := #t~nondet12; [L1096] havoc #t~nondet12; [L1097] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1097] ~tmp___6~0 := #t~nondet13; [L1097] havoc #t~nondet13; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet14; [L1099] havoc #t~nondet14; [L1100] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1100] ~tmp___9~0 := #t~nondet15; [L1100] havoc #t~nondet15; [L1101] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1101] ~tmp___10~0 := #t~nondet16; [L1101] havoc #t~nondet16; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4); [L1107] havoc #t~nondet17; [L1108] call write~int(8464, ~s.base, 52 + ~s.offset, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0.base, ~cb~0.offset := 0, 0; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19.base=2, #t~mem19.offset=-1, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=0, ~cb~0.offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1115-L1119] assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296; [L1115] havoc #t~mem19.base, #t~mem19.offset; [L1116] call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); [L1116] ~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset; [L1116] havoc #t~mem20.base, #t~mem20.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1120] call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4); [L1120] call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4); [L1120] havoc #t~mem21; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1121-L1129] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130] call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22.base=3, #t~mem22.offset=-2, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130-L1134] assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296); [L1130] havoc #t~mem22.base, #t~mem22.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] assume !false; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139-L1660] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142-L1659] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145-L1658] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148-L1657] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151-L1656] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154-L1655] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157-L1654] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160-L1653] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163-L1652] assume 8464 == #t~mem32; [L1163] havoc #t~mem32; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1323] call write~int(0, ~s.base, 48 + ~s.offset, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1325-L1329] assume 0 == ~blastFlag~0; [L1326] ~blastFlag~0 := 1; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1330-L1334] assume !(~ret~0 <= 0); [L1335] ~got_new_session~0 := 1; [L1336] call write~int(8496, ~s.base, 52 + ~s.offset, 4); [L1337] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1661] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24603, #t~mem127.offset=0, #t~mem128=24598, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661-L1689] assume !(0 == #t~mem128); [L1661] havoc #t~mem128; [L1661] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] assume !false; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139-L1660] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142-L1659] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145-L1658] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148-L1657] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151-L1656] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154-L1655] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157-L1654] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160-L1653] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163-L1652] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166-L1651] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169-L1650] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172-L1649] assume 8496 == #t~mem35; [L1172] havoc #t~mem35; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1342-L1346] assume 1 == ~blastFlag~0; [L1343] ~blastFlag~0 := 2; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1347-L1351] assume !(~ret~0 <= 0); [L1352] call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem71=1, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1352-L1356] assume 0 != #t~mem71; [L1352] havoc #t~mem71; [L1353] call write~int(8656, ~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1357] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1661] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24603, #t~mem127.offset=0, #t~mem128=24598, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661-L1689] assume !(0 == #t~mem128); [L1661] havoc #t~mem128; [L1661] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] assume !false; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139-L1660] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142-L1659] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145-L1658] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148-L1657] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151-L1656] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154-L1655] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157-L1654] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160-L1653] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163-L1652] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166-L1651] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169-L1650] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172-L1649] assume !(8496 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175-L1648] assume !(8497 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178-L1647] assume !(8512 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181-L1646] assume !(8513 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184-L1645] assume !(8528 == #t~mem39); [L1184] havoc #t~mem39; [L1187] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187-L1644] assume !(8529 == #t~mem40); [L1187] havoc #t~mem40; [L1190] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190-L1643] assume !(8544 == #t~mem41); [L1190] havoc #t~mem41; [L1193] call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem42=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193-L1642] assume !(8545 == #t~mem42); [L1193] havoc #t~mem42; [L1196] call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem43=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196-L1641] assume !(8560 == #t~mem43); [L1196] havoc #t~mem43; [L1199] call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem44=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199-L1640] assume !(8561 == #t~mem44); [L1199] havoc #t~mem44; [L1202] call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem45=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202-L1639] assume !(8448 == #t~mem45); [L1202] havoc #t~mem45; [L1205] call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem46=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205-L1638] assume !(8576 == #t~mem46); [L1205] havoc #t~mem46; [L1208] call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem47=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208-L1637] assume !(8577 == #t~mem47); [L1208] havoc #t~mem47; [L1211] call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem48=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211-L1636] assume !(8592 == #t~mem48); [L1211] havoc #t~mem48; [L1214] call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem49=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214-L1635] assume !(8593 == #t~mem49); [L1214] havoc #t~mem49; [L1217] call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem50=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217-L1634] assume !(8608 == #t~mem50); [L1217] havoc #t~mem50; [L1220] call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem51=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220-L1633] assume !(8609 == #t~mem51); [L1220] havoc #t~mem51; [L1223] call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem52=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223-L1632] assume !(8640 == #t~mem52); [L1223] havoc #t~mem52; [L1226] call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem53=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226-L1631] assume !(8641 == #t~mem53); [L1226] havoc #t~mem53; [L1229] call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem54=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229-L1630] assume 8656 == #t~mem54; [L1229] havoc #t~mem54; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1550] call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4); [L1550] call #t~mem118.base, #t~mem118.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1550] call #t~mem119.base, #t~mem119.offset := read~$Pointer$(#t~mem118.base, 836 + #t~mem118.offset, 4); [L1550] call write~$Pointer$(#t~mem119.base, #t~mem119.offset, #t~mem117.base, 172 + #t~mem117.offset, 4); [L1550] havoc #t~mem118.base, #t~mem118.offset; [L1550] havoc #t~mem117.base, #t~mem117.offset; [L1550] havoc #t~mem119.base, #t~mem119.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1551-L1556] assume !(0 == ~tmp___9~0); [L1557] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1557] ~ret~0 := #t~nondet120; [L1557] havoc #t~nondet120; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1558-L1566] assume 2 == ~blastFlag~0; [L1559] ~blastFlag~0 := 4; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1567-L1571] assume !(~ret~0 <= 0); [L1572] call write~int(8672, ~s.base, 52 + ~s.offset, 4); [L1573] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574-L1579] assume !(0 == ~tmp___10~0); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1661] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24603, #t~mem127.offset=0, #t~mem128=24598, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661-L1689] assume !(0 == #t~mem128); [L1661] havoc #t~mem128; [L1661] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] assume !false; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139-L1660] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142-L1659] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145-L1658] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148-L1657] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151-L1656] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154-L1655] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157-L1654] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160-L1653] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163-L1652] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166-L1651] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169-L1650] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172-L1649] assume !(8496 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175-L1648] assume !(8497 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178-L1647] assume !(8512 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181-L1646] assume !(8513 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184-L1645] assume !(8528 == #t~mem39); [L1184] havoc #t~mem39; [L1187] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187-L1644] assume !(8529 == #t~mem40); [L1187] havoc #t~mem40; [L1190] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190-L1643] assume !(8544 == #t~mem41); [L1190] havoc #t~mem41; [L1193] call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem42=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193-L1642] assume !(8545 == #t~mem42); [L1193] havoc #t~mem42; [L1196] call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem43=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196-L1641] assume !(8560 == #t~mem43); [L1196] havoc #t~mem43; [L1199] call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem44=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199-L1640] assume !(8561 == #t~mem44); [L1199] havoc #t~mem44; [L1202] call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem45=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202-L1639] assume !(8448 == #t~mem45); [L1202] havoc #t~mem45; [L1205] call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem46=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205-L1638] assume !(8576 == #t~mem46); [L1205] havoc #t~mem46; [L1208] call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem47=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208-L1637] assume !(8577 == #t~mem47); [L1208] havoc #t~mem47; [L1211] call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem48=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211-L1636] assume !(8592 == #t~mem48); [L1211] havoc #t~mem48; [L1214] call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem49=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214-L1635] assume !(8593 == #t~mem49); [L1214] havoc #t~mem49; [L1217] call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem50=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217-L1634] assume !(8608 == #t~mem50); [L1217] havoc #t~mem50; [L1220] call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem51=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220-L1633] assume !(8609 == #t~mem51); [L1220] havoc #t~mem51; [L1223] call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem52=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223-L1632] assume !(8640 == #t~mem52); [L1223] havoc #t~mem52; [L1226] call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem53=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226-L1631] assume !(8641 == #t~mem53); [L1226] havoc #t~mem53; [L1229] call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem54=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229-L1630] assume !(8656 == #t~mem54); [L1229] havoc #t~mem54; [L1232] call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem55=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1232-L1629] assume !(8657 == #t~mem55); [L1232] havoc #t~mem55; [L1235] call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem56=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1235-L1628] assume 8672 == #t~mem56; [L1235] havoc #t~mem56; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1583] ~ret~0 := #t~nondet121; [L1583] havoc #t~nondet121; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584-L1588] assume 4 == ~blastFlag~0; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1702] assert false; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL.base=24604, #NULL.offset=24595, old(#NULL.base)=24604, old(#NULL.offset)=24595, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=24586, ~init~0=24607] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L1042] ~init~0 := 1; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100); [L1043] call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24604, old(#NULL.offset)=24595, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24604, old(#NULL.offset)=24595, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); [L1074] call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~malloc3.base=24596, #t~malloc3.offset=0, #t~malloc4.base=24603, #t~malloc4.offset=0, #t~malloc5.base=24609, #t~malloc5.offset=0, #t~malloc6.base=24578, #t~malloc6.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1, ~s~0.base=24596, ~s~0.offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1080-L1704] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1081] havoc ~buf~0.base, ~buf~0.offset; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] havoc ~tmp~3; [L1085] havoc ~cb~0.base, ~cb~0.offset; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet8; [L1092] havoc #t~nondet8; [L1093] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet9; [L1093] havoc #t~nondet9; [L1094] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1094] ~tmp___3~0 := #t~nondet10; [L1094] havoc #t~nondet10; [L1095] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1095] ~tmp___4~0 := #t~nondet11; [L1095] havoc #t~nondet11; [L1096] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1096] ~tmp___5~0 := #t~nondet12; [L1096] havoc #t~nondet12; [L1097] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1097] ~tmp___6~0 := #t~nondet13; [L1097] havoc #t~nondet13; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet14; [L1099] havoc #t~nondet14; [L1100] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1100] ~tmp___9~0 := #t~nondet15; [L1100] havoc #t~nondet15; [L1101] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1101] ~tmp___10~0 := #t~nondet16; [L1101] havoc #t~nondet16; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4); [L1107] havoc #t~nondet17; [L1108] call write~int(8464, ~s.base, 52 + ~s.offset, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0.base, ~cb~0.offset := 0, 0; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19.base=2, #t~mem19.offset=-1, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=0, ~cb~0.offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1115-L1119] assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296; [L1115] havoc #t~mem19.base, #t~mem19.offset; [L1116] call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); [L1116] ~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset; [L1116] havoc #t~mem20.base, #t~mem20.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1120] call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4); [L1120] call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4); [L1120] havoc #t~mem21; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1121-L1129] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130] call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22.base=3, #t~mem22.offset=-2, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130-L1134] assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296); [L1130] havoc #t~mem22.base, #t~mem22.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] assume !false; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139-L1660] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142-L1659] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145-L1658] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148-L1657] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151-L1656] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154-L1655] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157-L1654] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160-L1653] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163-L1652] assume 8464 == #t~mem32; [L1163] havoc #t~mem32; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1323] call write~int(0, ~s.base, 48 + ~s.offset, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1325-L1329] assume 0 == ~blastFlag~0; [L1326] ~blastFlag~0 := 1; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1330-L1334] assume !(~ret~0 <= 0); [L1335] ~got_new_session~0 := 1; [L1336] call write~int(8496, ~s.base, 52 + ~s.offset, 4); [L1337] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1661] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24603, #t~mem127.offset=0, #t~mem128=24598, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661-L1689] assume !(0 == #t~mem128); [L1661] havoc #t~mem128; [L1661] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] assume !false; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139-L1660] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142-L1659] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145-L1658] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148-L1657] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151-L1656] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154-L1655] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157-L1654] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160-L1653] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163-L1652] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166-L1651] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169-L1650] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172-L1649] assume 8496 == #t~mem35; [L1172] havoc #t~mem35; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1342-L1346] assume 1 == ~blastFlag~0; [L1343] ~blastFlag~0 := 2; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1347-L1351] assume !(~ret~0 <= 0); [L1352] call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem71=1, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1352-L1356] assume 0 != #t~mem71; [L1352] havoc #t~mem71; [L1353] call write~int(8656, ~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1357] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1661] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24603, #t~mem127.offset=0, #t~mem128=24598, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661-L1689] assume !(0 == #t~mem128); [L1661] havoc #t~mem128; [L1661] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] assume !false; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139-L1660] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142-L1659] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145-L1658] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148-L1657] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151-L1656] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154-L1655] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157-L1654] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160-L1653] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163-L1652] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166-L1651] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169-L1650] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172-L1649] assume !(8496 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175-L1648] assume !(8497 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178-L1647] assume !(8512 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181-L1646] assume !(8513 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184-L1645] assume !(8528 == #t~mem39); [L1184] havoc #t~mem39; [L1187] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187-L1644] assume !(8529 == #t~mem40); [L1187] havoc #t~mem40; [L1190] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190-L1643] assume !(8544 == #t~mem41); [L1190] havoc #t~mem41; [L1193] call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem42=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193-L1642] assume !(8545 == #t~mem42); [L1193] havoc #t~mem42; [L1196] call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem43=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196-L1641] assume !(8560 == #t~mem43); [L1196] havoc #t~mem43; [L1199] call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem44=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199-L1640] assume !(8561 == #t~mem44); [L1199] havoc #t~mem44; [L1202] call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem45=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202-L1639] assume !(8448 == #t~mem45); [L1202] havoc #t~mem45; [L1205] call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem46=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205-L1638] assume !(8576 == #t~mem46); [L1205] havoc #t~mem46; [L1208] call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem47=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208-L1637] assume !(8577 == #t~mem47); [L1208] havoc #t~mem47; [L1211] call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem48=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211-L1636] assume !(8592 == #t~mem48); [L1211] havoc #t~mem48; [L1214] call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem49=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214-L1635] assume !(8593 == #t~mem49); [L1214] havoc #t~mem49; [L1217] call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem50=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217-L1634] assume !(8608 == #t~mem50); [L1217] havoc #t~mem50; [L1220] call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem51=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220-L1633] assume !(8609 == #t~mem51); [L1220] havoc #t~mem51; [L1223] call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem52=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223-L1632] assume !(8640 == #t~mem52); [L1223] havoc #t~mem52; [L1226] call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem53=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226-L1631] assume !(8641 == #t~mem53); [L1226] havoc #t~mem53; [L1229] call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem54=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229-L1630] assume 8656 == #t~mem54; [L1229] havoc #t~mem54; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1550] call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4); [L1550] call #t~mem118.base, #t~mem118.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1550] call #t~mem119.base, #t~mem119.offset := read~$Pointer$(#t~mem118.base, 836 + #t~mem118.offset, 4); [L1550] call write~$Pointer$(#t~mem119.base, #t~mem119.offset, #t~mem117.base, 172 + #t~mem117.offset, 4); [L1550] havoc #t~mem118.base, #t~mem118.offset; [L1550] havoc #t~mem117.base, #t~mem117.offset; [L1550] havoc #t~mem119.base, #t~mem119.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1551-L1556] assume !(0 == ~tmp___9~0); [L1557] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1557] ~ret~0 := #t~nondet120; [L1557] havoc #t~nondet120; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1558-L1566] assume 2 == ~blastFlag~0; [L1559] ~blastFlag~0 := 4; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1567-L1571] assume !(~ret~0 <= 0); [L1572] call write~int(8672, ~s.base, 52 + ~s.offset, 4); [L1573] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574-L1579] assume !(0 == ~tmp___10~0); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1661] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24603, #t~mem127.offset=0, #t~mem128=24598, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661-L1689] assume !(0 == #t~mem128); [L1661] havoc #t~mem128; [L1661] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] assume !false; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139-L1660] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142-L1659] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145-L1658] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148-L1657] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151-L1656] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154-L1655] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157-L1654] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160-L1653] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163-L1652] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166-L1651] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169-L1650] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172-L1649] assume !(8496 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175-L1648] assume !(8497 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178-L1647] assume !(8512 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181-L1646] assume !(8513 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184-L1645] assume !(8528 == #t~mem39); [L1184] havoc #t~mem39; [L1187] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187-L1644] assume !(8529 == #t~mem40); [L1187] havoc #t~mem40; [L1190] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190-L1643] assume !(8544 == #t~mem41); [L1190] havoc #t~mem41; [L1193] call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem42=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193-L1642] assume !(8545 == #t~mem42); [L1193] havoc #t~mem42; [L1196] call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem43=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196-L1641] assume !(8560 == #t~mem43); [L1196] havoc #t~mem43; [L1199] call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem44=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199-L1640] assume !(8561 == #t~mem44); [L1199] havoc #t~mem44; [L1202] call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem45=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202-L1639] assume !(8448 == #t~mem45); [L1202] havoc #t~mem45; [L1205] call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem46=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205-L1638] assume !(8576 == #t~mem46); [L1205] havoc #t~mem46; [L1208] call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem47=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208-L1637] assume !(8577 == #t~mem47); [L1208] havoc #t~mem47; [L1211] call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem48=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211-L1636] assume !(8592 == #t~mem48); [L1211] havoc #t~mem48; [L1214] call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem49=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214-L1635] assume !(8593 == #t~mem49); [L1214] havoc #t~mem49; [L1217] call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem50=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217-L1634] assume !(8608 == #t~mem50); [L1217] havoc #t~mem50; [L1220] call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem51=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220-L1633] assume !(8609 == #t~mem51); [L1220] havoc #t~mem51; [L1223] call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem52=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223-L1632] assume !(8640 == #t~mem52); [L1223] havoc #t~mem52; [L1226] call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem53=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226-L1631] assume !(8641 == #t~mem53); [L1226] havoc #t~mem53; [L1229] call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem54=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229-L1630] assume !(8656 == #t~mem54); [L1229] havoc #t~mem54; [L1232] call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem55=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1232-L1629] assume !(8657 == #t~mem55); [L1232] havoc #t~mem55; [L1235] call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem56=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1235-L1628] assume 8672 == #t~mem56; [L1235] havoc #t~mem56; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1583] ~ret~0 := #t~nondet121; [L1583] havoc #t~nondet121; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584-L1588] assume 4 == ~blastFlag~0; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1702] assert false; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=4, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24604, #NULL!offset=24595, old(#NULL!base)=24604, old(#NULL!offset)=24595, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=24586, ~init~0=24607] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24604, old(#NULL!offset)=24595, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1074] FCALL call write~int(8464, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24596, #t~malloc3!offset=0, #t~malloc4!base=24603, #t~malloc4!offset=0, #t~malloc5!base=24609, #t~malloc5!offset=0, #t~malloc6!base=24578, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24596, ~s~0!offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1080-L1704] ~s := #in~s; [L1081] havoc ~buf~0; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] havoc ~tmp~3; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet8; [L1092] havoc #t~nondet8; [L1093] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet9; [L1093] havoc #t~nondet9; [L1094] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1094] ~tmp___3~0 := #t~nondet10; [L1094] havoc #t~nondet10; [L1095] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1095] ~tmp___4~0 := #t~nondet11; [L1095] havoc #t~nondet11; [L1096] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1096] ~tmp___5~0 := #t~nondet12; [L1096] havoc #t~nondet12; [L1097] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1097] ~tmp___6~0 := #t~nondet13; [L1097] havoc #t~nondet13; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet14; [L1099] havoc #t~nondet14; [L1100] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1100] ~tmp___9~0 := #t~nondet15; [L1100] havoc #t~nondet15; [L1101] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1101] ~tmp___10~0 := #t~nondet16; [L1101] havoc #t~nondet16; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] FCALL call write~int(#t~nondet17, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet17; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0, offset: 0 }; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19!base=2, #t~mem19!offset=-1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1115] COND TRUE 0 != (#t~mem19!base + #t~mem19!offset) % 4294967296 [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1120] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] FCALL call write~int(1 + #t~mem21, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] havoc #t~mem21; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1121-L1129] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22!base=3, #t~mem22!offset=-2, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130] COND FALSE !(0 == (#t~mem22!base + #t~mem22!offset) % 4294967296) [L1130] havoc #t~mem22; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND TRUE 8464 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1323] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1325] COND TRUE 0 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1330] COND FALSE !(~ret~0 <= 0) [L1335] ~got_new_session~0 := 1; [L1336] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1337] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND TRUE 8496 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1342] COND TRUE 1 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1347] COND FALSE !(~ret~0 <= 0) [L1352] FCALL call #t~mem71 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem71=1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1352-L1356] COND TRUE 0 != #t~mem71 [L1352] havoc #t~mem71; [L1353] FCALL call write~int(8656, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1357] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190] COND FALSE !(8544 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193] COND FALSE !(8545 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196] COND FALSE !(8560 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199] COND FALSE !(8561 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202] COND FALSE !(8448 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205] COND FALSE !(8576 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208] COND FALSE !(8577 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211] COND FALSE !(8592 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214] COND FALSE !(8593 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217] COND FALSE !(8608 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220] COND FALSE !(8609 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem52=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223] COND FALSE !(8640 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem53=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226] COND FALSE !(8641 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem54=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229] COND TRUE 8656 == #t~mem54 [L1229] havoc #t~mem54; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1550] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1550] FCALL call #t~mem118 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1550] FCALL call #t~mem119 := read~$Pointer$({ base: #t~mem118!base, offset: 836 + #t~mem118!offset }, 4); [L1550] FCALL call write~$Pointer$(#t~mem119, { base: #t~mem117!base, offset: 172 + #t~mem117!offset }, 4); [L1550] havoc #t~mem118; [L1550] havoc #t~mem117; [L1550] havoc #t~mem119; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1551] COND FALSE !(0 == ~tmp___9~0) [L1557] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1557] ~ret~0 := #t~nondet120; [L1557] havoc #t~nondet120; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1558] COND TRUE 2 == ~blastFlag~0 [L1559] ~blastFlag~0 := 4; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1567] COND FALSE !(~ret~0 <= 0) [L1572] FCALL call write~int(8672, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1573] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574] COND FALSE !(0 == ~tmp___10~0) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190] COND FALSE !(8544 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193] COND FALSE !(8545 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196] COND FALSE !(8560 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199] COND FALSE !(8561 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202] COND FALSE !(8448 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205] COND FALSE !(8576 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208] COND FALSE !(8577 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211] COND FALSE !(8592 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214] COND FALSE !(8593 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217] COND FALSE !(8608 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220] COND FALSE !(8609 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem52=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223] COND FALSE !(8640 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem53=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226] COND FALSE !(8641 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem54=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229] COND FALSE !(8656 == #t~mem54) [L1229] havoc #t~mem54; [L1232] FCALL call #t~mem55 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem55=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1232] COND FALSE !(8657 == #t~mem55) [L1232] havoc #t~mem55; [L1235] FCALL call #t~mem56 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem56=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1235] COND TRUE 8672 == #t~mem56 [L1235] havoc #t~mem56; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1583] ~ret~0 := #t~nondet121; [L1583] havoc #t~nondet121; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584] COND TRUE 4 == ~blastFlag~0 VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1702] assert false; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24604, #NULL!offset=24595, old(#NULL!base)=24604, old(#NULL!offset)=24595, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=24586, ~init~0=24607] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24604, old(#NULL!offset)=24595, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1074] FCALL call write~int(8464, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24596, #t~malloc3!offset=0, #t~malloc4!base=24603, #t~malloc4!offset=0, #t~malloc5!base=24609, #t~malloc5!offset=0, #t~malloc6!base=24578, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24596, ~s~0!offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1080-L1704] ~s := #in~s; [L1081] havoc ~buf~0; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] havoc ~tmp~3; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet8; [L1092] havoc #t~nondet8; [L1093] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet9; [L1093] havoc #t~nondet9; [L1094] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1094] ~tmp___3~0 := #t~nondet10; [L1094] havoc #t~nondet10; [L1095] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1095] ~tmp___4~0 := #t~nondet11; [L1095] havoc #t~nondet11; [L1096] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1096] ~tmp___5~0 := #t~nondet12; [L1096] havoc #t~nondet12; [L1097] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1097] ~tmp___6~0 := #t~nondet13; [L1097] havoc #t~nondet13; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet14; [L1099] havoc #t~nondet14; [L1100] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1100] ~tmp___9~0 := #t~nondet15; [L1100] havoc #t~nondet15; [L1101] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1101] ~tmp___10~0 := #t~nondet16; [L1101] havoc #t~nondet16; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] FCALL call write~int(#t~nondet17, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet17; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0, offset: 0 }; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19!base=2, #t~mem19!offset=-1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1115] COND TRUE 0 != (#t~mem19!base + #t~mem19!offset) % 4294967296 [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1120] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] FCALL call write~int(1 + #t~mem21, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] havoc #t~mem21; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1121-L1129] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22!base=3, #t~mem22!offset=-2, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130] COND FALSE !(0 == (#t~mem22!base + #t~mem22!offset) % 4294967296) [L1130] havoc #t~mem22; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND TRUE 8464 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1323] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1325] COND TRUE 0 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1330] COND FALSE !(~ret~0 <= 0) [L1335] ~got_new_session~0 := 1; [L1336] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1337] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND TRUE 8496 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1342] COND TRUE 1 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1347] COND FALSE !(~ret~0 <= 0) [L1352] FCALL call #t~mem71 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem71=1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1352-L1356] COND TRUE 0 != #t~mem71 [L1352] havoc #t~mem71; [L1353] FCALL call write~int(8656, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1357] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190] COND FALSE !(8544 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193] COND FALSE !(8545 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196] COND FALSE !(8560 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199] COND FALSE !(8561 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202] COND FALSE !(8448 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205] COND FALSE !(8576 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208] COND FALSE !(8577 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211] COND FALSE !(8592 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214] COND FALSE !(8593 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217] COND FALSE !(8608 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220] COND FALSE !(8609 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem52=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223] COND FALSE !(8640 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem53=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226] COND FALSE !(8641 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem54=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229] COND TRUE 8656 == #t~mem54 [L1229] havoc #t~mem54; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1550] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1550] FCALL call #t~mem118 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1550] FCALL call #t~mem119 := read~$Pointer$({ base: #t~mem118!base, offset: 836 + #t~mem118!offset }, 4); [L1550] FCALL call write~$Pointer$(#t~mem119, { base: #t~mem117!base, offset: 172 + #t~mem117!offset }, 4); [L1550] havoc #t~mem118; [L1550] havoc #t~mem117; [L1550] havoc #t~mem119; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1551] COND FALSE !(0 == ~tmp___9~0) [L1557] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1557] ~ret~0 := #t~nondet120; [L1557] havoc #t~nondet120; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1558] COND TRUE 2 == ~blastFlag~0 [L1559] ~blastFlag~0 := 4; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1567] COND FALSE !(~ret~0 <= 0) [L1572] FCALL call write~int(8672, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1573] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574] COND FALSE !(0 == ~tmp___10~0) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190] COND FALSE !(8544 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193] COND FALSE !(8545 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196] COND FALSE !(8560 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199] COND FALSE !(8561 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202] COND FALSE !(8448 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205] COND FALSE !(8576 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208] COND FALSE !(8577 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211] COND FALSE !(8592 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214] COND FALSE !(8593 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217] COND FALSE !(8608 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220] COND FALSE !(8609 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem52=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223] COND FALSE !(8640 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem53=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226] COND FALSE !(8641 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem54=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229] COND FALSE !(8656 == #t~mem54) [L1229] havoc #t~mem54; [L1232] FCALL call #t~mem55 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem55=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1232] COND FALSE !(8657 == #t~mem55) [L1232] havoc #t~mem55; [L1235] FCALL call #t~mem56 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem56=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1235] COND TRUE 8672 == #t~mem56 [L1235] havoc #t~mem56; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1583] ~ret~0 := #t~nondet121; [L1583] havoc #t~nondet121; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584] COND TRUE 4 == ~blastFlag~0 VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1702] assert false; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24604, #NULL!offset=24595, old(#NULL!base)=24604, old(#NULL!offset)=24595, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=24586, ~init~0=24607] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24604, old(#NULL!offset)=24595, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1074] FCALL call write~int(8464, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24596, #t~malloc3!offset=0, #t~malloc4!base=24603, #t~malloc4!offset=0, #t~malloc5!base=24609, #t~malloc5!offset=0, #t~malloc6!base=24578, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24596, ~s~0!offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1080-L1704] ~s := #in~s; [L1081] havoc ~buf~0; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] havoc ~tmp~3; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet8; [L1092] havoc #t~nondet8; [L1093] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet9; [L1093] havoc #t~nondet9; [L1094] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1094] ~tmp___3~0 := #t~nondet10; [L1094] havoc #t~nondet10; [L1095] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1095] ~tmp___4~0 := #t~nondet11; [L1095] havoc #t~nondet11; [L1096] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1096] ~tmp___5~0 := #t~nondet12; [L1096] havoc #t~nondet12; [L1097] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1097] ~tmp___6~0 := #t~nondet13; [L1097] havoc #t~nondet13; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet14; [L1099] havoc #t~nondet14; [L1100] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1100] ~tmp___9~0 := #t~nondet15; [L1100] havoc #t~nondet15; [L1101] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1101] ~tmp___10~0 := #t~nondet16; [L1101] havoc #t~nondet16; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] FCALL call write~int(#t~nondet17, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet17; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0, offset: 0 }; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19!base=2, #t~mem19!offset=-1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1115] COND TRUE 0 != (#t~mem19!base + #t~mem19!offset) % 4294967296 [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1120] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] FCALL call write~int(1 + #t~mem21, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] havoc #t~mem21; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1121-L1129] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22!base=3, #t~mem22!offset=-2, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130] COND FALSE !(0 == (#t~mem22!base + #t~mem22!offset) % 4294967296) [L1130] havoc #t~mem22; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND TRUE 8464 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1323] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1325] COND TRUE 0 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1330] COND FALSE !(~ret~0 <= 0) [L1335] ~got_new_session~0 := 1; [L1336] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1337] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND TRUE 8496 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1342] COND TRUE 1 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1347] COND FALSE !(~ret~0 <= 0) [L1352] FCALL call #t~mem71 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem71=1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1352-L1356] COND TRUE 0 != #t~mem71 [L1352] havoc #t~mem71; [L1353] FCALL call write~int(8656, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1357] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190] COND FALSE !(8544 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193] COND FALSE !(8545 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196] COND FALSE !(8560 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199] COND FALSE !(8561 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202] COND FALSE !(8448 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205] COND FALSE !(8576 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208] COND FALSE !(8577 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211] COND FALSE !(8592 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214] COND FALSE !(8593 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217] COND FALSE !(8608 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220] COND FALSE !(8609 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem52=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223] COND FALSE !(8640 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem53=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226] COND FALSE !(8641 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem54=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229] COND TRUE 8656 == #t~mem54 [L1229] havoc #t~mem54; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1550] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1550] FCALL call #t~mem118 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1550] FCALL call #t~mem119 := read~$Pointer$({ base: #t~mem118!base, offset: 836 + #t~mem118!offset }, 4); [L1550] FCALL call write~$Pointer$(#t~mem119, { base: #t~mem117!base, offset: 172 + #t~mem117!offset }, 4); [L1550] havoc #t~mem118; [L1550] havoc #t~mem117; [L1550] havoc #t~mem119; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1551] COND FALSE !(0 == ~tmp___9~0) [L1557] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1557] ~ret~0 := #t~nondet120; [L1557] havoc #t~nondet120; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1558] COND TRUE 2 == ~blastFlag~0 [L1559] ~blastFlag~0 := 4; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1567] COND FALSE !(~ret~0 <= 0) [L1572] FCALL call write~int(8672, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1573] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574] COND FALSE !(0 == ~tmp___10~0) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190] COND FALSE !(8544 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193] COND FALSE !(8545 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196] COND FALSE !(8560 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199] COND FALSE !(8561 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202] COND FALSE !(8448 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205] COND FALSE !(8576 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208] COND FALSE !(8577 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211] COND FALSE !(8592 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214] COND FALSE !(8593 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217] COND FALSE !(8608 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220] COND FALSE !(8609 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem52=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223] COND FALSE !(8640 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem53=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226] COND FALSE !(8641 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem54=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229] COND FALSE !(8656 == #t~mem54) [L1229] havoc #t~mem54; [L1232] FCALL call #t~mem55 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem55=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1232] COND FALSE !(8657 == #t~mem55) [L1232] havoc #t~mem55; [L1235] FCALL call #t~mem56 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem56=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1235] COND TRUE 8672 == #t~mem56 [L1235] havoc #t~mem56; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1583] ~ret~0 := #t~nondet121; [L1583] havoc #t~nondet121; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584] COND TRUE 4 == ~blastFlag~0 VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1702] assert false; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] ----- [2018-11-23 12:48:21,428 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 24586 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# [2018-11-23 12:48:21,429 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 24588 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24604, #NULL!offset=24595, old(#NULL!base)=24604, old(#NULL!offset)=24595, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=24586, ~init~0=24607] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24604, old(#NULL!offset)=24595, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1074] FCALL call write~int(8464, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24596, #t~malloc3!offset=0, #t~malloc4!base=24603, #t~malloc4!offset=0, #t~malloc5!base=24609, #t~malloc5!offset=0, #t~malloc6!base=24578, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24596, ~s~0!offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1080-L1704] ~s := #in~s; [L1081] havoc ~buf~0; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] havoc ~tmp~3; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet8; [L1092] havoc #t~nondet8; [L1093] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet9; [L1093] havoc #t~nondet9; [L1094] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1094] ~tmp___3~0 := #t~nondet10; [L1094] havoc #t~nondet10; [L1095] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1095] ~tmp___4~0 := #t~nondet11; [L1095] havoc #t~nondet11; [L1096] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1096] ~tmp___5~0 := #t~nondet12; [L1096] havoc #t~nondet12; [L1097] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1097] ~tmp___6~0 := #t~nondet13; [L1097] havoc #t~nondet13; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet14; [L1099] havoc #t~nondet14; [L1100] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1100] ~tmp___9~0 := #t~nondet15; [L1100] havoc #t~nondet15; [L1101] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1101] ~tmp___10~0 := #t~nondet16; [L1101] havoc #t~nondet16; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] FCALL call write~int(#t~nondet17, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet17; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0, offset: 0 }; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19!base=2, #t~mem19!offset=-1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1115] COND TRUE 0 != (#t~mem19!base + #t~mem19!offset) % 4294967296 [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1120] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] FCALL call write~int(1 + #t~mem21, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] havoc #t~mem21; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1121-L1129] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22!base=3, #t~mem22!offset=-2, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130] COND FALSE !(0 == (#t~mem22!base + #t~mem22!offset) % 4294967296) [L1130] havoc #t~mem22; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND TRUE 8464 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1323] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1325] COND TRUE 0 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1330] COND FALSE !(~ret~0 <= 0) [L1335] ~got_new_session~0 := 1; [L1336] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1337] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND TRUE 8496 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1342] COND TRUE 1 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1347] COND FALSE !(~ret~0 <= 0) [L1352] FCALL call #t~mem71 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem71=1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1352-L1356] COND TRUE 0 != #t~mem71 [L1352] havoc #t~mem71; [L1353] FCALL call write~int(8656, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1357] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190] COND FALSE !(8544 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193] COND FALSE !(8545 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196] COND FALSE !(8560 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199] COND FALSE !(8561 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202] COND FALSE !(8448 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205] COND FALSE !(8576 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208] COND FALSE !(8577 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211] COND FALSE !(8592 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214] COND FALSE !(8593 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217] COND FALSE !(8608 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220] COND FALSE !(8609 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem52=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223] COND FALSE !(8640 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem53=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226] COND FALSE !(8641 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem54=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229] COND TRUE 8656 == #t~mem54 [L1229] havoc #t~mem54; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1550] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1550] FCALL call #t~mem118 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1550] FCALL call #t~mem119 := read~$Pointer$({ base: #t~mem118!base, offset: 836 + #t~mem118!offset }, 4); [L1550] FCALL call write~$Pointer$(#t~mem119, { base: #t~mem117!base, offset: 172 + #t~mem117!offset }, 4); [L1550] havoc #t~mem118; [L1550] havoc #t~mem117; [L1550] havoc #t~mem119; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1551] COND FALSE !(0 == ~tmp___9~0) [L1557] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1557] ~ret~0 := #t~nondet120; [L1557] havoc #t~nondet120; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1558] COND TRUE 2 == ~blastFlag~0 [L1559] ~blastFlag~0 := 4; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1567] COND FALSE !(~ret~0 <= 0) [L1572] FCALL call write~int(8672, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1573] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574] COND FALSE !(0 == ~tmp___10~0) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190] COND FALSE !(8544 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193] COND FALSE !(8545 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196] COND FALSE !(8560 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199] COND FALSE !(8561 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202] COND FALSE !(8448 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205] COND FALSE !(8576 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208] COND FALSE !(8577 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211] COND FALSE !(8592 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214] COND FALSE !(8593 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217] COND FALSE !(8608 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220] COND FALSE !(8609 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem52=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223] COND FALSE !(8640 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem53=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226] COND FALSE !(8641 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem54=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229] COND FALSE !(8656 == #t~mem54) [L1229] havoc #t~mem54; [L1232] FCALL call #t~mem55 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem55=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1232] COND FALSE !(8657 == #t~mem55) [L1232] havoc #t~mem55; [L1235] FCALL call #t~mem56 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem56=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1235] COND TRUE 8672 == #t~mem56 [L1235] havoc #t~mem56; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1583] ~ret~0 := #t~nondet121; [L1583] havoc #t~nondet121; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584] COND TRUE 4 == ~blastFlag~0 VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1702] assert false; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=4, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=24607, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={24587:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) [L1074] s->state = 8464 VAL [init=1, malloc(sizeof(SSL))={24596:0}, malloc(sizeof(SSL_CTX))={24609:0}, malloc(sizeof(SSL_SESSION))={24578:0}, malloc(sizeof(struct ssl3_state_st))={24603:0}, s={24596:0}, SSLv3_server_data={24587:0}] [L1075] CALL ssl3_accept(s) VAL [init=1, s={24596:0}, SSLv3_server_data={24587:0}] [L1081] BUF_MEM *buf ; [L1082] unsigned long l ; [L1083] unsigned long Time ; [L1084] unsigned long tmp ; [L1085] void (*cb)() ; [L1086] long num1 ; [L1087] int ret ; [L1088] int new_state ; [L1089] int state ; [L1090] int skip ; [L1091] int got_new_session ; [L1092] int tmp___1 = __VERIFIER_nondet_int() ; [L1093] int tmp___2 = __VERIFIER_nondet_int() ; [L1094] int tmp___3 = __VERIFIER_nondet_int() ; [L1095] int tmp___4 = __VERIFIER_nondet_int() ; [L1096] int tmp___5 = __VERIFIER_nondet_int() ; [L1097] int tmp___6 = __VERIFIER_nondet_int() ; [L1098] int tmp___7 ; [L1099] long tmp___8 = __VERIFIER_nondet_long() ; [L1100] int tmp___9 = __VERIFIER_nondet_int() ; [L1101] int tmp___10 = __VERIFIER_nondet_int() ; [L1102] int blastFlag ; [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] tmp = __VERIFIER_nondet_int() [L1110] Time = tmp [L1111] cb = (void (*)())((void *)0) [L1112] ret = -1 [L1113] skip = 0 [L1114] got_new_session = 0 [L1115] EXPR s->info_callback VAL [={0:0}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->info_callback={2:-1}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1115] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1116] EXPR s->info_callback [L1116] cb = s->info_callback [L1120] EXPR s->in_handshake [L1120] s->in_handshake += 1 [L1121] COND FALSE !(tmp___1 & 12288) VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1130] EXPR s->cert VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->cert={3:-2}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1130] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND TRUE s->state == 8464 [L1323] s->shutdown = 0 [L1324] ret = __VERIFIER_nondet_int() [L1325] COND TRUE blastFlag == 0 [L1326] blastFlag = 1 VAL [={2:-1}, blastFlag=1, got_new_session=0, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1330] COND FALSE !(ret <= 0) [L1335] got_new_session = 1 [L1336] s->state = 8496 [L1337] s->init_num = 0 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] EXPR s->s3 [L1661] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24598, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->s3={24603:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1690] skip = 0 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND TRUE s->state == 8496 [L1341] ret = __VERIFIER_nondet_int() [L1342] COND TRUE blastFlag == 1 [L1343] blastFlag = 2 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1347] COND FALSE !(ret <= 0) [L1352] s->hit VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->hit=1, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1352] COND TRUE s->hit [L1353] s->state = 8656 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1357] s->init_num = 0 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] EXPR s->s3 [L1661] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24598, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->s3={24603:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1690] skip = 0 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1190] COND FALSE !(s->state == 8544) [L1193] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1193] COND FALSE !(s->state == 8545) [L1196] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1196] COND FALSE !(s->state == 8560) [L1199] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1199] COND FALSE !(s->state == 8561) [L1202] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1202] COND FALSE !(s->state == 8448) [L1205] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1205] COND FALSE !(s->state == 8576) [L1208] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1208] COND FALSE !(s->state == 8577) [L1211] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1211] COND FALSE !(s->state == 8592) [L1214] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1214] COND FALSE !(s->state == 8593) [L1217] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1217] COND FALSE !(s->state == 8608) [L1220] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1220] COND FALSE !(s->state == 8609) [L1223] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1223] COND FALSE !(s->state == 8640) [L1226] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1226] COND FALSE !(s->state == 8641) [L1229] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1229] COND TRUE s->state == 8656 [L1550] EXPR s->session [L1550] EXPR s->s3 [L1550] EXPR (s->s3)->tmp.new_cipher [L1550] (s->session)->cipher = (s->s3)->tmp.new_cipher [L1551] COND FALSE !(! tmp___9) [L1557] ret = __VERIFIER_nondet_int() [L1558] COND TRUE blastFlag == 2 [L1559] blastFlag = 4 VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1567] COND FALSE !(ret <= 0) [L1572] s->state = 8672 [L1573] s->init_num = 0 VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1574] COND FALSE !(! tmp___10) VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] EXPR s->s3 [L1661] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24598, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->s3={24603:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1690] skip = 0 VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1190] COND FALSE !(s->state == 8544) [L1193] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1193] COND FALSE !(s->state == 8545) [L1196] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1196] COND FALSE !(s->state == 8560) [L1199] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1199] COND FALSE !(s->state == 8561) [L1202] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1202] COND FALSE !(s->state == 8448) [L1205] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1205] COND FALSE !(s->state == 8576) [L1208] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1208] COND FALSE !(s->state == 8577) [L1211] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1211] COND FALSE !(s->state == 8592) [L1214] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1214] COND FALSE !(s->state == 8593) [L1217] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1217] COND FALSE !(s->state == 8608) [L1220] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1220] COND FALSE !(s->state == 8609) [L1223] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1223] COND FALSE !(s->state == 8640) [L1226] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1226] COND FALSE !(s->state == 8641) [L1229] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1229] COND FALSE !(s->state == 8656) [L1232] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1232] COND FALSE !(s->state == 8657) [L1235] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1235] COND TRUE s->state == 8672 [L1583] ret = __VERIFIER_nondet_int() [L1584] COND TRUE blastFlag == 4 VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=0, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1702] __VERIFIER_error() VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=0, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] ----- [2018-11-23 12:48:21,515 WARN L170 areAnnotationChecker]: ULTIMATE.initENTRY has no Hoare annotation [2018-11-23 12:48:21,515 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2018-11-23 12:48:21,515 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2018-11-23 12:48:21,515 WARN L170 areAnnotationChecker]: mainENTRY has no Hoare annotation [2018-11-23 12:48:21,515 WARN L170 areAnnotationChecker]: ssl3_acceptENTRY has no Hoare annotation [2018-11-23 12:48:21,515 WARN L170 areAnnotationChecker]: ULTIMATE.initFINAL has no Hoare annotation [2018-11-23 12:48:21,515 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2018-11-23 12:48:21,516 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2018-11-23 12:48:21,516 WARN L170 areAnnotationChecker]: L1075 has no Hoare annotation [2018-11-23 12:48:21,516 WARN L170 areAnnotationChecker]: L1075 has no Hoare annotation [2018-11-23 12:48:21,516 WARN L170 areAnnotationChecker]: L1115 has no Hoare annotation [2018-11-23 12:48:21,516 WARN L170 areAnnotationChecker]: L1115 has no Hoare annotation [2018-11-23 12:48:21,516 WARN L170 areAnnotationChecker]: ULTIMATE.initEXIT has no Hoare annotation [2018-11-23 12:48:21,516 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2018-11-23 12:48:21,516 WARN L170 areAnnotationChecker]: L1075-1 has no Hoare annotation [2018-11-23 12:48:21,516 WARN L170 areAnnotationChecker]: L1115-2 has no Hoare annotation [2018-11-23 12:48:21,517 WARN L170 areAnnotationChecker]: mainFINAL has no Hoare annotation [2018-11-23 12:48:21,517 WARN L170 areAnnotationChecker]: L1121 has no Hoare annotation [2018-11-23 12:48:21,517 WARN L170 areAnnotationChecker]: L1121 has no Hoare annotation [2018-11-23 12:48:21,517 WARN L170 areAnnotationChecker]: mainEXIT has no Hoare annotation [2018-11-23 12:48:21,517 WARN L170 areAnnotationChecker]: L1122 has no Hoare annotation [2018-11-23 12:48:21,517 WARN L170 areAnnotationChecker]: L1122 has no Hoare annotation [2018-11-23 12:48:21,517 WARN L170 areAnnotationChecker]: L1121-1 has no Hoare annotation [2018-11-23 12:48:21,517 WARN L170 areAnnotationChecker]: L1130 has no Hoare annotation [2018-11-23 12:48:21,517 WARN L170 areAnnotationChecker]: L1130 has no Hoare annotation [2018-11-23 12:48:21,517 WARN L170 areAnnotationChecker]: ssl3_acceptFINAL has no Hoare annotation [2018-11-23 12:48:21,517 WARN L170 areAnnotationChecker]: L1136-2 has no Hoare annotation [2018-11-23 12:48:21,518 WARN L170 areAnnotationChecker]: L1136-2 has no Hoare annotation [2018-11-23 12:48:21,518 WARN L170 areAnnotationChecker]: L1136-2 has no Hoare annotation [2018-11-23 12:48:21,518 WARN L170 areAnnotationChecker]: ssl3_acceptEXIT has no Hoare annotation [2018-11-23 12:48:21,518 WARN L170 areAnnotationChecker]: L1692 has no Hoare annotation [2018-11-23 12:48:21,518 WARN L170 areAnnotationChecker]: L1137 has no Hoare annotation [2018-11-23 12:48:21,518 WARN L170 areAnnotationChecker]: L1696 has no Hoare annotation [2018-11-23 12:48:21,518 WARN L170 areAnnotationChecker]: L1696 has no Hoare annotation [2018-11-23 12:48:21,518 WARN L170 areAnnotationChecker]: L1139 has no Hoare annotation [2018-11-23 12:48:21,518 WARN L170 areAnnotationChecker]: L1139 has no Hoare annotation [2018-11-23 12:48:21,518 WARN L170 areAnnotationChecker]: L1696-2 has no Hoare annotation [2018-11-23 12:48:21,519 WARN L170 areAnnotationChecker]: L1140 has no Hoare annotation [2018-11-23 12:48:21,519 WARN L170 areAnnotationChecker]: L1142 has no Hoare annotation [2018-11-23 12:48:21,519 WARN L170 areAnnotationChecker]: L1142 has no Hoare annotation [2018-11-23 12:48:21,519 WARN L170 areAnnotationChecker]: L1249 has no Hoare annotation [2018-11-23 12:48:21,519 WARN L170 areAnnotationChecker]: L1145 has no Hoare annotation [2018-11-23 12:48:21,519 WARN L170 areAnnotationChecker]: L1145 has no Hoare annotation [2018-11-23 12:48:21,519 WARN L170 areAnnotationChecker]: L1254 has no Hoare annotation [2018-11-23 12:48:21,519 WARN L170 areAnnotationChecker]: L1254 has no Hoare annotation [2018-11-23 12:48:21,519 WARN L170 areAnnotationChecker]: L1148 has no Hoare annotation [2018-11-23 12:48:21,519 WARN L170 areAnnotationChecker]: L1148 has no Hoare annotation [2018-11-23 12:48:21,520 WARN L170 areAnnotationChecker]: L1254-2 has no Hoare annotation [2018-11-23 12:48:21,520 WARN L170 areAnnotationChecker]: L1151 has no Hoare annotation [2018-11-23 12:48:21,520 WARN L170 areAnnotationChecker]: L1151 has no Hoare annotation [2018-11-23 12:48:21,520 WARN L170 areAnnotationChecker]: L1259 has no Hoare annotation [2018-11-23 12:48:21,520 WARN L170 areAnnotationChecker]: L1259 has no Hoare annotation [2018-11-23 12:48:21,520 WARN L170 areAnnotationChecker]: L1154 has no Hoare annotation [2018-11-23 12:48:21,520 WARN L170 areAnnotationChecker]: L1154 has no Hoare annotation [2018-11-23 12:48:21,520 WARN L170 areAnnotationChecker]: L1265 has no Hoare annotation [2018-11-23 12:48:21,520 WARN L170 areAnnotationChecker]: L1265 has no Hoare annotation [2018-11-23 12:48:21,520 WARN L170 areAnnotationChecker]: L1158 has no Hoare annotation [2018-11-23 12:48:21,521 WARN L170 areAnnotationChecker]: L1157 has no Hoare annotation [2018-11-23 12:48:21,521 WARN L170 areAnnotationChecker]: L1157 has no Hoare annotation [2018-11-23 12:48:21,521 WARN L170 areAnnotationChecker]: L1267 has no Hoare annotation [2018-11-23 12:48:21,521 WARN L170 areAnnotationChecker]: L1267 has no Hoare annotation [2018-11-23 12:48:21,521 WARN L170 areAnnotationChecker]: L1265-2 has no Hoare annotation [2018-11-23 12:48:21,521 WARN L170 areAnnotationChecker]: L1265-2 has no Hoare annotation [2018-11-23 12:48:21,521 WARN L170 areAnnotationChecker]: L1308 has no Hoare annotation [2018-11-23 12:48:21,521 WARN L170 areAnnotationChecker]: L1308 has no Hoare annotation [2018-11-23 12:48:21,521 WARN L170 areAnnotationChecker]: L1160 has no Hoare annotation [2018-11-23 12:48:21,521 WARN L170 areAnnotationChecker]: L1160 has no Hoare annotation [2018-11-23 12:48:21,522 WARN L170 areAnnotationChecker]: L1273 has no Hoare annotation [2018-11-23 12:48:21,522 WARN L170 areAnnotationChecker]: L1273 has no Hoare annotation [2018-11-23 12:48:21,522 WARN L170 areAnnotationChecker]: L1290 has no Hoare annotation [2018-11-23 12:48:21,522 WARN L170 areAnnotationChecker]: L1290 has no Hoare annotation [2018-11-23 12:48:21,522 WARN L170 areAnnotationChecker]: L1623 has no Hoare annotation [2018-11-23 12:48:21,522 WARN L170 areAnnotationChecker]: L1161 has no Hoare annotation [2018-11-23 12:48:21,522 WARN L170 areAnnotationChecker]: L1163 has no Hoare annotation [2018-11-23 12:48:21,522 WARN L170 areAnnotationChecker]: L1163 has no Hoare annotation [2018-11-23 12:48:21,522 WARN L170 areAnnotationChecker]: L1291 has no Hoare annotation [2018-11-23 12:48:21,522 WARN L170 areAnnotationChecker]: L1291 has no Hoare annotation [2018-11-23 12:48:21,523 WARN L170 areAnnotationChecker]: L1661 has no Hoare annotation [2018-11-23 12:48:21,523 WARN L170 areAnnotationChecker]: L1661 has no Hoare annotation [2018-11-23 12:48:21,523 WARN L170 areAnnotationChecker]: L1170 has no Hoare annotation [2018-11-23 12:48:21,523 WARN L170 areAnnotationChecker]: L1166 has no Hoare annotation [2018-11-23 12:48:21,523 WARN L170 areAnnotationChecker]: L1166 has no Hoare annotation [2018-11-23 12:48:21,523 WARN L170 areAnnotationChecker]: L1662 has no Hoare annotation [2018-11-23 12:48:21,523 WARN L170 areAnnotationChecker]: L1662 has no Hoare annotation [2018-11-23 12:48:21,523 WARN L170 areAnnotationChecker]: L1661-1 has no Hoare annotation [2018-11-23 12:48:21,523 WARN L170 areAnnotationChecker]: L1325 has no Hoare annotation [2018-11-23 12:48:21,523 WARN L170 areAnnotationChecker]: L1325 has no Hoare annotation [2018-11-23 12:48:21,523 WARN L170 areAnnotationChecker]: L1169 has no Hoare annotation [2018-11-23 12:48:21,524 WARN L170 areAnnotationChecker]: L1169 has no Hoare annotation [2018-11-23 12:48:21,524 WARN L170 areAnnotationChecker]: L1663 has no Hoare annotation [2018-11-23 12:48:21,524 WARN L170 areAnnotationChecker]: L1663 has no Hoare annotation [2018-11-23 12:48:21,524 WARN L170 areAnnotationChecker]: L1325-2 has no Hoare annotation [2018-11-23 12:48:21,524 WARN L170 areAnnotationChecker]: L1325-2 has no Hoare annotation [2018-11-23 12:48:21,524 WARN L170 areAnnotationChecker]: L1172 has no Hoare annotation [2018-11-23 12:48:21,524 WARN L170 areAnnotationChecker]: L1172 has no Hoare annotation [2018-11-23 12:48:21,524 WARN L170 areAnnotationChecker]: L1665 has no Hoare annotation [2018-11-23 12:48:21,524 WARN L170 areAnnotationChecker]: L1665 has no Hoare annotation [2018-11-23 12:48:21,524 WARN L170 areAnnotationChecker]: L1663-2 has no Hoare annotation [2018-11-23 12:48:21,525 WARN L170 areAnnotationChecker]: L1663-2 has no Hoare annotation [2018-11-23 12:48:21,525 WARN L170 areAnnotationChecker]: L1176 has no Hoare annotation [2018-11-23 12:48:21,525 WARN L170 areAnnotationChecker]: L1175 has no Hoare annotation [2018-11-23 12:48:21,525 WARN L170 areAnnotationChecker]: L1175 has no Hoare annotation [2018-11-23 12:48:21,525 WARN L170 areAnnotationChecker]: L1674 has no Hoare annotation [2018-11-23 12:48:21,525 WARN L170 areAnnotationChecker]: L1674 has no Hoare annotation [2018-11-23 12:48:21,525 WARN L170 areAnnotationChecker]: L1342 has no Hoare annotation [2018-11-23 12:48:21,525 WARN L170 areAnnotationChecker]: L1342 has no Hoare annotation [2018-11-23 12:48:21,525 WARN L170 areAnnotationChecker]: L1178 has no Hoare annotation [2018-11-23 12:48:21,525 WARN L170 areAnnotationChecker]: L1178 has no Hoare annotation [2018-11-23 12:48:21,526 WARN L170 areAnnotationChecker]: L1342-2 has no Hoare annotation [2018-11-23 12:48:21,526 WARN L170 areAnnotationChecker]: L1342-2 has no Hoare annotation [2018-11-23 12:48:21,526 WARN L170 areAnnotationChecker]: L1182 has no Hoare annotation [2018-11-23 12:48:21,526 WARN L170 areAnnotationChecker]: L1181 has no Hoare annotation [2018-11-23 12:48:21,526 WARN L170 areAnnotationChecker]: L1181 has no Hoare annotation [2018-11-23 12:48:21,526 WARN L170 areAnnotationChecker]: L1352 has no Hoare annotation [2018-11-23 12:48:21,526 WARN L170 areAnnotationChecker]: L1352 has no Hoare annotation [2018-11-23 12:48:21,526 WARN L170 areAnnotationChecker]: L1361 has no Hoare annotation [2018-11-23 12:48:21,526 WARN L170 areAnnotationChecker]: L1361 has no Hoare annotation [2018-11-23 12:48:21,526 WARN L170 areAnnotationChecker]: L1184 has no Hoare annotation [2018-11-23 12:48:21,526 WARN L170 areAnnotationChecker]: L1184 has no Hoare annotation [2018-11-23 12:48:21,527 WARN L170 areAnnotationChecker]: L1352-2 has no Hoare annotation [2018-11-23 12:48:21,527 WARN L170 areAnnotationChecker]: L1361-2 has no Hoare annotation [2018-11-23 12:48:21,527 WARN L170 areAnnotationChecker]: L1365 has no Hoare annotation [2018-11-23 12:48:21,527 WARN L170 areAnnotationChecker]: L1365 has no Hoare annotation [2018-11-23 12:48:21,527 WARN L170 areAnnotationChecker]: L1188 has no Hoare annotation [2018-11-23 12:48:21,527 WARN L170 areAnnotationChecker]: L1187 has no Hoare annotation [2018-11-23 12:48:21,527 WARN L170 areAnnotationChecker]: L1187 has no Hoare annotation [2018-11-23 12:48:21,527 WARN L170 areAnnotationChecker]: L1377 has no Hoare annotation [2018-11-23 12:48:21,527 WARN L170 areAnnotationChecker]: L1377 has no Hoare annotation [2018-11-23 12:48:21,527 WARN L170 areAnnotationChecker]: L1190 has no Hoare annotation [2018-11-23 12:48:21,528 WARN L170 areAnnotationChecker]: L1190 has no Hoare annotation [2018-11-23 12:48:21,528 WARN L170 areAnnotationChecker]: L1377-2 has no Hoare annotation [2018-11-23 12:48:21,528 WARN L170 areAnnotationChecker]: L1194 has no Hoare annotation [2018-11-23 12:48:21,528 WARN L170 areAnnotationChecker]: L1193 has no Hoare annotation [2018-11-23 12:48:21,528 WARN L170 areAnnotationChecker]: L1193 has no Hoare annotation [2018-11-23 12:48:21,528 WARN L170 areAnnotationChecker]: L1382 has no Hoare annotation [2018-11-23 12:48:21,528 WARN L170 areAnnotationChecker]: L1382 has no Hoare annotation [2018-11-23 12:48:21,528 WARN L170 areAnnotationChecker]: L1423 has no Hoare annotation [2018-11-23 12:48:21,528 WARN L170 areAnnotationChecker]: L1423 has no Hoare annotation [2018-11-23 12:48:21,528 WARN L170 areAnnotationChecker]: L1196 has no Hoare annotation [2018-11-23 12:48:21,528 WARN L170 areAnnotationChecker]: L1196 has no Hoare annotation [2018-11-23 12:48:21,529 WARN L170 areAnnotationChecker]: L1399 has no Hoare annotation [2018-11-23 12:48:21,529 WARN L170 areAnnotationChecker]: L1385 has no Hoare annotation [2018-11-23 12:48:21,529 WARN L170 areAnnotationChecker]: L1385 has no Hoare annotation [2018-11-23 12:48:21,529 WARN L170 areAnnotationChecker]: L1424 has no Hoare annotation [2018-11-23 12:48:21,529 WARN L170 areAnnotationChecker]: L1424 has no Hoare annotation [2018-11-23 12:48:21,529 WARN L170 areAnnotationChecker]: L1200 has no Hoare annotation [2018-11-23 12:48:21,529 WARN L170 areAnnotationChecker]: L1199 has no Hoare annotation [2018-11-23 12:48:21,529 WARN L170 areAnnotationChecker]: L1199 has no Hoare annotation [2018-11-23 12:48:21,529 WARN L170 areAnnotationChecker]: L1401 has no Hoare annotation [2018-11-23 12:48:21,529 WARN L170 areAnnotationChecker]: L1401 has no Hoare annotation [2018-11-23 12:48:21,530 WARN L170 areAnnotationChecker]: L1388 has no Hoare annotation [2018-11-23 12:48:21,530 WARN L170 areAnnotationChecker]: L1388 has no Hoare annotation [2018-11-23 12:48:21,530 WARN L170 areAnnotationChecker]: L1425 has no Hoare annotation [2018-11-23 12:48:21,530 WARN L170 areAnnotationChecker]: L1425 has no Hoare annotation [2018-11-23 12:48:21,530 WARN L170 areAnnotationChecker]: L1433 has no Hoare annotation [2018-11-23 12:48:21,530 WARN L170 areAnnotationChecker]: L1465 has no Hoare annotation [2018-11-23 12:48:21,530 WARN L170 areAnnotationChecker]: L1465 has no Hoare annotation [2018-11-23 12:48:21,530 WARN L170 areAnnotationChecker]: L1202 has no Hoare annotation [2018-11-23 12:48:21,530 WARN L170 areAnnotationChecker]: L1202 has no Hoare annotation [2018-11-23 12:48:21,530 WARN L170 areAnnotationChecker]: L1388-1 has no Hoare annotation [2018-11-23 12:48:21,530 WARN L170 areAnnotationChecker]: L1389 has no Hoare annotation [2018-11-23 12:48:21,531 WARN L170 areAnnotationChecker]: L1389 has no Hoare annotation [2018-11-23 12:48:21,531 WARN L170 areAnnotationChecker]: L1434 has no Hoare annotation [2018-11-23 12:48:21,531 WARN L170 areAnnotationChecker]: L1434 has no Hoare annotation [2018-11-23 12:48:21,531 WARN L170 areAnnotationChecker]: L1203 has no Hoare annotation [2018-11-23 12:48:21,531 WARN L170 areAnnotationChecker]: L1203 has no Hoare annotation [2018-11-23 12:48:21,531 WARN L170 areAnnotationChecker]: L1205 has no Hoare annotation [2018-11-23 12:48:21,531 WARN L170 areAnnotationChecker]: L1205 has no Hoare annotation [2018-11-23 12:48:21,531 WARN L170 areAnnotationChecker]: L1392 has no Hoare annotation [2018-11-23 12:48:21,531 WARN L170 areAnnotationChecker]: L1392 has no Hoare annotation [2018-11-23 12:48:21,531 WARN L170 areAnnotationChecker]: L1435 has no Hoare annotation [2018-11-23 12:48:21,532 WARN L170 areAnnotationChecker]: L1435 has no Hoare annotation [2018-11-23 12:48:21,532 WARN L170 areAnnotationChecker]: L1443 has no Hoare annotation [2018-11-23 12:48:21,532 WARN L170 areAnnotationChecker]: L1478 has no Hoare annotation [2018-11-23 12:48:21,532 WARN L170 areAnnotationChecker]: L1478 has no Hoare annotation [2018-11-23 12:48:21,532 WARN L170 areAnnotationChecker]: L1475-1 has no Hoare annotation [2018-11-23 12:48:21,532 WARN L170 areAnnotationChecker]: L1209 has no Hoare annotation [2018-11-23 12:48:21,532 WARN L170 areAnnotationChecker]: L1208 has no Hoare annotation [2018-11-23 12:48:21,532 WARN L170 areAnnotationChecker]: L1208 has no Hoare annotation [2018-11-23 12:48:21,532 WARN L170 areAnnotationChecker]: L1393 has no Hoare annotation [2018-11-23 12:48:21,532 WARN L170 areAnnotationChecker]: L1393 has no Hoare annotation [2018-11-23 12:48:21,532 WARN L170 areAnnotationChecker]: L1446 has no Hoare annotation [2018-11-23 12:48:21,533 WARN L170 areAnnotationChecker]: L1446 has no Hoare annotation [2018-11-23 12:48:21,533 WARN L170 areAnnotationChecker]: L1493 has no Hoare annotation [2018-11-23 12:48:21,533 WARN L170 areAnnotationChecker]: L1493 has no Hoare annotation [2018-11-23 12:48:21,533 WARN L170 areAnnotationChecker]: L1211 has no Hoare annotation [2018-11-23 12:48:21,533 WARN L170 areAnnotationChecker]: L1211 has no Hoare annotation [2018-11-23 12:48:21,533 WARN L170 areAnnotationChecker]: L1393-2 has no Hoare annotation [2018-11-23 12:48:21,533 WARN L170 areAnnotationChecker]: L1393-2 has no Hoare annotation [2018-11-23 12:48:21,533 WARN L170 areAnnotationChecker]: L1498 has no Hoare annotation [2018-11-23 12:48:21,533 WARN L170 areAnnotationChecker]: L1498 has no Hoare annotation [2018-11-23 12:48:21,533 WARN L170 areAnnotationChecker]: L1215 has no Hoare annotation [2018-11-23 12:48:21,533 WARN L170 areAnnotationChecker]: L1214 has no Hoare annotation [2018-11-23 12:48:21,534 WARN L170 areAnnotationChecker]: L1214 has no Hoare annotation [2018-11-23 12:48:21,534 WARN L170 areAnnotationChecker]: L1502 has no Hoare annotation [2018-11-23 12:48:21,534 WARN L170 areAnnotationChecker]: L1502 has no Hoare annotation [2018-11-23 12:48:21,534 WARN L170 areAnnotationChecker]: L1514 has no Hoare annotation [2018-11-23 12:48:21,534 WARN L170 areAnnotationChecker]: L1514 has no Hoare annotation [2018-11-23 12:48:21,534 WARN L170 areAnnotationChecker]: L1217 has no Hoare annotation [2018-11-23 12:48:21,534 WARN L170 areAnnotationChecker]: L1217 has no Hoare annotation [2018-11-23 12:48:21,534 WARN L170 areAnnotationChecker]: L1221 has no Hoare annotation [2018-11-23 12:48:21,534 WARN L170 areAnnotationChecker]: L1220 has no Hoare annotation [2018-11-23 12:48:21,534 WARN L170 areAnnotationChecker]: L1220 has no Hoare annotation [2018-11-23 12:48:21,535 WARN L170 areAnnotationChecker]: L1525 has no Hoare annotation [2018-11-23 12:48:21,535 WARN L170 areAnnotationChecker]: L1525 has no Hoare annotation [2018-11-23 12:48:21,535 WARN L170 areAnnotationChecker]: L1223 has no Hoare annotation [2018-11-23 12:48:21,535 WARN L170 areAnnotationChecker]: L1223 has no Hoare annotation [2018-11-23 12:48:21,535 WARN L170 areAnnotationChecker]: L1227 has no Hoare annotation [2018-11-23 12:48:21,535 WARN L170 areAnnotationChecker]: L1226 has no Hoare annotation [2018-11-23 12:48:21,535 WARN L170 areAnnotationChecker]: L1226 has no Hoare annotation [2018-11-23 12:48:21,535 WARN L170 areAnnotationChecker]: L1536 has no Hoare annotation [2018-11-23 12:48:21,535 WARN L170 areAnnotationChecker]: L1536 has no Hoare annotation [2018-11-23 12:48:21,535 WARN L170 areAnnotationChecker]: L1229 has no Hoare annotation [2018-11-23 12:48:21,535 WARN L170 areAnnotationChecker]: L1229 has no Hoare annotation [2018-11-23 12:48:21,536 WARN L170 areAnnotationChecker]: L1541 has no Hoare annotation [2018-11-23 12:48:21,536 WARN L170 areAnnotationChecker]: L1541 has no Hoare annotation [2018-11-23 12:48:21,536 WARN L170 areAnnotationChecker]: L1233 has no Hoare annotation [2018-11-23 12:48:21,536 WARN L170 areAnnotationChecker]: L1232 has no Hoare annotation [2018-11-23 12:48:21,536 WARN L170 areAnnotationChecker]: L1232 has no Hoare annotation [2018-11-23 12:48:21,536 WARN L170 areAnnotationChecker]: L1541-2 has no Hoare annotation [2018-11-23 12:48:21,536 WARN L170 areAnnotationChecker]: L1551 has no Hoare annotation [2018-11-23 12:48:21,536 WARN L170 areAnnotationChecker]: L1551 has no Hoare annotation [2018-11-23 12:48:21,536 WARN L170 areAnnotationChecker]: L1235 has no Hoare annotation [2018-11-23 12:48:21,536 WARN L170 areAnnotationChecker]: L1235 has no Hoare annotation [2018-11-23 12:48:21,537 WARN L170 areAnnotationChecker]: L1558 has no Hoare annotation [2018-11-23 12:48:21,537 WARN L170 areAnnotationChecker]: L1558 has no Hoare annotation [2018-11-23 12:48:21,537 WARN L170 areAnnotationChecker]: L1239 has no Hoare annotation [2018-11-23 12:48:21,537 WARN L170 areAnnotationChecker]: L1238 has no Hoare annotation [2018-11-23 12:48:21,537 WARN L170 areAnnotationChecker]: L1238 has no Hoare annotation [2018-11-23 12:48:21,537 WARN L170 areAnnotationChecker]: L1561-2 has no Hoare annotation [2018-11-23 12:48:21,537 WARN L170 areAnnotationChecker]: L1561-2 has no Hoare annotation [2018-11-23 12:48:21,537 WARN L170 areAnnotationChecker]: L1561 has no Hoare annotation [2018-11-23 12:48:21,537 WARN L170 areAnnotationChecker]: L1561 has no Hoare annotation [2018-11-23 12:48:21,537 WARN L170 areAnnotationChecker]: L1584 has no Hoare annotation [2018-11-23 12:48:21,537 WARN L170 areAnnotationChecker]: L1584 has no Hoare annotation [2018-11-23 12:48:21,538 WARN L170 areAnnotationChecker]: L1241 has no Hoare annotation [2018-11-23 12:48:21,538 WARN L170 areAnnotationChecker]: L1241 has no Hoare annotation [2018-11-23 12:48:21,538 WARN L170 areAnnotationChecker]: L1574 has no Hoare annotation [2018-11-23 12:48:21,538 WARN L170 areAnnotationChecker]: L1574 has no Hoare annotation [2018-11-23 12:48:21,538 WARN L170 areAnnotationChecker]: L1585 has no Hoare annotation [2018-11-23 12:48:21,538 WARN L170 areAnnotationChecker]: L1585 has no Hoare annotation [2018-11-23 12:48:21,538 WARN L170 areAnnotationChecker]: L1589 has no Hoare annotation [2018-11-23 12:48:21,538 WARN L170 areAnnotationChecker]: L1589 has no Hoare annotation [2018-11-23 12:48:21,538 WARN L170 areAnnotationChecker]: L1242 has no Hoare annotation [2018-11-23 12:48:21,538 WARN L170 areAnnotationChecker]: L1245 has no Hoare annotation [2018-11-23 12:48:21,539 WARN L170 areAnnotationChecker]: L1595 has no Hoare annotation [2018-11-23 12:48:21,539 WARN L170 areAnnotationChecker]: L1595 has no Hoare annotation [2018-11-23 12:48:21,539 WARN L170 areAnnotationChecker]: L1605 has no Hoare annotation [2018-11-23 12:48:21,539 WARN L170 areAnnotationChecker]: L1605 has no Hoare annotation [2018-11-23 12:48:21,539 WARN L170 areAnnotationChecker]: L1595-2 has no Hoare annotation [2018-11-23 12:48:21,539 WARN L170 areAnnotationChecker]: L1609 has no Hoare annotation [2018-11-23 12:48:21,539 WARN L170 areAnnotationChecker]: L1609 has no Hoare annotation [2018-11-23 12:48:21,539 WARN L170 areAnnotationChecker]: L1605-1 has no Hoare annotation [2018-11-23 12:48:21,540 INFO L163 areAnnotationChecker]: CFG has 0 edges. 0 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2018-11-23 12:48:21,543 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 12:48:21 BoogieIcfgContainer [2018-11-23 12:48:21,543 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 12:48:21,543 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 12:48:21,543 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 12:48:21,543 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 12:48:21,544 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:46:49" (3/4) ... [2018-11-23 12:48:21,548 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-23 12:48:21,548 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 12:48:21,549 INFO L168 Benchmark]: Toolchain (without parser) took 96477.62 ms. Allocated memory was 1.5 GB in the beginning and 2.9 GB in the end (delta: 1.4 GB). Free memory was 1.4 GB in the beginning and 1.8 GB in the end (delta: -388.8 MB). Peak memory consumption was 1.0 GB. Max. memory is 7.1 GB. [2018-11-23 12:48:21,550 INFO L168 Benchmark]: CDTParser took 0.22 ms. Allocated memory is still 1.5 GB. Free memory is still 1.4 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-11-23 12:48:21,551 INFO L168 Benchmark]: CACSL2BoogieTranslator took 982.97 ms. Allocated memory was 1.5 GB in the beginning and 2.3 GB in the end (delta: 753.4 MB). Free memory was 1.4 GB in the beginning and 2.2 GB in the end (delta: -795.1 MB). Peak memory consumption was 51.8 MB. Max. memory is 7.1 GB. [2018-11-23 12:48:21,551 INFO L168 Benchmark]: Boogie Procedure Inliner took 54.25 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 14.3 MB). Peak memory consumption was 14.3 MB. Max. memory is 7.1 GB. [2018-11-23 12:48:21,552 INFO L168 Benchmark]: Boogie Preprocessor took 130.34 ms. Allocated memory is still 2.3 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-11-23 12:48:21,552 INFO L168 Benchmark]: RCFGBuilder took 3332.23 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.0 GB in the end (delta: 154.0 MB). Peak memory consumption was 154.0 MB. Max. memory is 7.1 GB. [2018-11-23 12:48:21,552 INFO L168 Benchmark]: TraceAbstraction took 91967.07 ms. Allocated memory was 2.3 GB in the beginning and 2.9 GB in the end (delta: 638.1 MB). Free memory was 2.0 GB in the beginning and 1.8 GB in the end (delta: 237.9 MB). Peak memory consumption was 876.0 MB. Max. memory is 7.1 GB. [2018-11-23 12:48:21,553 INFO L168 Benchmark]: Witness Printer took 5.26 ms. Allocated memory is still 2.9 GB. Free memory is still 1.8 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-11-23 12:48:21,556 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - GenericResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.22 ms. Allocated memory is still 1.5 GB. Free memory is still 1.4 GB. There was no memory consumed. Max. memory is 7.1 GB. * CACSL2BoogieTranslator took 982.97 ms. Allocated memory was 1.5 GB in the beginning and 2.3 GB in the end (delta: 753.4 MB). Free memory was 1.4 GB in the beginning and 2.2 GB in the end (delta: -795.1 MB). Peak memory consumption was 51.8 MB. Max. memory is 7.1 GB. * Boogie Procedure Inliner took 54.25 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 14.3 MB). Peak memory consumption was 14.3 MB. Max. memory is 7.1 GB. * Boogie Preprocessor took 130.34 ms. Allocated memory is still 2.3 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 7.1 GB. * RCFGBuilder took 3332.23 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.0 GB in the end (delta: 154.0 MB). Peak memory consumption was 154.0 MB. Max. memory is 7.1 GB. * TraceAbstraction took 91967.07 ms. Allocated memory was 2.3 GB in the beginning and 2.9 GB in the end (delta: 638.1 MB). Free memory was 2.0 GB in the beginning and 1.8 GB in the end (delta: 237.9 MB). Peak memory consumption was 876.0 MB. Max. memory is 7.1 GB. * Witness Printer took 5.26 ms. Allocated memory is still 2.9 GB. Free memory is still 1.8 GB. There was no memory consumed. Max. memory is 7.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 24586 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 24588 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - UnprovableResult [Line: 1702]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of bitwiseAnd at line 1121. Possible FailurePath: [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=24607, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={24587:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) [L1074] s->state = 8464 VAL [init=1, malloc(sizeof(SSL))={24596:0}, malloc(sizeof(SSL_CTX))={24609:0}, malloc(sizeof(SSL_SESSION))={24578:0}, malloc(sizeof(struct ssl3_state_st))={24603:0}, s={24596:0}, SSLv3_server_data={24587:0}] [L1075] CALL ssl3_accept(s) VAL [init=1, s={24596:0}, SSLv3_server_data={24587:0}] [L1081] BUF_MEM *buf ; [L1082] unsigned long l ; [L1083] unsigned long Time ; [L1084] unsigned long tmp ; [L1085] void (*cb)() ; [L1086] long num1 ; [L1087] int ret ; [L1088] int new_state ; [L1089] int state ; [L1090] int skip ; [L1091] int got_new_session ; [L1092] int tmp___1 = __VERIFIER_nondet_int() ; [L1093] int tmp___2 = __VERIFIER_nondet_int() ; [L1094] int tmp___3 = __VERIFIER_nondet_int() ; [L1095] int tmp___4 = __VERIFIER_nondet_int() ; [L1096] int tmp___5 = __VERIFIER_nondet_int() ; [L1097] int tmp___6 = __VERIFIER_nondet_int() ; [L1098] int tmp___7 ; [L1099] long tmp___8 = __VERIFIER_nondet_long() ; [L1100] int tmp___9 = __VERIFIER_nondet_int() ; [L1101] int tmp___10 = __VERIFIER_nondet_int() ; [L1102] int blastFlag ; [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] tmp = __VERIFIER_nondet_int() [L1110] Time = tmp [L1111] cb = (void (*)())((void *)0) [L1112] ret = -1 [L1113] skip = 0 [L1114] got_new_session = 0 [L1115] EXPR s->info_callback VAL [={0:0}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->info_callback={2:-1}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1115] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1116] EXPR s->info_callback [L1116] cb = s->info_callback [L1120] EXPR s->in_handshake [L1120] s->in_handshake += 1 [L1121] COND FALSE !(tmp___1 & 12288) VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1130] EXPR s->cert VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->cert={3:-2}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1130] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND TRUE s->state == 8464 [L1323] s->shutdown = 0 [L1324] ret = __VERIFIER_nondet_int() [L1325] COND TRUE blastFlag == 0 [L1326] blastFlag = 1 VAL [={2:-1}, blastFlag=1, got_new_session=0, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1330] COND FALSE !(ret <= 0) [L1335] got_new_session = 1 [L1336] s->state = 8496 [L1337] s->init_num = 0 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] EXPR s->s3 [L1661] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24598, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->s3={24603:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1690] skip = 0 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND TRUE s->state == 8496 [L1341] ret = __VERIFIER_nondet_int() [L1342] COND TRUE blastFlag == 1 [L1343] blastFlag = 2 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1347] COND FALSE !(ret <= 0) [L1352] s->hit VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->hit=1, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1352] COND TRUE s->hit [L1353] s->state = 8656 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1357] s->init_num = 0 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] EXPR s->s3 [L1661] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24598, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->s3={24603:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1690] skip = 0 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1190] COND FALSE !(s->state == 8544) [L1193] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1193] COND FALSE !(s->state == 8545) [L1196] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1196] COND FALSE !(s->state == 8560) [L1199] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1199] COND FALSE !(s->state == 8561) [L1202] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1202] COND FALSE !(s->state == 8448) [L1205] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1205] COND FALSE !(s->state == 8576) [L1208] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1208] COND FALSE !(s->state == 8577) [L1211] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1211] COND FALSE !(s->state == 8592) [L1214] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1214] COND FALSE !(s->state == 8593) [L1217] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1217] COND FALSE !(s->state == 8608) [L1220] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1220] COND FALSE !(s->state == 8609) [L1223] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1223] COND FALSE !(s->state == 8640) [L1226] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1226] COND FALSE !(s->state == 8641) [L1229] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1229] COND TRUE s->state == 8656 [L1550] EXPR s->session [L1550] EXPR s->s3 [L1550] EXPR (s->s3)->tmp.new_cipher [L1550] (s->session)->cipher = (s->s3)->tmp.new_cipher [L1551] COND FALSE !(! tmp___9) [L1557] ret = __VERIFIER_nondet_int() [L1558] COND TRUE blastFlag == 2 [L1559] blastFlag = 4 VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1567] COND FALSE !(ret <= 0) [L1572] s->state = 8672 [L1573] s->init_num = 0 VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1574] COND FALSE !(! tmp___10) VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] EXPR s->s3 [L1661] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24598, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->s3={24603:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1690] skip = 0 VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1190] COND FALSE !(s->state == 8544) [L1193] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1193] COND FALSE !(s->state == 8545) [L1196] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1196] COND FALSE !(s->state == 8560) [L1199] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1199] COND FALSE !(s->state == 8561) [L1202] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1202] COND FALSE !(s->state == 8448) [L1205] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1205] COND FALSE !(s->state == 8576) [L1208] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1208] COND FALSE !(s->state == 8577) [L1211] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1211] COND FALSE !(s->state == 8592) [L1214] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1214] COND FALSE !(s->state == 8593) [L1217] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1217] COND FALSE !(s->state == 8608) [L1220] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1220] COND FALSE !(s->state == 8609) [L1223] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1223] COND FALSE !(s->state == 8640) [L1226] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1226] COND FALSE !(s->state == 8641) [L1229] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1229] COND FALSE !(s->state == 8656) [L1232] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1232] COND FALSE !(s->state == 8657) [L1235] EXPR s->state VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1235] COND TRUE s->state == 8672 [L1583] ret = __VERIFIER_nondet_int() [L1584] COND TRUE blastFlag == 4 VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=0, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1702] __VERIFIER_error() VAL [={2:-1}, blastFlag=4, got_new_session=1, init=1, ret=0, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 4 procedures, 154 locations, 1 error locations. UNSAFE Result, 91.8s OverallTime, 36 OverallIterations, 4 TraceHistogramMax, 67.9s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 6806 SDtfs, 1900 SDslu, 9768 SDs, 0 SdLazy, 6239 SolverSat, 305 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 10.7s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 238 GetRequests, 70 SyntacticMatches, 66 SemanticMatches, 102 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 5.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=485occurred in iteration=35, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 5.6s AutomataMinimizationTime, 35 MinimizatonAttempts, 821 StatesRemovedByMinimization, 34 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 12.7s InterpolantComputationTime, 3240 NumberOfCodeBlocks, 3240 NumberOfCodeBlocksAsserted, 36 NumberOfCheckSat, 3074 ConstructedInterpolants, 0 QuantifiedInterpolants, 772152 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 35 InterpolantComputations, 35 PerfectInterpolantSequences, 1434/1434 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request...